¶ Flir TraffiRadar reverse engineering
I recently got a bunch of Flir TraffiRadar traffic vision cameras with a 24GHz radar.
Manufacturer link:
https://www.flir.de/products/trafiradar/?vertical=public+safety&segment=solutions
The TraffiRadar is a traffic sensor for intersections that can combine visual camera and radar data.
The device consists of a 640x480 pixel ccd camera,
a SmartMicro UMRR-0A Type 29. (stop+advance) microwave radar sensor
and controlling everything is a TX53-8030 Freescale i.MX537, 800 MHz computer on module boardfrom Ka-Ro Electronics GmbH.
Additionaly there is a Powerlinq Co.,Ltd. SM6660-001 powerline modem board for being able to get ethernet connectivity via two AC/DC power cables to the traffic controller cabinet.
The default IP without getting DHCP is: 10.137.101.229
The following ports are open:
PORT STATE SERVICE
21/tcp open ftp
22/tcp open ssh
80/tcp open http
199/tcp open smux
554/tcp open rtsp
ssh -oKexAlgorithms=+diffie-hellman-group1-sha1 root@10.137.101.229
Goals:
- Serial console ✅
- Get root on iMX Linux 🔄
- Get serial data from radar via RS485 ✅
- Decode radar CAN data out of RS485 data 🔄
- Radar protocol implementation 🔄