|
|
|
|
|
|
BMW Garage | BMW Meets | Register | Today's Posts | Search |
|
BMW 3-Series (E90 E92) Forum
>
E9x KCAN 101
|
|
09-27-2020, 08:53 AM | #133 |
First Lieutenant
72
Rep 381
Posts |
Does any one know how to decode 0x1A6 message?
It suppose to be "distance", but I am not sure what kind of units are used here and it seems to be strange value. |
Appreciate
0
|
09-30-2020, 01:54 AM | #134 | |
Enlisted Member
9
Rep 32
Posts |
Quote:
At this point I'm just looking to try and read the frames/signals coming from Steering Wheel Controls.. however as a minimum I'd just like to verify the Arduino CANBUS Shield can read any CAN messages. |
|
Appreciate
0
|
09-30-2020, 07:07 AM | #135 | |
First Lieutenant
72
Rep 381
Posts |
Quote:
|
|
Appreciate
0
|
01-20-2021, 01:55 AM | #136 |
New Member
3
Rep 14
Posts |
Hi guys! working on retrofitting NBT to e series. One part of a challenge is that front panel is not directly connected to NBT. Instead it use LINbus wire to IHKA and then NBT seems to receive CAN messages.
Can anyone suggest what CAN messages are sending on volume changing, mute button, etc. Are they the same as from a steering wheel CANID: 1d6? Last edited by vitalic; 06-30-2021 at 04:35 AM.. |
Appreciate
0
|
01-24-2021, 05:49 AM | #137 |
First Lieutenant
72
Rep 381
Posts |
I am starting at looking to 0x0A8 message. It is from DME. I found DME documentation:
https://mega.nz/file/H55SwSST#ihZrrF...IBpwXhy1B3CLO0 It describes this message: Fields from this message: CHKSM_TORQ_1_DME - check sum (check control torque_1 DME) (8 bits) ALIV_TORQ_1_DME - alive counter torque_1 DME (4bits) TORQ_AVL - torque actual-value (12bits) ST_TORQ_AVL - status torque actual-value (4bits) RQ_AVL_DMEE - Actual torque ECU/ETCU (12bits) ST_SW_CLT - Status_switch_clutch (2bits) ST_RTIR - ? (2bits) ST_DMEA_SWO - status DME/ACC switch-off (2bits) RCPT_ACC_SWO_SYS_DME - receipt_ACC_switch-off_system_DME (2bits) ST_RCPT_ENG_ACC - status_receipt_engine_ACC (2bits) ST_RCPT_ENG_ARS - status_receipt_engine_ARS (2bits) ST_RCPT_ENG_DSC - status_receipt_engine_DSC (2bits) ST_RCPT_ENG_EGS - status_receipt_engine_EGS/SSG/TCT (2bits) ST_OBD_CTFN_GRB - status_OBD_control-function_gearbox ST_OBD_CTFN_GRB (5bits) ST_CT_BRPD_DME - status_contact_brake-pedal_DME (3bits) Interestingly TORQ_AVL contains only 12bits, not 16bits as most of the sources say. 4bits is ALIV_TORQ_1_DME counter which increases every 10ms. TORQ_AVL = TQ_AV (converted for BN2000) Sadly I did not find what "converted for BN2000" means in the document. Any ideas how TQ_AV is converted to TORQ_AVL? And how to convert it back? Because TORQ_AVL is 12bits value and TQ_AV is 16bit value. So need to apply some kind of formula to get correct actual engine torque value: TORQ_AVL (12bits) = (TQ_AV (16bits) <- converted for BN2000) Any ideas how to get Actual Torque value correctly? TQ_AV (16bits) from TORQ_AVL (12bits)? P.S. Are there such documents for KOMBI/DSC/Gearbox... as for DME? where we could find more messages documented? Last edited by Hotter; 01-24-2021 at 07:11 AM.. |
Appreciate
0
|
02-03-2021, 12:49 AM | #138 | |
Private
19
Rep 50
Posts |
Quote:
The radio doesn't actually fit in the e9x, does it? |
|
Appreciate
0
|
02-03-2021, 12:56 AM | #139 | |
Private
19
Rep 50
Posts |
Quote:
Have you been able to read from ECU memory yourself? Does this work over kcan? What baudrate and hardware did you use? This info must be available for transmission and transfer case. Thinking XHP and Xdelete... |
|
Appreciate
0
|
02-03-2021, 03:53 AM | #140 | |
First Lieutenant
72
Rep 381
Posts |
Quote:
But we need more documents like this. Does KOMBI/DSC/Gearbox... technical specification documents exist? |
|
Appreciate
0
|
02-03-2021, 10:37 AM | #141 | |
Lieutenant Colonel
469
Rep 1,536
Posts |
Quote:
No documents out there for others modules that I'm aware of but if you ever find them feel free to share. The DCT gearbox one would be very valuable if you ever found it. There's more advanced discussion on the spool street forums regarding CAN hacking. Combination of using external CAN devices for emulating stuff and a little bit of module reprogramming to alter CAN transmission. |
|
Appreciate
0
|
02-18-2021, 03:26 PM | #142 | |
Private
19
Rep 50
Posts |
Quote:
How did you end up hooking up the TJA1054T? what microcontroller did you use? What wires are required? I am using an ESP32, and I am going to try out a TJA1051 before I give up. EDIT: After much fuss, with many can controllers, I, too decided to rip a TJA1054T out of an old e90 radio. Soldered it to a smt to pin adapter, and wired it up. I found that there is no need to wire in the resistors and capacitors in the application diagram in order to get the chip to send and receive messages. All that was necessary was power (BAT + VCC 5V), ground, CANTX, CANRX, CANHI, CANLO. I'm sure the other components are important for the "fault tolerant" function of the chip, but if you're just trying to talk to a radio, this works! Also, I used the CAN library from here. https://github.com/sandeepmistry/arduino-CAN Last edited by starfox5194; 02-24-2021 at 03:40 PM.. |
|
Appreciate
0
|
06-02-2021, 01:33 AM | #143 |
New Member
3
Rep 14
Posts |
Can anyone suggest the algorithm of 0x130 and 0x12f at f-series.
Actually, I've implemented the code that start sending 12f as long as first byte of 130 is not 00. So Once I inserted the key into slot, the radio wakes-up immediately. However, when I remove the key, the car continue to send 130 with zero at first byte, my code no longer send 12f, so not goes to sleep after a while. |
Appreciate
0
|
02-14-2022, 03:40 PM | #145 |
Registered
0
Rep 1
Posts |
iDrive CAN codes - original version
Hi all
Reading this thread and I have an original iDrive (just the wheel, no buttons) I'd like to use a in a non-car related project. So far I can get the following out of it via CAN - I guess it needs some form of "send data to here" message. Tried lots of stuff on the web, but that seems to be for the later versions. Can anybody help, or provide a trace of just the controller & the dial communicating? Code:
Recieve ID: 0x4E7 Len: 8 Data: 0x67 0x01 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF Recieve ID: 0x4E7 Len: 8 Data: 0x67 0x02 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF Recieve ID: 0x4E7 Len: 8 Data: 0x67 0x01 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF Recieve ID: 0x4E7 Len: 8 Data: 0x67 0x02 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF Recieve ID: 0x4E7 Len: 8 Data: 0x67 0x01 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF Recieve ID: 0x4E7 Len: 8 Data: 0x67 0x02 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF Recieve ID: 0x4E7 Len: 8 Data: 0x67 0x01 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF Recieve ID: 0x4E7 Len: 8 Data: 0x67 0x02 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF Recieve ID: 0x4E7 Len: 8 Data: 0x67 0x01 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF |
Appreciate
0
|
03-06-2022, 05:31 PM | #146 | ||
Private First Class
27
Rep 106
Posts |
Quote:
|
||
Appreciate
0
|
06-30-2022, 07:28 AM | #147 | |
New Member
4
Rep 6
Posts |
Quote:
Hi, can you help me setting up TJA1054 with MCP2515 on arduino CAN Shield? I've got Can shield from seedstudio and there is natively MCP2551 so I desoldered it and I soldered BAT+ VCC, ground, CANTX, CANRX, CANHI and CANLO to corresponding pins of MCP2515 controller, but I can't neither read or send anything to CAN. It says "CAN init ok" on terminal and that's it. I tried different libraries for different CAN shields, but it's the same. CS Pin is set to 10 accordingly to my shield design. Also RX is constant green all the time. I would be grateful for any advice. |
|
Appreciate
0
|
09-03-2022, 07:58 PM | #148 |
Lieutenant
69
Rep 460
Posts |
Does anyone know if you can make OBD requests over KCAN ?
I'm tapping into KCAN from the idrive controller on my 2008 and 2009 3 series, and I can read all the CAN data at 100kbps no problem. The issue is, if I send the 0x7DF OBD2 /pid request over this same bus with any PID I get no answer, no matter the PID on my 2008, and on my 2009, I *only* get a response from pid 20h. I tried all PIDs from 0 to AFh. Any ideas? Thanks |
Appreciate
0
|
02-21-2023, 07:37 AM | #149 |
Registered
0
Rep 4
Posts |
I have edc16cp35 on my desk. I sent a pid request with id 0x7DF to can and received a response with id 0x7E8 (speed 500kbps). Haven't tried it on a pt-can machine yet (100kbps).
My request looks like this: id 7DF, 0x02 0x01 0x05 0x00 0x00 0x00 0x00 0x00. 0x05- standart pids temperature engine. Now I have a problem how to send unique bmw pids (which are in tool32 or testO) Last edited by Artyom; 02-27-2023 at 10:23 PM.. |
Appreciate
0
|
02-27-2023, 11:59 AM | #150 | |
Lieutenant
69
Rep 460
Posts |
Quote:
I'll try 0x7DF 0x02 0x01 0x05 0x00 0x00 0x00 0x00 0x00 this week. |
|
Appreciate
0
|
06-04-2023, 01:26 PM | #151 |
Ballin' out of control.
520
Rep 1,289
Posts |
If I recall correctly, the CAN arbitration ID for tester (diagnostic tool) on E90 K-CAN is 0x5FE.
__________________
Alpina B3 Flash/BMS OCC/ER CP/ETS 5/HKS BOV/M3 Control Arms
|
Appreciate
0
|
06-27-2023, 12:33 PM | #152 | |
Registered
0
Rep 4
Posts |
Quote:
and 0x5FE 0x03 0x2C 0x00 0xAE 0x00 0x00 0x00 0x00. I don't get a response from the ecu. 0x04 and 0x03 message length; 0x2C - DynamicallyDefineDataIdentifier service (ISO 14229:2006) (enabled sniffer on the computer's usb port when testo is running); 0x10 - also sniffer usb; 0x00 0xAE - ID parametr charge air temperature. I can only read the messages exchanged between the blocks of the car. If anyone needs, I can throw off my transcript of the messages. Last edited by Artyom; 06-27-2023 at 12:48 PM.. |
|
Appreciate
0
|
06-28-2023, 07:34 AM | #153 | |
Registered
0
Rep 4
Posts |
Quote:
Example: 0x0A8 0x55 0xC3 0x10 0xD2 0x10 0xF0 0x03 0x02 0xC3 0x10 -> 0x10C3 (swap)(hex) -> 4291(dec). 4291/32.3+15=147 Hm. This is true for the m57 engine. If moment is negative (decimal number is greater than 32767) need -(65535-x)/32.3+15 |
|
Appreciate
0
|
06-28-2023, 09:26 AM | #154 | ||
Ballin' out of control.
520
Rep 1,289
Posts |
Quote:
Quote:
__________________
Alpina B3 Flash/BMS OCC/ER CP/ETS 5/HKS BOV/M3 Control Arms
|
||
Appreciate
0
|
Bookmarks |
|
|