Hi all.

when i power up my (standalone) vw immo/convenience ECU, the ECU tries to open a channel
to another ECU on the (convenience) CANbus.
I emulated the TP2.0 so far and chose an ID of 0x4D0 for my pseudo ECU.

So this is what happens:

<- [0002638733] ID: 221 - 48 C0 00 10 28 03 10 (green is the short id of the unknown ECU)
[EEMU] got channel setup from 0x221 (pink is the 0x200 + 0x21 ID of the convenience ECU)
-> [0355465687] ID: 248 - 21 D0 28 03 D0 04 10
[EEMU] sent emu D0 response from emulated 0x248
<- [0002638743] ID: 4D0 - A0 04 59 FF 32 FF
[EEMU] got channel com params to my can ID - blocksize=0x4, timout=25ms, min. consecutive message time=50us
-> [0355465687] ID: 328 - A1 04 59 FF 32 FF
[EEMU] sent A1 parameter response - blocksize=0x4, timout=25ms, min. consecutive message time=50us
<- [0002638763] ID: 4D0 - 10 00 21 00 FF
[EEMU] got a single frame TP2.0 packet
-> [0355465718] ID: 328 - B1

so now my question - anybody any clue what this red packet is ? its not KWP2000, neither KW1281
any idea ?

Kind ragards

man, you're awesome, thx for the clarifications and the link!!
Did you found something else about these MFA+ protocols, any other hidden commands?