Pages: [1]
Author Topic: Re: Trying to emulate an ECU - packet not understood [SOLVED, was Display, DDP]  (Read 8140 times)
zxcv
Newbie
*

Karma: +2/-0
Offline Offline

Posts: 19



Hi all.

when i power up my (standalone) vw immo/convenience ECU, the ECU tries to open a channel
to another ECU on the (convenience) CANbus.
I emulated the TP2.0 so far and chose an ID of 0x4D0 for my pseudo ECU.

So this is what happens:

<- [0002638733] ID: 221 - 48 C0 00 10 28 03 10 (green is the short id of the unknown ECU)
[EEMU] got channel setup from 0x221 (pink is the 0x200 + 0x21 ID of the convenience ECU)
-> [0355465687] ID: 248 - 21 D0 28 03 D0 04 10
[EEMU] sent emu D0 response from emulated 0x248
<- [0002638743] ID: 4D0 - A0 04 59 FF 32 FF
[EEMU] got channel com params to my can ID - blocksize=0x4, timout=25ms, min. consecutive message time=50us
-> [0355465687] ID: 328 - A1 04 59 FF 32 FF
[EEMU] sent A1 parameter response - blocksize=0x4, timout=25ms, min. consecutive message time=50us
<- [0002638763] ID: 4D0 - 10 00 21 00 FF
[EEMU] got a single frame TP2.0 packet
-> [0355465718] ID: 328 - B1

so now my question - anybody any clue what this red packet is ? its not KWP2000, neither KW1281
any idea ?

Kind ragards
« Last Edit: April 02, 2018, 08:52:16 AM by zxcv » Logged
zxcv
Newbie
*

Karma: +2/-0
Offline Offline

Posts: 19



i found it on some russian forum  Smiley

0x48 its the Display ECU, and the protocol seems to be called DDP (Display Data Protocol).

its directly on TP2.0 and communicates with the display.

For reference: http://pccar.ru/showthread.php?t=24102
or with google translate:
https://translate.google.com/translate?hl=de&sl=ru&tl=en&u=http%3A%2F%2Fpccar.ru%2Fshowthread.php%3Ft%3D24102

Regards
Logged
google85
Newbie
*

Karma: +0/-0
Offline Offline

Posts: 1



man, you're awesome, thx for the clarifications and the link!!
Did you found something else about these MFA+ protocols, any other hidden commands?
Logged
Pages: [1]
  Print  
 
Jump to:  

Powered by SMF 1.1.21 | SMF © 2015, Simple Machines Page created in 0.013 seconds with 16 queries. (Pretty URLs adds 0s, 0q)