IP Camera – RTP Streaming Ports Not Showing Open

nmaprtprtsp

I ran nmap on my IP camera to see what ports are open. I see a RTSP port open on port no 554, as expected. However, I do not see any ports open for RTP-RTCP streaming.

Here is the output of nmap:

    PORT      STATE    SERVICE
    22/tcp    filtered ssh
    80/tcp    open     http
    554/tcp   open     rtsp
    8000/tcp  open     http-alt
    8200/tcp  open     trivnet1
    9010/tcp  open     sdr
    9020/tcp  open     tambora
    49152/tcp open     unknown

As I understand, if I send a RTSP command to the RTSP server, I get a SDP or some such presentation providing the port where I can get the RTP/RTCP streams which would be on UDP ports. Is my expectation incorrect? The camera does support H.264, RTSP, RTP, RTCP.

Best Answer

The default nmap options only scan for TCP services (and even then only the top 1000 most common ports).

UDP portscanning is more difficult and therefore not done by default.

Please take a look at for instance the nmap manual for more detail on UDP scanning: https://nmap.org/book/scan-methods-udp-scan.html

Related Solutions

Why can NMAP not show some ports

Are you specifying which ports to scan? be default nmap only scans the known ports for each protocol. From the documentation:

Nmap offers options for specifying which ports are scanned and whether the scan order is randomized or sequential. By default, Nmap scans the most common 1,000 ports for each protocol.

You must specify -p for a wider range:

-p (Only scan specified ports)
This option specifies which ports you want to scan and overrides the default. Individual port numbers are OK, as are ranges separated by a hyphen (e.g. 1-1023). The beginning and/or end values of a range may be omitted, causing Nmap to use 1 and 65535, respectively. So you can specify -p- to scan ports from 1 through 65535. Scanning port zero is allowed if you specify it explicitly. For IP protocol scanning (-sO), this option specifies the protocol numbers you wish to scan for (0–255).

Debian – iptables has port 80 open but nmap shows it closed

From the output of netstat -lnp | grep 80, it seems that your apache server is listening on the port 8080 not the default one 80.

Also, the line:

8080/tcp open  http-proxy

from nmap output confirms this fact.

In summary, the port 80 is not open in your machine as apache is listening on 8080 instead.

Best Answer

Related Solutions

Why can NMAP not show some ports

Debian – iptables has port 80 open but nmap shows it closed

Related Topic