370Z CAN Bus Proprietary PID's

Knio · 12-14-2018, 01:02 AM

Quote:

Originally Posted by jax4557

I am starting to use an app called "realdash" for a replacement gauge cluster in my Z and have been looking into the canbus as well. I have found most of what I need but I was wondering if anyone has been able to get the message for blinkers left/right, e brake warning, and door ajar? Also, has anyone been able to pop the trunk, roll windows up and down, or alter AC systems through canbus? Thinking about running a tablet in the center with the realdash software with a custom template made only for the above car control functions.

Thanks in advance,

The signals for blinkers, doors, and ebrake should be in the spreadsheet under the BCM.

Unfortunately I don’t think you can control anything over CAN because the input switches go directly into the BCM and not over CAN, but I could be wrong there

dts3 · 05-30-2019, 11:10 PM

Quote:

Originally Posted by Knio

The signals for blinkers, doors, and ebrake should be in the spreadsheet under the BCM.

Unfortunately I don’t think you can control anything over CAN because the input switches go directly into the BCM and not over CAN, but I could be wrong there

I just successfully locked/unlocked my doors over CAN based on the OP's posts and blog. This is basically repeating what he's already done. The following 3 CAN messages were sent to address 0x745:

02 10 c0 00 00 00 00 00
Enter the diagnostic session that allows us to issue service 0x30 requests (which allows commanding of the BCM)

02 3e 80 00 00 00 00 00
Tester Present. I'm sending it periodically every 2.5 seconds to keep the ECU from dropping out of the diagnostic session that I put it in.

04 30 05 00 01 00 00 00
The command to lock/unlock the doors. He's explained in the blog and in this thread what the parameters to this command mean, so I will not repost
all of that

dts3 · 05-30-2019, 11:38 PM

As it turns out, I did not need to periodically issue the Tester Present request. I just looked at the CAN log again and the Tester Present messages always returned a NRC code of 0x22 (which is "conditionsNotCorrect") so that can probably be left out.

s200bym · 06-20-2019, 03:57 PM

Quote:

Originally Posted by dts3

I just successfully locked/unlocked my doors over CAN based on the OP's posts and blog. This is basically repeating what he's already done. The following 3 CAN messages were sent to address 0x745:

02 10 c0 00 00 00 00 00
Enter the diagnostic session that allows us to issue service 0x30 requests (which allows commanding of the BCM)

02 3e 80 00 00 00 00 00
Tester Present. I'm sending it periodically every 2.5 seconds to keep the ECU from dropping out of the diagnostic session that I put it in.

04 30 05 00 01 00 00 00
The command to lock/unlock the doors. He's explained in the blog and in this thread what the parameters to this command mean, so I will not repost
all of that

Hi,

What device are you using to sniff the can bus and what program, please?

Cheers,
Mike.

dts3 · 06-20-2019, 07:04 PM

Quote:

Originally Posted by s200bym

Hi,

What device are you using to sniff the can bus and what program, please?

Cheers,
Mike.

The device is a VN1610 used with CANalyzer software, both from a German company called Vector. I'm lucky because I work in the automotive braking sector, and have access to these tools through work.

s200bym · 06-21-2019, 03:11 PM

Quote:

Originally Posted by dts3

The device is a VN1610 used with CANalyzer software, both from a German company called Vector. I'm lucky because I work in the automotive braking sector, and have access to these tools through work.

Ah ok, That is quite a bit out of my price range.

I am trying to use the USB2CAN device from 8devices on Linux using the canbus utils package but not having any luck sniffing.

dts3 · 06-21-2019, 03:46 PM

Quote:

Originally Posted by s200bym

Ah ok, That is quite a bit out of my price range.

I am trying to use the USB2CAN device from 8devices on Linux using the canbus utils package but not having any luck sniffing.

Yeah I would not have it either if I had to pay for it myself lol. I'm in the process of making a CAN expansion board for the raspberry pi using the microchip mcp25625... Then the fun starts.

s200bym · 06-21-2019, 04:26 PM

Quote:

Originally Posted by dts3

Yeah I would not have it either if I had to pay for it myself lol. I'm in the process of making a CAN expansion board for the raspberry pi using the microchip mcp25625... Then the fun starts.

Will be interesting to see

s200bym · 06-23-2019, 12:54 PM

Quote:

Originally Posted by dts3

I just successfully locked/unlocked my doors over CAN based on the OP's posts and blog. This is basically repeating what he's already done. The following 3 CAN messages were sent to address 0x745:

02 10 c0 00 00 00 00 00
Enter the diagnostic session that allows us to issue service 0x30 requests (which allows commanding of the BCM)

02 3e 80 00 00 00 00 00
Tester Present. I'm sending it periodically every 2.5 seconds to keep the ECU from dropping out of the diagnostic session that I put it in.

04 30 05 00 01 00 00 00
The command to lock/unlock the doors. He's explained in the blog and in this thread what the parameters to this command mean, so I will not repost
all of that

Would you know why I am not getting any results back when I try sniffing on Linux with the USB2Can device?

See link to the original post

Can bus Hacking

Cheers,
Mike.

05-30-2019, 11:38 PM	#3 (permalink)
dts3 Track Member Join Date: May 2018 Location: Farmington Hills, MI Posts: 599 Drives: 08 Expedition Rep Power: 6765	As it turns out, I did not need to periodically issue the Tester Present request. I just looked at the CAN log again and the Tester Present messages always returned a NRC code of 0x22 (which is "conditionsNotCorrect") so that can probably be left out. Brad370 likes this.