There is an onboard app on the flock camera that offers to start a listener on port 8888/9999 and I have yet to explore that.
It's probably the last thing I do before going scorched earth and dumping the boot images via EDL
@rickoooooo linked this blog to me last night and I am going to attempt rooting the camera.
What I really want to see is where the image processing extracts the license plate text and try to pull some bobby tables actions. I have seen SQL references in how the local metadata processes are logging, so I think this could be an interesting defense.