Terence and others: If you are interested in examining the firmware in greater detailed, please take a look at the squashfs dump from my Sercomm/Sensormatic/ADT iCamera1000. This was binwalk'd from the complete flash dump as generated by executing /adm/flash_dumper.cgi. The www files are located in /usr/local/www. Of particular interest are file.cgi and ez.cgi - ARM ELFs that provide much of the functionality accessible through the web API. Most CGIs simply link to those two files. File: http://www.filedropper.com/icamera1000squashfs_1 I'm currently looking for some insights into how Sercomm builds their firmware update packages.