Hi Everyone,
So I have progressed quite a bit with this.

Point 1. The Camera starts up automatically when external power is applied
Point 2. PENDING, I have an old f/w version (170112) where apparently the modified settings are not saved, so setting wifi to ON is forgotten once the camera is turned off.
- Will need to upgarde the firmware to (170228) where this is fixed
- Alternatively an autoexec.ash script could also do the trick probably
Points 3-7. Satisfied with the JSON communications protocol on port 7878, detailed below. Will just need to program a "front_end" to the localhost Web Administration page.
Point 8. PENDING Investigation.
- a WGET through the already integrated HTTP server should be fine, will need to see transfer speeds and so on.
- There apparently is a way to do this through the command interface too. will need to investigate.
Point 9-10. The camera turns off automatically when external power is removed

After Sniffing the Thieye App on the phone with [Packet Capture](https://play.google.com/store/apps/d...lcapture&hl=en) I noticed traffic to 192.168.42.1 on ports UDP 6971, 6970 TCP 554,8787,7878

UDP 6971, 6970 sends some mixed text,binary data but there are no responses
TCP 554 is the rtsp feed, this I can open in VLC to view the stream @ "rtsp://192.168.42.1/live/"
TCP 8787 Only recieves data, what data this is I am not sure.. I am guessing images such as thumbnails...
TCP 7878 Appears to be for the command interface

The message exchange appears to be in JSON format, after googling a bit I stumbled across [a forum post](https://dashcamtalk.com/forum/thread...lin-mac.11206/) linking to the Github project [Xiaomi Yi Camera: GUI Control & Configure from PC (Win/Lin/Mac)](https://github.com/deltaflyer4747/Xiaomi_Yi) typically know in the forums as C&C by deltaflyer4747 from dashcamtalk also known as Andy_S. This and the resources mentioned helped me a be decipher the communications protocol.

Additional Resources:
- [Reverse engineering](http://copter.sovgvd.info/a/Xiaomi-Y...remote-control)
- [AmbaCommandHelper.java from APK 1.5](http://pastebin.com/yKvXyyp8)
- [Untitled](https://pastebin.com/nHA0WDsh)
- [QBIC - API Reverse engineering](https://github.com/vogloblinsky/elmo...engineering.md)

So I opened up a telnet session on port 7878 to 192.168.42.1 with putty and started playing around:

First: you need to send a *token request message* with token = 0

SEND {"msg_id":257,"token":0}
RECV {"rval":0,"msg_id":257,"param":1}

- param hold the token number with which we need to tag all our messages from here onwards in the format
+ {"msg_id":<msg_id>,"token":<token>}
- Messages that are successful have a retrun value *"rval":0*
- unsucessful commands have several negative return values which I have not decifered yet

| Action | msg_id | type | param | reply |
|-----------------------|--------|-------|-------|-------|
| Get Token | 257 | - | - | "param":<valid token> |
| Take Photo | 769 | - | - | "param":"C:\\AMBA\\170625000\\18101900.JPG" |
| Start Recording | 513 | - | - | - |
| Get Record time | 515 | - | - | "param":<seconds> |
| Stop Recording | 514 | - | - | "param":"C:\\AMBA\\170625000\\181631AA.MP4" |
| Check Battery | 13 | - | - | "type":[adapter/battery],"param":[1-5]<level> |
| Check Card Space | 5 |"total"| - | "param":<kBytes> |
| Check Card Space | 5 | "free"| - | "param":<kBytes> |
| Get Cam Config | 3 | - | - | "param":[{key:value},...] |
| Enter Settings Mode | 260 | - | - | - |
| Get Parameter Options | 9 | - | <key> | "param":<key>,"options":[<Accepted values>]} |
| Change Setting | 2 |"<key>"| "<newVal>" | "type":<keyModified> |
| Exit Settings Mode | 259 | - | "none_force" | - |
| List Directory | 1282 | - | "\/tmp\/SD0\/AMBA\/ -D -S" | "listing":[ {"<file_dir name>":"<size> bytes|<date-time>"},..]} |


Return Values encountered:
| Value | Description |
|-------|-------------------|
| 0 | Success |
| -1 | Failed ? |
| -4 | Bad Syntax ? |
| -14 | Not Available ? |
| -23 | Not Implemented ? |

Examples attached in file. port7878cmd_examples.txt

Any feedback/ideas are more than welcome.

Cheers,
Pau

How do you like your T5e so far? I just ordered one and am now playing the waiting game for it to show up so I can try it out. I researched the action cams and seems the T5e is one of the lowest priced cams that actually does 4k video and has decent components with the sony imx117 sensor and ambarella A12 processor.

Hi, sorry for the late reply,
I'm very pleased with the image quality although I must confessed I've only used it at 4k 30fps,
Battery life is pretty good aswell
The only complaint I have till now is that it gets really hot.

Glad it is working well for you. I am still waiting for mine but intend to do a full test on it soon as it shows up. I am already thinking about swapping the fisheye lens for one with about 90 degree angle to eliminate the distortion around the edges. Any chance you can post up a pic of yours so we can see how it does stock?

Here are a couple photos and snapshots of a video of my gate with a simple drawing explaining the setup and a couple measurements.

http://imgur.com/a/QGiG3

Cheers

Thanks for posting up the pics. Other than the fisheye distortion, looks like it does a very good job. Nice detail and balanced colors across picture. I'm looking forward to getting mine in and once I change out the lens to one with a tighter fov, I think it will work great for what I intend to use it for.

Hye, I am planning to buy a ThiEye E7 but only if it allows me to control it via HTTP API. Does anyone here has tried this with the E7?

nutsey paucoma having a bit of trouble getting the command format correct. The examples file is no longer available. Would you mind posting the examples again (or just the format of the HTTP command). Cheers.

Hi everybody, could this work on the T5 edge, which is on iCatch V50 instead of Ambarella chipset?

Quick update: received my T5 edge (icatch v50) camera today. Connected to the wifi with a windows 10 laptop, it generated an IP 192.168.1.10 for the laptop and shown no gateway. Pinging 192.168.1.1 gave a response but couldn't establish a telnet connection.