1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Discovering the iPad interface

Discussion in 'TiVo Underground' started by wmcbrine, Jan 18, 2011.

  1. Jan 18, 2011 #1 of 366
    wmcbrine

    wmcbrine Ziphead

    10,368
    22
    Aug 2, 2003
    Let's see how much I can do without actually having an iPad...

    Nmap against a Series 3:

    PORT STATE SERVICE
    80/tcp open http
    443/tcp open https
    2190/tcp open unknown
    2191/tcp open unknown
    3791/tcp open unknown
    31339/tcp open unknown

    Nmap against a Premiere running 14.7RC7:

    PORT STATE SERVICE
    80/tcp open http
    443/tcp open https
    1390/tcp open iclpv-sc
    1393/tcp open iclpv-nls
    1400/tcp open cadkey-tablet
    1410/tcp open hiq
    1413/tcp open innosys-acl
    2190/tcp open unknown
    2191/tcp open unknown
    8430/tcp open unknown
    31339/tcp open unknown

    FWIW, port 8430 disappeared when I repeated the scan.

    Avahi Zeroconf Browser lists some new services, Premiere only:

    _tivo-mindrpc._tcp
    _tivo-device._tcp

    These are in addition to the existing _tivo-remote._tcp, etc. that other TiVos report. According to this, the "mindrpc" service runs on port 1413. ("tivo-device" just shows as port 80.)

    Perhaps the mindrpc service works like mind.tivo.com?
     
  2. Jan 19, 2011 #2 of 366
    richwiss

    richwiss New Member

    19
    0
    Feb 27, 2003
    Interesting.. I'd love to play with that if I only had a TiVo premiere...
     
  3. Jan 21, 2011 #3 of 366
    innocentfreak

    innocentfreak Active Member

    8,950
    3
    Aug 25, 2001
    Florida
    Well with the iPad app, you can either use it locally with full functionality or remotely with limited functionality so maybe the mindrpc is for commands while outside your local network.
     
  4. Jan 21, 2011 #4 of 366
    tomhorsley

    tomhorsley Active Member

    1,172
    4
    Jul 22, 2010
    What we really need is something with something like a dd-wrt router they can run tcpdump on to monitor all the traffic between the ipad and the tivo. If it isn't encrypted, it should be easy to start deducing the interface (maybe :).
     
  5. Jan 21, 2011 #5 of 366
    windracer

    windracer joined the 10k club

    11,580
    3
    Jan 3, 2003
    St. Pete, FL
    I tried messing around with Wireshark to see if I could capture traffic between my iPad and the Premiere, but don't really know what I'm doing/looking for. If anyone can give me some basic guidance on how to set this up, I'll see if I can contribute.
     
  6. Jan 21, 2011 #6 of 366
    orangeboy

    orangeboy yes, I AM orangeboy!

    4,083
    0
    Apr 19, 2004
    East Moline, IL
    You could setup a filter, something like this:

    Code:
    (ip.src == 192.168.0.60 and ip.dst == 192.168.0.150) or (ip.dst == 192.168.0.60 and ip.src == 192.168.0.150)
    
    Adjust ip addresses accordingly...

    Edit: I seem to recall that Wireshark may not capture the traffic of the different devices unless the NIC on the computer running Wireshark is set to promiscuous mode, and switches are not in between the computer and the target devices...
     
  7. Jan 22, 2011 #7 of 366
    davezatz

    davezatz Funkadelic

    4,588
    3
    Apr 18, 2002
    Northern...
    I'm super busy at the moment (life), but if I can find some time tomorrow I'll set up my promiscuous dumb hub, borrow the wife's laptop (my MBA lacks Ethernet), and see what I can sniff off the wire. No promises though, but it's on my mind (and requested).

    I assume communication to/from TiVo Inc is locked down in some way. But at the very least we should be able to get at some things locally like the scrub bar.
     
  8. Jan 23, 2011 #8 of 366
    km

    km New Member

    82
    0
    Dec 1, 2001
    Atlanta....
    I've been looking for a promiscuous dumb hub. Where did you get it?
     
  9. Jan 23, 2011 #9 of 366
    davezatz

    davezatz Funkadelic

    4,588
    3
    Apr 18, 2002
    Northern...
    Sigh, no work is going to happen today. I grabbed the hub off ebay a couple years back specifically for Ethereal/Wireshark projects. The first one I purchased didn't spew packets all over the place, so I grabbed a second which worked fine. Not sure what model I have, I'm still digging out after the move last month. But it's a small, plain, black no-name brand thing. Probably ran only $10 or $15.

    UPDATE: Went digging through boxes, and this is what I have. I'm pretty sure this is the promiscuous one. Dynex DX-EHB4
     
  10. Jan 24, 2011 #10 of 366
    Worf

    Worf Active Member

    1,990
    4
    Sep 15, 2000
    You know, another option instead of the hub (for those with friendly IT departments or good hunting skills) is a smart or managed switch. Used managed switches from Cisco and HP aren't too hard to find (hint: EOL'd ones that work are perfectly fine) and they're often cheap, and brand new smart switches from Netgear and the like aren't out there either.

    These switches normally have a monitor feature which lets you tap into another port's traffic, so you get all the benefits of a hub, but it switches and you get to see just the port traffic you want.

    And yes, I've had to sniff traffic at GigE speeds. It helps that I only needed a GigE link, and not sniffing at full bandwidth.
     
  11. Jan 24, 2011 #11 of 366
    davezatz

    davezatz Funkadelic

    4,588
    3
    Apr 18, 2002
    Northern...
    Eh, it's small and cheap and my home networking projects/needs are infrequent. I pulled up my ebay receipt - $9.88. Port mirroring is nice, but it usually comes in a larger footprint (if my work gear is any indication). Also, the way I hang a secondary network off my primary one with the dumb hub mostly gives me mostly the same benefits of monitoring a single port.
     
  12. Feb 10, 2011 #12 of 366
    tomm1079

    tomm1079 New Member

    567
    0
    May 10, 2005
    Any further update on this? Would be nice if someone would be able to make a Tivo iPad like app
     
  13. Feb 12, 2011 #13 of 366
    km

    km New Member

    82
    0
    Dec 1, 2001
    Atlanta....
  14. Feb 20, 2011 #14 of 366
    moyekj

    moyekj Well-Known Member

    11,148
    33
    Jan 23, 2006
    Mission...
    My guess is that the interface is SSL encrypted (i.e. uses https), so sniffing the network communication will not yield anything readable. Otherwise I would have expected someone to post about it by now.
     
  15. Feb 20, 2011 #15 of 366
    innocentfreak

    innocentfreak Active Member

    8,950
    3
    Aug 25, 2001
    Florida
    I would think it might also be more the fact that the people who would know what they are doing don't own iPads.

    It is disappointing to see that no one has made any progress though since I would love to see some of this functionality.
     
  16. Feb 20, 2011 #16 of 366
    orangeboy

    orangeboy yes, I AM orangeboy!

    4,083
    0
    Apr 19, 2004
    East Moline, IL
    Yeah, I'm not gonna run out and get an iPad just for the TiVo app. I did however download the app through iTunes (something I did get just for the TiVo app!), and extracted the files to see what I could see. Which amounted to really nothin' of use to me...
     
  17. Feb 20, 2011 #17 of 366
    innocentfreak

    innocentfreak Active Member

    8,950
    3
    Aug 25, 2001
    Florida
    I think Best Buy got rid of their restocking fees so you could always buy and return. ;)

    I would do it, but I would then need a good wifi router to sniff the packets along with a guide for dummies on what I was doing.
     
  18. Feb 20, 2011 #18 of 366
    davezatz

    davezatz Funkadelic

    4,588
    3
    Apr 18, 2002
    Northern...
    Between here and TiVo, Inc I agree it's likely. Between the iPad and my TiVo, I'm not so sure given the previously discussed Creston controls. Sorry I didn't get it done and the loaner iPad is packed up for return.
     
  19. Feb 20, 2011 #19 of 366
    windracer

    windracer joined the 10k club

    11,580
    3
    Jan 3, 2003
    St. Pete, FL
    I tried messing around with WireShark, but I just don't have the necessary equipment to analyze the traffic (or the wherewithal to make any sense of it if I did).
     
  20. Feb 20, 2011 #20 of 366
    davezatz

    davezatz Funkadelic

    4,588
    3
    Apr 18, 2002
    Northern...
    TiVo should just make the api/hooks public. We certainly couldn't do any worse than their parter in i.TV who stores our credentials in the clear and I've previously had scheduling issues with.
     

Share This Page