Is it possible to grabbing Video from USB-C Air Unit Vista Caddx like goggle?

[Veria70]

Hi,
I want to grabbing video data from air unit vista caddx for image processing, i have some question :

1. based on your index.js you use magic hex number, how can i find it for Air Unit ?
2. i root my air unit using wtfos and i searching for something to work :
   ifconfig :
   rndis0 Link encap:Ethernet HWaddr CE:9C:C9:D6:06:A3
   inet addr:192.168.42.2 Bcast:192.168.42.255 Mask:255.255.255.0
   inet6 addr: fe80::cc9c:c9ff:fed6:6a3/64 Scope: Link
   UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
   RX packets:115 errors:0 dropped:4 overruns:0 frame:0
   TX packets:17 errors:0 dropped:0 overruns:0 carrier:0
   collisions:0 txqueuelen:1000
   RX bytes:12456 TX bytes:1866

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope: Host
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1
RX bytes:0 TX bytes:0

dmi_data_ip Link encap:UNSPEC
inet addr:192.168.41.1 P-t-P:192.168.41.1 Mask:255.255.255.0
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:5181 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:500
RX bytes:0 TX bytes:257878

ls -l /system/bin/dji*
-rwxr-xr-x root shell 40140 2022-09-13 03:58 dji_amt
-rwxr-xr-x root shell 35820 2022-09-13 03:58 dji_blackbox
-rwxr-xr-x root shell 3309 2022-09-13 03:58 dji_crashdump.sh
-rwxr-xr-x root shell 38980 2022-09-13 03:58 dji_ftpd
-rwxr-xr-x root shell 34596 2022-09-13 03:58 dji_ftpd_no_enc
-rwxr-xr-x root shell 17992 2022-09-13 03:58 dji_fulldump
-rwxr-xr-x root shell 13896 2022-09-13 03:58 dji_fw_verify
lrwxrwxrwx root root 2025-03-25 16:15 dji_glasses -> /opt/bin/modloader
-rwxr-xr-x root shell 187096 2022-09-13 03:58 dji_hdvt_uav
-rwxr-xr-x root shell 17988 2022-09-13 03:58 dji_kmsg
-rwxr-xr-x root shell 17988 2022-09-13 03:58 dji_mb_ctrl
-rwxr-xr-x root shell 22088 2022-09-13 03:58 dji_mb_parser
-rwxr-xr-x root shell 13892 2022-09-13 03:58 dji_monitor
-rwxr-xr-x root shell 31548 2022-09-13 03:58 dji_sec
-rwxr-xr-x root shell 355 2022-09-13 03:58 dji_setup_uart.sh
-rwxr-xr-x root shell 210964 2022-09-13 03:58 dji_shuttle
-rwxr-xr-x root shell 497 2022-09-13 03:58 dji_sn_ops.sh
-rwxr-xr-x root shell 508 2022-09-13 03:58 dji_state_pro.sh
-rwxr-xr-x root shell 385580 2022-09-13 03:58 dji_sys
-rwxr-xr-x root shell 2357 2022-09-13 03:58 dji_tombstone.sh
-rwxr-xr-x root shell 30100 2022-09-13 03:58 dji_verify

/system/etc/dji.json
---> Attachment

ls -l /dev/dmi*
crw------- root root 10, 40 1970-01-01 00:00 dmi_data_audio
crw------- root root 10, 42 1970-01-01 00:00 dmi_data_video
crw------- root root 10, 39 1970-01-01 00:00 dmi_liveview_store
crw------- root root 10, 47 1970-01-01 00:00 dmi_log_rta7
crw------- root root 10, 50 1970-01-01 00:00 dmi_log_x1643
crw------- root root 10, 49 1970-01-01 00:00 dmi_log_xc4500_0
crw------- root root 10, 48 1970-01-01 00:00 dmi_log_xc4500_1
crw------- root root 10, 41 1970-01-01 00:00 dmi_media_control
crw------- root root 10, 38 1970-01-01 00:00 dmi_media_video
crw------- root root 10, 44 1970-01-01 00:00 dmi_msg_amt_cmd
crw------- root root 10, 43 1970-01-01 00:00 dmi_msg_fcr
crw------- root root 10, 45 1970-01-01 00:00 dmi_msg_local_cmd
crw------- root root 10, 46 1970-01-01 00:00 dmi_msg_remote_cmd

someone help me to solve this puzzle please
Thank you so much

dji.json

[j005u]

The video bulk interface voc-poc works with is very much a goggles feature, it is not supported directly on air units.

Unfourtunitely all video is handled by the modem RTOS and getting it into Linux userspace will be non trivial.

[Veria70]

in new version of Air Unit with feature to save video in sd-card like DJI Air Unit O3 or O4, is it possible to grabbing live video data in Linux userspace? do you test it or can you guide me to find out way?

[j005u]

We don't have root for O3 or O4.

You can probably do this on an original Air Unit by hooking the DVR stream, sure.

It will probably be either in dji_hdvt_uav or dji_shuttle. You will need to reverse engineer the binaries and add hooks via LD_PRELOAD to dump the stream.