Pages: [1]
Author Topic: BMW ENET flashing communication reverse-engineering  (Read 1660 times)
Micki
Newbie
*

Karma: +0/-0
Offline Offline

Posts: 3


« on: February 27, 2025, 03:35:13 AM »

Hello,

We are talking about ENET communication in the BMW G82 during ECU programming.
In TCP communication, the PC sends a compressed binary to the car. The binary is sent in packets of 4156 bytes, of which 4102 are payload (including a special header). The question is what type of compression is used?
Compression options such as DEFLATE, LZMA, RLE, Huffman, BWT do not give such a result, as well as compressing binaries into 7z, RAR, ZIP archives with GZIP, BZIP2, XZ compression formats.
The following data is based on observations. By changing one map in WinOLS, we listened to the communication every time.
Single and double bytes are not encoded, but starting from 3 identical bytes in a row, compression occurs.
In my opinion there is no repeatable pattern here, we have highlighted in red the confilcts compared to the pre-established previous logic.

The pictures show screenshots from WinOLS and corresponding data from WireShark.

I will be gratefull for any tips/informations according to continuing work this matter.
Logged
windel
Newbie
*

Karma: +0/-2
Offline Offline

Posts: 7


« Reply #1 on: March 07, 2025, 09:24:14 AM »

NRV compression is used in F/G-series. Maybe it's the same for G82.
Logged
pshoey
Newbie
*

Karma: +0/-0
Offline Offline

Posts: 1


« Reply #2 on: March 12, 2025, 01:44:45 PM »

Yes, i can confirm NRV compression is used.
Logged
Pages: [1]
  Print  
 
Jump to:  

Powered by SMF 1.1.21 | SMF © 2015, Simple Machines Page created in 0.16 seconds with 16 queries. (Pretty URLs adds 0s, 0q)