0x245 F=64 when stability control activates

Found this in the service manual, the Bosch sensor isn't hooked up to the main CANbus, and is instead relayed through the ABS controller, this probably explains why the signals don't match up exactly with the Bosch datasheets

http://i.imgur.com/Tnk2npx.png

From the link you posted:
"PID Number
Use this value to set the number of the PID that is sent with the request. This value can be one or more bytes in hexadecimal format. For mode 01 PIDs, this value should be a single byte (e.g. 04). For mode 22 PIDs, this value is typically two bytes (e.g. 0200)."

You are trying to use a 2 byte address (111F) so you'll need to use mode 22 instead of mode 01 similar to my post here:

https://projectbytes.wordpress.com/2014/06/29/nissan-370z-custom-pids/


Hopefully that'll fix it.

Just guessing, but:

You might be computing a number that the reader doesn't understand. Just as a check, I'd try A (or A * 1). Probably not the problem, but it's easy to try.

I'd also check and make sure the ECM's response is going to be formatted so that your reader understands it (eg, number of bytes). You may have to adjust settings in reader.

Everything I know about OBD/CAN can be found at the wiki link in my sig. I haven't updated the site in quite some time but what's there should still be valid.


Going by your description of readSaePid, it sounds like it is used to concatenate data, possibly for display purposes. But that's just a guess.

Great project. I am interested in doing some of this on my Nismo Tech.

Has this gone anywhere? I just got my Z last week and I would like to get in on this! I write firmware for brake controller ECUs (nothing for Nissan), so I have a little experience.

Sent from my Pixel XL using Tapatalk

I haven't heard of any further progress on this in a long time, but I think we have a pretty good understanding of the CAN architecture and signals built up. Is there anything specific that you're looking for?

Is the progress being documented somewhere other than this page? Would love to see the PID to see tire pressures, for example.

Brad's dropbox sheet is probably the best documentation. TPMS is CAN ID 385

For what it's worth, I can't seem to get anything meaningful from 0x385. The values always read 4. Everything else I've looked at agrees perfectly with what is there.

Sent from my Pixel XL using Tapatalk

Did you get your tires replaced and not transfer over the sensors?

Sorry, just now seeing this. I'm the second owner so I don't know the state of the sensors. I assumed that I'd get warning lights if they were missing

You would get a warning if they were missing.

Are you driving when reading this? The sensors go to sleep and only start sending values after a minute or so of > some minimum speed. One of the bytes in the 385 signal tells you which sensors are sending valid data.

Thanks for that. I'll pull a CAN log while driving later today and report back.

I made a run and pulled some CAN data for 10 minutes while driving, and sure enough I get the tire pressures on 0x385. Thanks for the tip!

Great work and information here everyone!

I see that you were able to read when a commands like ‘unlock doors’ ‘open trunk’ were issued but has anyone determined how to send the commands over the obd2?

Also, i am aware of how to request pid information to the obd2 (in theory but not in practice yet) but how do you listen to the can bus data?



Sent from my iPhone using Tapatalk

I personally have access to some decent CAN tools through work (write software for braking control ECUs), so I borrowed them one night to pull data. I didn't send any messages, but it's simple with decent tools. What are you working with?

I have to check when i get home, but i believe it is an obd to usb based off the stn1110 chip through a raspberry pi using python


Sent from my iPhone using Tapatalk

I'm not familiar with the CAN solutions on the Pi. Does that just give you raw data? Can you load database files

Im sure there may be a way to work with database files through python but i am not sure how. I can get raw data from the obd2 by sending requests over a serial port. From my understanding of this thread, it seems that it is possible to intercept the CAN data and record what the control systems are sending back and forth. This would allow me to get some of the more interesting data like tire pressures and yaw rate etc.


Sent from my iPhone using Tapatalk

I just dont know how to intercept that CAN data


Sent from my iPhone using Tapatalk

I could be misunderstanding the tools that you're using, but I would assume that the raw data that you're reading over the serial->OBD connection you have is the raw CAN data.

I'm personally using a program called CANalyzer by Vector. It interfaces to a hardware module that plugs into my laptop's USB port and then into the OBD port. I added a screenshot that shows some of the CAN traffic, including the line for the tire pressure from address 0x385. I asked about CAN database files because we could more easily give meaning to the data (Instead of showing 0x385, maybe it would say something like "tpm_ecu") and it can give interpretations of all the bytes of the response message, along with any conversion or scaling

I should probably add that my data doesn't line up completely with the spreadsheet. I have ids that he doesn't list, which I wouldn't think too much about. But he also has ids that I don't see over the course of a ten minute log

I just want to add a little info to this. Nothing truly helpful; just something I noticed. I have a manual base model (no rev matching) and I REALLY want to plot my current gear against other data.

I noticed that in all of my logs that I never receive any messages with id 0x421 (what's supposed to contain this data). Looking at the spreadsheet, I see that this message also transmits the S-Mode status. I remember a post I read a while back about adding rev matching to a base model, and two of the things needed are a gear position sensor and a new ECU. Given that I don't have the proper ECU (or even the actual sensor!), this has to be the reason that this message isn't on the bus. Just a heads-up to anyone with a base model trying to sniff out the CAN bus.

Yup, the base model does not have the gear position sensor. You could always do what my motorbike does and compute the ratio between the RPM and rear wheel speeds to look up the gear. Only works when moving and clutch engaged though.

I am starting to use an app called "realdash" for a replacement gauge cluster in my Z and have been looking into the canbus as well. I have found most of what I need but I was wondering if anyone has been able to get the message for blinkers left/right, e brake warning, and door ajar? Also, has anyone been able to pop the trunk, roll windows up and down, or alter AC systems through canbus? Thinking about running a tablet in the center with the realdash software with a custom template made only for the above car control functions.




Thanks in advance,

The signals for blinkers, doors, and ebrake should be in the spreadsheet under the BCM.

Unfortunately I don’t think you can control anything over CAN because the input switches go directly into the BCM and not over CAN, but I could be wrong there

The signals are indeed in the spreadsheet. The first tab labeled "370 CAN" breaks the messages down as well. As for controlling devices on the bus... I believe that the OP said he was able to control things with some of the PIDs he listed after putting the ECUs into diagnostic mode. I don't remember if it was a forum post or on his blog. OP answered a question of mine not too long ago so he's still active here.

Very nice. I've not seen that before.

You might find this project interesting:

https://www.youtube.com/watch?v=_13IPpjElL0

This guy used an Arduino to talk to the canbus and wrote his own Android app to talk to that and control the HVAC.

I'm looking to do something similar myself.

The HVAC won't work on the base model unless you swap out the control unit because the base model one doesn't have canbus control.

That looks interesting. I have access to Vector CAN tools so that's what I've been using. I'm currently making a database file (dbc) for the 370 that I'll share when I'm done.

I figured that would be the case regarding the HVAC after seeing things mentioned in the FSM.

I don't mind swapping the module if needed to talk AC via canbus but not sure what the commands are for the AC. They don't seem to be in the system.

I've not checked into this in detail yet, but if you read the comments on the YouTube vid you'll see some links to all the source code :)

I just successfully locked/unlocked my doors over CAN based on the OP's posts and blog. This is basically repeating what he's already done. The following 3 CAN messages were sent to address 0x745:

02 10 c0 00 00 00 00 00
Enter the diagnostic session that allows us to issue service 0x30 requests (which allows commanding of the BCM)

02 3e 80 00 00 00 00 00
Tester Present. I'm sending it periodically every 2.5 seconds to keep the ECU from dropping out of the diagnostic session that I put it in.

04 30 05 00 01 00 00 00
The command to lock/unlock the doors. He's explained in the blog and in this thread what the parameters to this command mean, so I will not repost
all of that

As it turns out, I did not need to periodically issue the Tester Present request. I just looked at the CAN log again and the Tester Present messages always returned a NRC code of 0x22 (which is "conditionsNotCorrect") so that can probably be left out.

Hi,

What device are you using to sniff the can bus and what program, please?

Cheers,
Mike.

The device is a VN1610 used with CANalyzer software, both from a German company called Vector. I'm lucky because I work in the automotive braking sector, and have access to these tools through work.

I should reiterate that all of the heavy work was done by the OP. I'm basically working off what he's done for now. I have big plans for this, but haven't done anything original yet

Ah ok, That is quite a bit out of my price range.

I am trying to use the USB2CAN device from 8devices on Linux using the canbus utils package but not having any luck sniffing.

Yeah I would not have it either if I had to pay for it myself lol. I'm in the process of making a CAN expansion board for the raspberry pi using the microchip mcp25625... Then the fun starts.