E90Post
 


 
BMW 3-Series (E90 E92) Forum > E90 / E92 / E93 3-series Technical Forums > BMW Coding > E9x KCAN 101



Reply
 
Thread Tools Search this Thread
      09-27-2020, 08:53 AM   #133
Hotter
First Lieutenant
Hotter's Avatar
72
Rep
381
Posts

Drives: BMW E92 328i -> 330i
Join Date: Feb 2018
Location: Lithuania

iTrader: (0)

Does any one know how to decode 0x1A6 message?
It suppose to be "distance", but I am not sure what kind of units are used here and it seems to be strange value.
Appreciate 0
      09-30-2020, 01:54 AM   #134
timstar
Enlisted Member
9
Rep
32
Posts

Drives: BMW 325i e90
Join Date: Apr 2019
Location: NSW

iTrader: (0)

Quote:
Originally Posted by Hotter View Post
What chip do you use for can interface also is it KCAN you are trying to read?
I believe the chip is an MCP2515 based on the wiki page for the DFRobot shield
At this point I'm just looking to try and read the frames/signals coming from Steering Wheel Controls.. however as a minimum I'd just like to verify the Arduino CANBUS Shield can read any CAN messages.
Appreciate 0
      09-30-2020, 07:07 AM   #135
Hotter
First Lieutenant
Hotter's Avatar
72
Rep
381
Posts

Drives: BMW E92 328i -> 330i
Join Date: Feb 2018
Location: Lithuania

iTrader: (0)

Quote:
Originally Posted by timstar View Post
I believe the chip is an MCP2515 based on the wiki page for the DFRobot shield
At this point I'm just looking to try and read the frames/signals coming from Steering Wheel Controls.. however as a minimum I'd just like to verify the Arduino CANBUS Shield can read any CAN messages.
I think I used MCP2551 and it did not work well. BMW uses fault tolerant TJA1054T chip on KCan bus, I ended up taking out this chip from BMW radio and using it. Maybe you can make MCP2551 work on OBD port directly not on KCan.
Appreciate 0
      01-20-2021, 01:55 AM   #136
vitalic
New Member
3
Rep
14
Posts

Drives: x1 e84 x18d
Join Date: Feb 2020
Location: Ukraine

iTrader: (0)

Hi guys! working on retrofitting NBT to e series. One part of a challenge is that front panel is not directly connected to NBT. Instead it use LINbus wire to IHKA and then NBT seems to receive CAN messages.

Can anyone suggest what CAN messages are sending on volume changing, mute button, etc.
Are they the same as from a steering wheel CANID: 1d6?

Last edited by vitalic; 06-30-2021 at 04:35 AM..
Appreciate 0
      01-24-2021, 05:49 AM   #137
Hotter
First Lieutenant
Hotter's Avatar
72
Rep
381
Posts

Drives: BMW E92 328i -> 330i
Join Date: Feb 2018
Location: Lithuania

iTrader: (0)

I am starting at looking to 0x0A8 message. It is from DME. I found DME documentation:

https://mega.nz/file/H55SwSST#ihZrrF...IBpwXhy1B3CLO0

It describes this message:



Fields from this message:
CHKSM_TORQ_1_DME - check sum (check control torque_1 DME) (8 bits)
ALIV_TORQ_1_DME - alive counter torque_1 DME (4bits)
TORQ_AVL - torque actual-value (12bits)
ST_TORQ_AVL - status torque actual-value (4bits)
RQ_AVL_DMEE - Actual torque ECU/ETCU (12bits)
ST_SW_CLT - Status_switch_clutch (2bits)
ST_RTIR - ? (2bits)
ST_DMEA_SWO - status DME/ACC switch-off (2bits)
RCPT_ACC_SWO_SYS_DME - receipt_ACC_switch-off_system_DME (2bits)
ST_RCPT_ENG_ACC - status_receipt_engine_ACC (2bits)
ST_RCPT_ENG_ARS - status_receipt_engine_ARS (2bits)
ST_RCPT_ENG_DSC - status_receipt_engine_DSC (2bits)
ST_RCPT_ENG_EGS - status_receipt_engine_EGS/SSG/TCT (2bits)
ST_OBD_CTFN_GRB - status_OBD_control-function_gearbox ST_OBD_CTFN_GRB (5bits)
ST_CT_BRPD_DME - status_contact_brake-pedal_DME (3bits)

Interestingly TORQ_AVL contains only 12bits, not 16bits as most of the sources say. 4bits is ALIV_TORQ_1_DME counter which increases every 10ms.



TORQ_AVL = TQ_AV (converted for BN2000)

Sadly I did not find what "converted for BN2000" means in the document.
Any ideas how TQ_AV is converted to TORQ_AVL? And how to convert it back?
Because TORQ_AVL is 12bits value and TQ_AV is 16bit value. So need to apply some kind of formula to get correct actual engine torque value:



TORQ_AVL (12bits) = (TQ_AV (16bits) <- converted for BN2000)
Any ideas how to get Actual Torque value correctly? TQ_AV (16bits) from TORQ_AVL (12bits)?


P.S. Are there such documents for KOMBI/DSC/Gearbox... as for DME? where we could find more messages documented?

Last edited by Hotter; 01-24-2021 at 07:11 AM..
Appreciate 0
      02-03-2021, 12:49 AM   #138
starfox5194
Private
19
Rep
50
Posts

Drives: 2007 E90 335i
Join Date: Aug 2020
Location: Connecticut

iTrader: (0)

Quote:
Originally Posted by vitalic View Post
Hi guys! working on retrofitting NBT to e series. One part of a challenge is that front panel is not directly connected to NBT. Instead it use LINbus wire to IHKA and then NBT seems to receive CAN messages.

Can anyone suggest what CAN messages are sending on volume changing, mute button, etc.
Are they the same as from a steering wheel CANID: 1d6?
I have a BMW professional radio on my bench. There are no can messages sent over kcan when the volume knob is adjusted. You might have to go to the most bus.

The radio doesn't actually fit in the e9x, does it?
Appreciate 0
      02-03-2021, 12:56 AM   #139
starfox5194
Private
19
Rep
50
Posts

Drives: 2007 E90 335i
Join Date: Aug 2020
Location: Connecticut

iTrader: (0)

Quote:
Originally Posted by Hotter View Post
I am starting at looking to 0x0A8 message. It is from DME. I found DME documentation:

https://mega.nz/file/H55SwSST#ihZrrF...IBpwXhy1B3CLO0

It describes this message:



Fields from this message:
CHKSM_TORQ_1_DME - check sum (check control torque_1 DME) (8 bits)
ALIV_TORQ_1_DME - alive counter torque_1 DME (4bits)
TORQ_AVL - torque actual-value (12bits)
ST_TORQ_AVL - status torque actual-value (4bits)
RQ_AVL_DMEE - Actual torque ECU/ETCU (12bits)
ST_SW_CLT - Status_switch_clutch (2bits)
ST_RTIR - ? (2bits)
ST_DMEA_SWO - status DME/ACC switch-off (2bits)
RCPT_ACC_SWO_SYS_DME - receipt_ACC_switch-off_system_DME (2bits)
ST_RCPT_ENG_ACC - status_receipt_engine_ACC (2bits)
ST_RCPT_ENG_ARS - status_receipt_engine_ARS (2bits)
ST_RCPT_ENG_DSC - status_receipt_engine_DSC (2bits)
ST_RCPT_ENG_EGS - status_receipt_engine_EGS/SSG/TCT (2bits)
ST_OBD_CTFN_GRB - status_OBD_control-function_gearbox ST_OBD_CTFN_GRB (5bits)
ST_CT_BRPD_DME - status_contact_brake-pedal_DME (3bits)

Interestingly TORQ_AVL contains only 12bits, not 16bits as most of the sources say. 4bits is ALIV_TORQ_1_DME counter which increases every 10ms.



TORQ_AVL = TQ_AV (converted for BN2000)

Sadly I did not find what "converted for BN2000" means in the document.
Any ideas how TQ_AV is converted to TORQ_AVL? And how to convert it back?
Because TORQ_AVL is 12bits value and TQ_AV is 16bit value. So need to apply some kind of formula to get correct actual engine torque value:



TORQ_AVL (12bits) = (TQ_AV (16bits) <- converted for BN2000)
Any ideas how to get Actual Torque value correctly? TQ_AV (16bits) from TORQ_AVL (12bits)?


P.S. Are there such documents for KOMBI/DSC/Gearbox... as for DME? where we could find more messages documented?
This is super cool! We can get some really interesting + accurate information by reading the memory of the ECU. This is how MHD gets their gauge information.

Have you been able to read from ECU memory yourself? Does this work over kcan? What baudrate and hardware did you use?

This info must be available for transmission and transfer case. Thinking XHP and Xdelete...
Appreciate 0
      02-03-2021, 03:53 AM   #140
Hotter
First Lieutenant
Hotter's Avatar
72
Rep
381
Posts

Drives: BMW E92 328i -> 330i
Join Date: Feb 2018
Location: Lithuania

iTrader: (0)

Quote:
Originally Posted by starfox5194 View Post
This is super cool! We can get some really interesting + accurate information by reading the memory of the ECU. This is how MHD gets their gauge information.

Have you been able to read from ECU memory yourself? Does this work over kcan? What baudrate and hardware did you use?

This info must be available for transmission and transfer case. Thinking XHP and Xdelete...
Yes, its on E90 K-Can. Its not reading ECU memory directly, its decoding default ECU messages which are send to other modules. But I guess it could be possible to send requests to ECU and receive any ECU information too. I am more interested in decoding default messages, so you wont need to send any requests.

But we need more documents like this. Does KOMBI/DSC/Gearbox... technical specification documents exist?
Appreciate 0
      02-03-2021, 10:37 AM   #141
CarAbuser
Lieutenant Colonel
CarAbuser's Avatar
United Kingdom
468
Rep
1,535
Posts

Drives: Z4 35i DCT / E92 335i DCT
Join Date: Jul 2010
Location: United Kingdom

iTrader: (0)

Quote:
Originally Posted by Hotter View Post
I am starting at looking to 0x0A8 message. It is from DME. I found DME documentation:

https://mega.nz/file/H55SwSST#ihZrrF...IBpwXhy1B3CLO0

It describes this message:



Fields from this message:
CHKSM_TORQ_1_DME - check sum (check control torque_1 DME) (8 bits)
ALIV_TORQ_1_DME - alive counter torque_1 DME (4bits)
TORQ_AVL - torque actual-value (12bits)
ST_TORQ_AVL - status torque actual-value (4bits)
RQ_AVL_DMEE - Actual torque ECU/ETCU (12bits)
ST_SW_CLT - Status_switch_clutch (2bits)
ST_RTIR - ? (2bits)
ST_DMEA_SWO - status DME/ACC switch-off (2bits)
RCPT_ACC_SWO_SYS_DME - receipt_ACC_switch-off_system_DME (2bits)
ST_RCPT_ENG_ACC - status_receipt_engine_ACC (2bits)
ST_RCPT_ENG_ARS - status_receipt_engine_ARS (2bits)
ST_RCPT_ENG_DSC - status_receipt_engine_DSC (2bits)
ST_RCPT_ENG_EGS - status_receipt_engine_EGS/SSG/TCT (2bits)
ST_OBD_CTFN_GRB - status_OBD_control-function_gearbox ST_OBD_CTFN_GRB (5bits)
ST_CT_BRPD_DME - status_contact_brake-pedal_DME (3bits)

Interestingly TORQ_AVL contains only 12bits, not 16bits as most of the sources say. 4bits is ALIV_TORQ_1_DME counter which increases every 10ms.



TORQ_AVL = TQ_AV (converted for BN2000)

Sadly I did not find what "converted for BN2000" means in the document.
Any ideas how TQ_AV is converted to TORQ_AVL? And how to convert it back?
Because TORQ_AVL is 12bits value and TQ_AV is 16bit value. So need to apply some kind of formula to get correct actual engine torque value:



TORQ_AVL (12bits) = (TQ_AV (16bits) <- converted for BN2000)
Any ideas how to get Actual Torque value correctly? TQ_AV (16bits) from TORQ_AVL (12bits)?


P.S. Are there such documents for KOMBI/DSC/Gearbox... as for DME? where we could find more messages documented?
There's just an arithmetic shift of -4 for the TQ_AV to TORQ_AVL. That makes sense if they are just moving 16bit into a 12bit.

No documents out there for others modules that I'm aware of but if you ever find them feel free to share. The DCT gearbox one would be very valuable if you ever found it.

There's more advanced discussion on the spool street forums regarding CAN hacking. Combination of using external CAN devices for emulating stuff and a little bit of module reprogramming to alter CAN transmission.
Appreciate 0
      02-18-2021, 03:26 PM   #142
starfox5194
Private
19
Rep
50
Posts

Drives: 2007 E90 335i
Join Date: Aug 2020
Location: Connecticut

iTrader: (0)

Quote:
Originally Posted by Hotter View Post
I think I used MCP2551 and it did not work well. BMW uses fault tolerant TJA1054T chip on KCan bus, I ended up taking out this chip from BMW radio and using it. Maybe you can make MCP2551 work on OBD port directly not on KCan.
I am having trouble communicating with the professional radio using TI SN65HVD230.

How did you end up hooking up the TJA1054T? what microcontroller did you use? What wires are required?

I am using an ESP32, and I am going to try out a TJA1051 before I give up.

EDIT: After much fuss, with many can controllers, I, too decided to rip a TJA1054T out of an old e90 radio. Soldered it to a smt to pin adapter, and wired it up. I found that there is no need to wire in the resistors and capacitors in the application diagram in order to get the chip to send and receive messages. All that was necessary was power (BAT + VCC 5V), ground, CANTX, CANRX, CANHI, CANLO. I'm sure the other components are important for the "fault tolerant" function of the chip, but if you're just trying to talk to a radio, this works!

Also, I used the CAN library from here.
https://github.com/sandeepmistry/arduino-CAN

Last edited by starfox5194; 02-24-2021 at 03:40 PM..
Appreciate 0
      06-02-2021, 01:33 AM   #143
vitalic
New Member
3
Rep
14
Posts

Drives: x1 e84 x18d
Join Date: Feb 2020
Location: Ukraine

iTrader: (0)

Can anyone suggest the algorithm of 0x130 and 0x12f at f-series.

Actually, I've implemented the code that start sending 12f as long as first byte of 130 is not 00. So Once I inserted the key into slot, the radio wakes-up immediately. However, when I remove the key, the car continue to send 130 with zero at first byte, my code no longer send 12f, so not goes to sleep after a while.
Appreciate 0
      06-05-2021, 02:43 PM   #144
vitalic
New Member
3
Rep
14
Posts

Drives: x1 e84 x18d
Join Date: Feb 2020
Location: Ukraine

iTrader: (0)

found it, NBT turns off with 0xf12 00 00 00 00 00 00 00 00
Appreciate 0
      02-14-2022, 03:40 PM   #145
javalin
Registered
0
Rep
1
Posts

Drives: VW Passat
Join Date: Feb 2022
Location: Hampshire

iTrader: (0)

iDrive CAN codes - original version

Hi all

Reading this thread and I have an original iDrive (just the wheel, no buttons) I'd like to use a in a non-car related project.

So far I can get the following out of it via CAN - I guess it needs some form of "send data to here" message. Tried lots of stuff on the web, but that seems to be for the later versions.

Can anybody help, or provide a trace of just the controller & the dial communicating?

Code:
Recieve ID: 0x4E7   Len: 8   Data: 0x67 0x01 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF
Recieve ID: 0x4E7   Len: 8   Data: 0x67 0x02 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF
Recieve ID: 0x4E7   Len: 8   Data: 0x67 0x01 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF
Recieve ID: 0x4E7   Len: 8   Data: 0x67 0x02 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF
Recieve ID: 0x4E7   Len: 8   Data: 0x67 0x01 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF
Recieve ID: 0x4E7   Len: 8   Data: 0x67 0x02 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF
Recieve ID: 0x4E7   Len: 8   Data: 0x67 0x01 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF
Recieve ID: 0x4E7   Len: 8   Data: 0x67 0x02 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF
Recieve ID: 0x4E7   Len: 8   Data: 0x67 0x01 0xFF 0xFF 0xFF 0xFF 0xFF 0xFF
thanks!
Appreciate 0
      03-06-2022, 05:31 PM   #146
E90lmao
Private First Class
27
Rep
106
Posts

Drives: 2001 e46 325i, 2008 e90 335i
Join Date: Feb 2021
Location: Canada

iTrader: (0)

Quote:
Originally Posted by starfox5194 View Post
Quote:
Originally Posted by Hotter View Post
I think I used MCP2551 and it did not work well. BMW uses fault tolerant TJA1054T chip on KCan bus, I ended up taking out this chip from BMW radio and using it. Maybe you can make MCP2551 work on OBD port directly not on KCan.
I am having trouble communicating with the professional radio using TI SN65HVD230.

How did you end up hooking up the TJA1054T? what microcontroller did you use? What wires are required?

I am using an ESP32, and I am going to try out a TJA1051 before I give up.

EDIT: After much fuss, with many can controllers, I, too decided to rip a TJA1054T out of an old e90 radio. Soldered it to a smt to pin adapter, and wired it up. I found that there is no need to wire in the resistors and capacitors in the application diagram in order to get the chip to send and receive messages. All that was necessary was power (BAT + VCC 5V), ground, CANTX, CANRX, CANHI, CANLO. I'm sure the other components are important for the "fault tolerant" function of the chip, but if you're just trying to talk to a radio, this works!

Also, I used the CAN library from here.
https://github.com/sandeepmistry/arduino-CAN
Hi this might be a long shot but did you end up getting this library to work for your application? I'm trying to get info out of the obd2 into an mcp2515 into an arduino but I'm finding obd2 ports don't output canbus. Are you just wiring it through the back of the radio, and if so are you able to find canbus directly? Thanks
Appreciate 0
      06-30-2022, 07:28 AM   #147
Matthew53
New Member
4
Rep
6
Posts

Drives: BMW E92 335d
Join Date: Jun 2022
Location: Poland

iTrader: (0)

Quote:
Originally Posted by starfox5194 View Post
I am having trouble communicating with the professional radio using TI SN65HVD230.

How did you end up hooking up the TJA1054T? what microcontroller did you use? What wires are required?

I am using an ESP32, and I am going to try out a TJA1051 before I give up.

EDIT: After much fuss, with many can controllers, I, too decided to rip a TJA1054T out of an old e90 radio. Soldered it to a smt to pin adapter, and wired it up. I found that there is no need to wire in the resistors and capacitors in the application diagram in order to get the chip to send and receive messages. All that was necessary was power (BAT + VCC 5V), ground, CANTX, CANRX, CANHI, CANLO. I'm sure the other components are important for the "fault tolerant" function of the chip, but if you're just trying to talk to a radio, this works!

Also, I used the CAN library from here.
https://github.com/sandeepmistry/arduino-CAN

Hi, can you help me setting up TJA1054 with MCP2515 on arduino CAN Shield? I've got Can shield from seedstudio and there is natively MCP2551 so I desoldered it and I soldered BAT+ VCC, ground, CANTX, CANRX, CANHI and CANLO to corresponding pins of MCP2515 controller, but I can't neither read or send anything to CAN. It says "CAN init ok" on terminal and that's it.
I tried different libraries for different CAN shields, but it's the same.
CS Pin is set to 10 accordingly to my shield design.

Also RX is constant green all the time.

I would be grateful for any advice.
Appreciate 0
      09-03-2022, 07:58 PM   #148
GtiGyver
Lieutenant
GtiGyver's Avatar
Canada
69
Rep
460
Posts

Drives: 2009 Space Grey E90 328i MT
Join Date: Jun 2009
Location: Montreal

iTrader: (3)

Does anyone know if you can make OBD requests over KCAN ?

I'm tapping into KCAN from the idrive controller on my 2008 and 2009 3 series, and I can read all the CAN data at 100kbps no problem.
The issue is, if I send the 0x7DF OBD2 /pid request over this same bus with any PID I get no answer, no matter the PID on my 2008, and on my 2009, I *only* get a response from pid 20h.
I tried all PIDs from 0 to AFh.

Any ideas?

Thanks
Appreciate 0
      02-21-2023, 07:37 AM   #149
Artyom
Registered
0
Rep
4
Posts

Drives: Bmw e91 330d
Join Date: Feb 2023
Location: Belarus

iTrader: (0)

I have edc16cp35 on my desk. I sent a pid request with id 0x7DF to can and received a response with id 0x7E8 (speed 500kbps). Haven't tried it on a pt-can machine yet (100kbps).
My request looks like this: id 7DF, 0x02 0x01 0x05 0x00 0x00 0x00 0x00 0x00. 0x05- standart pids temperature engine.
Now I have a problem how to send unique bmw pids (which are in tool32 or testO)

Last edited by Artyom; 02-27-2023 at 10:23 PM..
Appreciate 0
      02-27-2023, 11:59 AM   #150
GtiGyver
Lieutenant
GtiGyver's Avatar
Canada
69
Rep
460
Posts

Drives: 2009 Space Grey E90 328i MT
Join Date: Jun 2009
Location: Montreal

iTrader: (3)

Quote:
Originally Posted by Artyom View Post
I have edc16cp35 on my desk. I sent a pid request with id 0x7DF to can and received a response with id 0x7E8 (speed 500kbps). Haven't tried it on a pt-can machine yet (100kbps).
My request looks like this: id 7DF 0x02 0x01 0x05 0x00 0x00 0x00 0x00 0x00. 0x05- standart pids temperature engine.
Now I have a problem how to send unique bmw pids (which are in tool32 or testO)
Thanks Atryom.
I'll try 0x7DF 0x02 0x01 0x05 0x00 0x00 0x00 0x00 0x00 this week.
Appreciate 0
      06-04-2023, 01:26 PM   #151
808AWD325xi
Ballin' out of control.
808AWD325xi's Avatar
No_Country
519
Rep
1,289
Posts

Drives: 2009 335i
Join Date: Jul 2007
Location: Moline, IL

iTrader: (0)

Quote:
Originally Posted by GtiGyver View Post
Thanks Atryom.
I'll try 0x7DF 0x02 0x01 0x05 0x00 0x00 0x00 0x00 0x00 this week.
If I recall correctly, the CAN arbitration ID for tester (diagnostic tool) on E90 K-CAN is 0x5FE.
__________________
Alpina B3 Flash/BMS OCC/ER CP/ETS 5/HKS BOV/M3 Control Arms
Appreciate 0
      06-27-2023, 12:33 PM   #152
Artyom
Registered
0
Rep
4
Posts

Drives: Bmw e91 330d
Join Date: Feb 2023
Location: Belarus

iTrader: (0)

Quote:
Originally Posted by 808AWD325xi View Post
If I recall correctly, the CAN arbitration ID for tester (diagnostic tool) on E90 K-CAN is 0x5FE.
Help. I ship 0x5FE 0x04 0x2C 0x10 0x00 0xAE 0x00 0x00 0x00
and 0x5FE 0x03 0x2C 0x00 0xAE 0x00 0x00 0x00 0x00. I don't get a response from the ecu.
0x04 and 0x03 message length;
0x2C - DynamicallyDefineDataIdentifier service (ISO 14229:2006) (enabled sniffer on the computer's usb port when testo is running);
0x10 - also sniffer usb;
0x00 0xAE - ID parametr charge air temperature.

I can only read the messages exchanged between the blocks of the car. If anyone needs, I can throw off my transcript of the messages.

Last edited by Artyom; 06-27-2023 at 12:48 PM..
Appreciate 0
      06-28-2023, 07:34 AM   #153
Artyom
Registered
0
Rep
4
Posts

Drives: Bmw e91 330d
Join Date: Feb 2023
Location: Belarus

iTrader: (0)

Quote:
Originally Posted by Hotter View Post
I am starting at looking to 0x0A8 message. It is from DME. I found DME documentation:
...
[/B]
I deciphered this message.
Example:
0x0A8 0x55 0xC3 0x10 0xD2 0x10 0xF0 0x03 0x02
0xC3 0x10 -> 0x10C3 (swap)(hex) -> 4291(dec).
4291/32.3+15=147 Hm.
This is true for the m57 engine.
If moment is negative (decimal number is greater than 32767) need -(65535-x)/32.3+15
Appreciate 0
      06-28-2023, 09:26 AM   #154
808AWD325xi
Ballin' out of control.
808AWD325xi's Avatar
No_Country
519
Rep
1,289
Posts

Drives: 2009 335i
Join Date: Jul 2007
Location: Moline, IL

iTrader: (0)

Quote:
Originally Posted by 808AWD325xi View Post
If I recall correctly, the CAN arbitration ID for tester (diagnostic tool) on E90 K-CAN is 0x5FE.
Quote:
Originally Posted by Artyom View Post
Help. I ship 0x5FE 0x04 0x2C 0x10 0x00 0xAE 0x00 0x00 0x00
and 0x5FE 0x03 0x2C 0x00 0xAE 0x00 0x00 0x00 0x00. I don't get a response from the ecu.
0x04 and 0x03 message length;
0x2C - DynamicallyDefineDataIdentifier service (ISO 14229:2006) (enabled sniffer on the computer's usb port when testo is running);
0x10 - also sniffer usb;
0x00 0xAE - ID parametr charge air temperature.

I can only read the messages exchanged between the blocks of the car. If anyone needs, I can throw off my transcript of the messages.
0x5FE is the CAN ID of tester on K-CAN, not an ECU.
__________________
Alpina B3 Flash/BMS OCC/ER CP/ETS 5/HKS BOV/M3 Control Arms
Appreciate 0
Reply

Bookmarks

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



All times are GMT -5. The time now is 10:11 AM.




e90post
Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2024, vBulletin Solutions Inc.
1Addicts.com, BIMMERPOST.com, E90Post.com, F30Post.com, M3Post.com, ZPost.com, 5Post.com, 6Post.com, 7Post.com, XBimmers.com logo and trademark are properties of BIMMERPOST