370Z CAN Bus Proprietary PID's

jax4557 · 12-13-2018, 11:03 PM

I am starting to use an app called "realdash" for a replacement gauge cluster in my Z and have been looking into the canbus as well. I have found most of what I need but I was wondering if anyone has been able to get the message for blinkers left/right, e brake warning, and door ajar? Also, has anyone been able to pop the trunk, roll windows up and down, or alter AC systems through canbus? Thinking about running a tablet in the center with the realdash software with a custom template made only for the above car control functions.

Thanks in advance,

Knio · 12-14-2018, 01:02 AM

Quote:

Originally Posted by jax4557

I am starting to use an app called "realdash" for a replacement gauge cluster in my Z and have been looking into the canbus as well. I have found most of what I need but I was wondering if anyone has been able to get the message for blinkers left/right, e brake warning, and door ajar? Also, has anyone been able to pop the trunk, roll windows up and down, or alter AC systems through canbus? Thinking about running a tablet in the center with the realdash software with a custom template made only for the above car control functions.

Thanks in advance,

The signals for blinkers, doors, and ebrake should be in the spreadsheet under the BCM.

Unfortunately I don’t think you can control anything over CAN because the input switches go directly into the BCM and not over CAN, but I could be wrong there

dts3 · 05-30-2019, 11:10 PM

Quote:

Originally Posted by Knio

The signals for blinkers, doors, and ebrake should be in the spreadsheet under the BCM.

Unfortunately I don’t think you can control anything over CAN because the input switches go directly into the BCM and not over CAN, but I could be wrong there

I just successfully locked/unlocked my doors over CAN based on the OP's posts and blog. This is basically repeating what he's already done. The following 3 CAN messages were sent to address 0x745:

02 10 c0 00 00 00 00 00
Enter the diagnostic session that allows us to issue service 0x30 requests (which allows commanding of the BCM)

02 3e 80 00 00 00 00 00
Tester Present. I'm sending it periodically every 2.5 seconds to keep the ECU from dropping out of the diagnostic session that I put it in.

04 30 05 00 01 00 00 00
The command to lock/unlock the doors. He's explained in the blog and in this thread what the parameters to this command mean, so I will not repost
all of that

dts3 · 05-30-2019, 11:38 PM

As it turns out, I did not need to periodically issue the Tester Present request. I just looked at the CAN log again and the Tester Present messages always returned a NRC code of 0x22 (which is "conditionsNotCorrect") so that can probably be left out.

s200bym · 06-20-2019, 03:57 PM

Quote:

Originally Posted by dts3

I just successfully locked/unlocked my doors over CAN based on the OP's posts and blog. This is basically repeating what he's already done. The following 3 CAN messages were sent to address 0x745:

02 10 c0 00 00 00 00 00
Enter the diagnostic session that allows us to issue service 0x30 requests (which allows commanding of the BCM)

02 3e 80 00 00 00 00 00
Tester Present. I'm sending it periodically every 2.5 seconds to keep the ECU from dropping out of the diagnostic session that I put it in.

04 30 05 00 01 00 00 00
The command to lock/unlock the doors. He's explained in the blog and in this thread what the parameters to this command mean, so I will not repost
all of that

Hi,

What device are you using to sniff the can bus and what program, please?

Cheers,
Mike.

dts3 · 06-20-2019, 07:04 PM

Quote:

Originally Posted by s200bym

Hi,

What device are you using to sniff the can bus and what program, please?

Cheers,
Mike.

The device is a VN1610 used with CANalyzer software, both from a German company called Vector. I'm lucky because I work in the automotive braking sector, and have access to these tools through work.

s200bym · 06-21-2019, 03:11 PM

Quote:

Originally Posted by dts3

The device is a VN1610 used with CANalyzer software, both from a German company called Vector. I'm lucky because I work in the automotive braking sector, and have access to these tools through work.

Ah ok, That is quite a bit out of my price range.

I am trying to use the USB2CAN device from 8devices on Linux using the canbus utils package but not having any luck sniffing.

dts3 · 06-21-2019, 03:46 PM

Quote:

Originally Posted by s200bym

Ah ok, That is quite a bit out of my price range.

I am trying to use the USB2CAN device from 8devices on Linux using the canbus utils package but not having any luck sniffing.

Yeah I would not have it either if I had to pay for it myself lol. I'm in the process of making a CAN expansion board for the raspberry pi using the microchip mcp25625... Then the fun starts.

s200bym · 06-23-2019, 12:54 PM

Quote:

Originally Posted by dts3

I just successfully locked/unlocked my doors over CAN based on the OP's posts and blog. This is basically repeating what he's already done. The following 3 CAN messages were sent to address 0x745:

02 10 c0 00 00 00 00 00
Enter the diagnostic session that allows us to issue service 0x30 requests (which allows commanding of the BCM)

02 3e 80 00 00 00 00 00
Tester Present. I'm sending it periodically every 2.5 seconds to keep the ECU from dropping out of the diagnostic session that I put it in.

04 30 05 00 01 00 00 00
The command to lock/unlock the doors. He's explained in the blog and in this thread what the parameters to this command mean, so I will not repost
all of that

Would you know why I am not getting any results back when I try sniffing on Linux with the USB2Can device?

See link to the original post

Can bus Hacking

Cheers,
Mike.

Paul_S · 12-15-2018, 10:08 AM

Quote:

Originally Posted by jax4557

I am starting to use an app called "realdash" for a replacement gauge cluster in my Z and have been looking into the canbus as well. I have found most of what I need but I was wondering if anyone has been able to get the message for blinkers left/right, e brake warning, and door ajar? Also, has anyone been able to pop the trunk, roll windows up and down, or alter AC systems through canbus? Thinking about running a tablet in the center with the realdash software with a custom template made only for the above car control functions.

https://www.youtube.com/watch?v=_13IPpjElL0

Thanks in advance,

Very nice. I've not seen that before.

You might find this project interesting:

https://www.youtube.com/watch?v=_13IPpjElL0

This guy used an Arduino to talk to the canbus and wrote his own Android app to talk to that and control the HVAC.

I'm looking to do something similar myself.

The HVAC won't work on the base model unless you swap out the control unit because the base model one doesn't have canbus control.

dts3 · 12-15-2018, 10:24 AM

Quote:

Originally Posted by Paul_S

Very nice. I've not seen that before.

You might find this project interesting:

https://www.youtube.com/watch?v=_13IPpjElL0

This guy used an Arduino to talk to the canbus and wrote his own Android app to talk to that and control the HVAC.

I'm looking to do something similar myself.

The HVAC won't work on the base model unless you swap out the control unit because the base model one doesn't have canbus control.

That looks interesting. I have access to Vector CAN tools so that's what I've been using. I'm currently making a database file (dbc) for the 370 that I'll share when I'm done.

I figured that would be the case regarding the HVAC after seeing things mentioned in the FSM.

jax4557 · 12-16-2018, 10:00 PM

I don't mind swapping the module if needed to talk AC via canbus but not sure what the commands are for the AC. They don't seem to be in the system.

Quote:

Originally Posted by Paul_S

Very nice. I've not seen that before.

You might find this project interesting:

https://www.youtube.com/watch?v=_13IPpjElL0

This guy used an Arduino to talk to the canbus and wrote his own Android app to talk to that and control the HVAC.

I'm looking to do something similar myself.

The HVAC won't work on the base model unless you swap out the control unit because the base model one doesn't have canbus control.

Paul_S · 12-17-2018, 03:47 AM

Quote:

Originally Posted by jax4557

I don't mind swapping the module if needed to talk AC via canbus but not sure what the commands are for the AC. They don't seem to be in the system.

I've not checked into this in detail yet, but if you read the comments on the YouTube vid you'll see some links to all the source code

12-13-2018, 11:03 PM	#1 (permalink)
jax4557 Base Member Join Date: Nov 2014 Location: Jacksonville Posts: 102 Drives: 2014 370z Sport M6 Rep Power: 12	I am starting to use an app called "realdash" for a replacement gauge cluster in my Z and have been looking into the canbus as well. I have found most of what I need but I was wondering if anyone has been able to get the message for blinkers left/right, e brake warning, and door ajar? Also, has anyone been able to pop the trunk, roll windows up and down, or alter AC systems through canbus? Thinking about running a tablet in the center with the realdash software with a custom template made only for the above car control functions. Thanks in advance, Paul_S and Uxi like this. __________________ BP Precision 6766 - E85 - 620hp / 550tq

05-30-2019, 11:38 PM	#4 (permalink)
dts3 Track Member Join Date: May 2018 Location: Farmington Hills, MI Posts: 599 Drives: 08 Expedition Rep Power: 6766	As it turns out, I did not need to periodically issue the Tester Present request. I just looked at the CAN log again and the Tester Present messages always returned a NRC code of 0x22 (which is "conditionsNotCorrect") so that can probably be left out. Brad370 likes this.