370Z CAN Bus Proprietary PID's

Knio · 12-12-2018, 02:58 AM

Quote:

Originally Posted by dts3

I just want to add a little info to this. Nothing truly helpful; just something I noticed. I have a manual base model (no rev matching) and I REALLY want to plot my current gear against other data.

I noticed that in all of my logs that I never receive any messages with id 0x421 (what's supposed to contain this data). Looking at the spreadsheet, I see that this message also transmits the S-Mode status. I remember a post I read a while back about adding rev matching to a base model, and two of the things needed are a gear position sensor and a new ECU. Given that I don't have the proper ECU (or even the actual sensor!), this has to be the reason that this message isn't on the bus. Just a heads-up to anyone with a base model trying to sniff out the CAN bus.

Yup, the base model does not have the gear position sensor. You could always do what my motorbike does and compute the ratio between the RPM and rear wheel speeds to look up the gear. Only works when moving and clutch engaged though.

jax4557 · 12-14-2018, 12:03 AM

I am starting to use an app called "realdash" for a replacement gauge cluster in my Z and have been looking into the canbus as well. I have found most of what I need but I was wondering if anyone has been able to get the message for blinkers left/right, e brake warning, and door ajar? Also, has anyone been able to pop the trunk, roll windows up and down, or alter AC systems through canbus? Thinking about running a tablet in the center with the realdash software with a custom template made only for the above car control functions.

Thanks in advance,

Knio · 12-14-2018, 02:02 AM

Quote:

Originally Posted by jax4557

I am starting to use an app called "realdash" for a replacement gauge cluster in my Z and have been looking into the canbus as well. I have found most of what I need but I was wondering if anyone has been able to get the message for blinkers left/right, e brake warning, and door ajar? Also, has anyone been able to pop the trunk, roll windows up and down, or alter AC systems through canbus? Thinking about running a tablet in the center with the realdash software with a custom template made only for the above car control functions.

Thanks in advance,

The signals for blinkers, doors, and ebrake should be in the spreadsheet under the BCM.

Unfortunately I don’t think you can control anything over CAN because the input switches go directly into the BCM and not over CAN, but I could be wrong there

dts3 · 12-14-2018, 03:38 AM

The signals are indeed in the spreadsheet. The first tab labeled "370 CAN" breaks the messages down as well. As for controlling devices on the bus... I believe that the OP said he was able to control things with some of the PIDs he listed after putting the ECUs into diagnostic mode. I don't remember if it was a forum post or on his blog. OP answered a question of mine not too long ago so he's still active here.

Paul_S · 12-15-2018, 11:08 AM

Quote:

Originally Posted by jax4557

I am starting to use an app called "realdash" for a replacement gauge cluster in my Z and have been looking into the canbus as well. I have found most of what I need but I was wondering if anyone has been able to get the message for blinkers left/right, e brake warning, and door ajar? Also, has anyone been able to pop the trunk, roll windows up and down, or alter AC systems through canbus? Thinking about running a tablet in the center with the realdash software with a custom template made only for the above car control functions.

https://www.youtube.com/watch?v=_13IPpjElL0

Thanks in advance,

Very nice. I've not seen that before.

You might find this project interesting:

https://www.youtube.com/watch?v=_13IPpjElL0

This guy used an Arduino to talk to the canbus and wrote his own Android app to talk to that and control the HVAC.

I'm looking to do something similar myself.

The HVAC won't work on the base model unless you swap out the control unit because the base model one doesn't have canbus control.

dts3 · 12-15-2018, 11:24 AM

Quote:

Originally Posted by Paul_S

Very nice. I've not seen that before.

You might find this project interesting:

https://www.youtube.com/watch?v=_13IPpjElL0

This guy used an Arduino to talk to the canbus and wrote his own Android app to talk to that and control the HVAC.

I'm looking to do something similar myself.

The HVAC won't work on the base model unless you swap out the control unit because the base model one doesn't have canbus control.

That looks interesting. I have access to Vector CAN tools so that's what I've been using. I'm currently making a database file (dbc) for the 370 that I'll share when I'm done.

I figured that would be the case regarding the HVAC after seeing things mentioned in the FSM.

jax4557 · 12-16-2018, 11:00 PM

I don't mind swapping the module if needed to talk AC via canbus but not sure what the commands are for the AC. They don't seem to be in the system.

Quote:

Originally Posted by Paul_S

Very nice. I've not seen that before.

You might find this project interesting:

https://www.youtube.com/watch?v=_13IPpjElL0

This guy used an Arduino to talk to the canbus and wrote his own Android app to talk to that and control the HVAC.

I'm looking to do something similar myself.

The HVAC won't work on the base model unless you swap out the control unit because the base model one doesn't have canbus control.

Paul_S · 12-17-2018, 04:47 AM

Quote:

Originally Posted by jax4557

I don't mind swapping the module if needed to talk AC via canbus but not sure what the commands are for the AC. They don't seem to be in the system.

I've not checked into this in detail yet, but if you read the comments on the YouTube vid you'll see some links to all the source code

dts3 · 05-31-2019, 12:10 AM

Quote:

Originally Posted by Knio

The signals for blinkers, doors, and ebrake should be in the spreadsheet under the BCM.

Unfortunately I don’t think you can control anything over CAN because the input switches go directly into the BCM and not over CAN, but I could be wrong there

I just successfully locked/unlocked my doors over CAN based on the OP's posts and blog. This is basically repeating what he's already done. The following 3 CAN messages were sent to address 0x745:

02 10 c0 00 00 00 00 00
Enter the diagnostic session that allows us to issue service 0x30 requests (which allows commanding of the BCM)

02 3e 80 00 00 00 00 00
Tester Present. I'm sending it periodically every 2.5 seconds to keep the ECU from dropping out of the diagnostic session that I put it in.

04 30 05 00 01 00 00 00
The command to lock/unlock the doors. He's explained in the blog and in this thread what the parameters to this command mean, so I will not repost
all of that

dts3 · 05-31-2019, 12:38 AM

As it turns out, I did not need to periodically issue the Tester Present request. I just looked at the CAN log again and the Tester Present messages always returned a NRC code of 0x22 (which is "conditionsNotCorrect") so that can probably be left out.

s200bym · 06-20-2019, 04:57 PM

Quote:

Originally Posted by dts3

I just successfully locked/unlocked my doors over CAN based on the OP's posts and blog. This is basically repeating what he's already done. The following 3 CAN messages were sent to address 0x745:

02 10 c0 00 00 00 00 00
Enter the diagnostic session that allows us to issue service 0x30 requests (which allows commanding of the BCM)

02 3e 80 00 00 00 00 00
Tester Present. I'm sending it periodically every 2.5 seconds to keep the ECU from dropping out of the diagnostic session that I put it in.

04 30 05 00 01 00 00 00
The command to lock/unlock the doors. He's explained in the blog and in this thread what the parameters to this command mean, so I will not repost
all of that

Hi,

What device are you using to sniff the can bus and what program, please?

Cheers,
Mike.

dts3 · 06-20-2019, 08:04 PM

Quote:

Originally Posted by s200bym

Hi,

What device are you using to sniff the can bus and what program, please?

Cheers,
Mike.

The device is a VN1610 used with CANalyzer software, both from a German company called Vector. I'm lucky because I work in the automotive braking sector, and have access to these tools through work.

dts3 · 06-20-2019, 08:07 PM

I should reiterate that all of the heavy work was done by the OP. I'm basically working off what he's done for now. I have big plans for this, but haven't done anything original yet

s200bym · 06-21-2019, 04:11 PM

Quote:

Originally Posted by dts3

The device is a VN1610 used with CANalyzer software, both from a German company called Vector. I'm lucky because I work in the automotive braking sector, and have access to these tools through work.

Ah ok, That is quite a bit out of my price range.

I am trying to use the USB2CAN device from 8devices on Linux using the canbus utils package but not having any luck sniffing.

dts3 · 06-21-2019, 04:46 PM

Quote:

Originally Posted by s200bym

Ah ok, That is quite a bit out of my price range.

I am trying to use the USB2CAN device from 8devices on Linux using the canbus utils package but not having any luck sniffing.

Yeah I would not have it either if I had to pay for it myself lol. I'm in the process of making a CAN expansion board for the raspberry pi using the microchip mcp25625... Then the fun starts.

12-14-2018, 12:03 AM	#107 (permalink)
jax4557 Base Member Join Date: Nov 2014 Location: Jacksonville Posts: 102 Drives: 2014 370z Sport M6 Rep Power: 11	I am starting to use an app called "realdash" for a replacement gauge cluster in my Z and have been looking into the canbus as well. I have found most of what I need but I was wondering if anyone has been able to get the message for blinkers left/right, e brake warning, and door ajar? Also, has anyone been able to pop the trunk, roll windows up and down, or alter AC systems through canbus? Thinking about running a tablet in the center with the realdash software with a custom template made only for the above car control functions. Thanks in advance, Paul_S and Uxi like this. __________________ BP Precision 6766 - E85 - 620hp / 550tq

12-14-2018, 03:38 AM	#109 (permalink)
dts3 Track Member Join Date: May 2018 Location: Farmington Hills, MI Posts: 599 Drives: 08 Expedition Rep Power: 6765	The signals are indeed in the spreadsheet. The first tab labeled "370 CAN" breaks the messages down as well. As for controlling devices on the bus... I believe that the OP said he was able to control things with some of the PIDs he listed after putting the ECUs into diagnostic mode. I don't remember if it was a forum post or on his blog. OP answered a question of mine not too long ago so he's still active here. Last edited by dts3; 12-15-2018 at 11:21 AM.

05-31-2019, 12:38 AM	#115 (permalink)
dts3 Track Member Join Date: May 2018 Location: Farmington Hills, MI Posts: 599 Drives: 08 Expedition Rep Power: 6765	As it turns out, I did not need to periodically issue the Tester Present request. I just looked at the CAN log again and the Tester Present messages always returned a NRC code of 0x22 (which is "conditionsNotCorrect") so that can probably be left out. Brad370 likes this.

06-20-2019, 08:07 PM	#118 (permalink)
dts3 Track Member Join Date: May 2018 Location: Farmington Hills, MI Posts: 599 Drives: 08 Expedition Rep Power: 6765	I should reiterate that all of the heavy work was done by the OP. I'm basically working off what he's done for now. I have big plans for this, but haven't done anything original yet