seishuku
Full Member
Karma: +13/-0
 Offline
Posts: 131
|
 |
« on: September 12, 2015, 01:10:24 PM »
|
|
|
Anyone here have any experience with this? Specifically my 2013 Jetta TDI.
I can receive messages no problem, actually have quite a lot IDs figured out, but that's not the problem.
The problem I have, is that whatever messages I transmit don't do anything.
If I transmit 0x5C1 (steering wheel controls) with the data for radio controls, the radio will react as expected (vol up/down, track next/prev, etc), but if I send MFD up/down, nothing happens.
I'm pretty sure it's not my hardware, since I can't receive no problem, and the radio at least accepts messages... But that's where it stops.
Is there some kind of security, or does my device need to be registered in the ring first? I've searched quite a bit, but there isn't a whole lot of info out there (not that I can find anyway).
|
|
|
|
|
Logged
|
|
|
|
|
dream3R
|
|
« Reply #1 on: September 12, 2015, 01:45:55 PM »
|
|
|
Have you replicated the actual can msg entirely (logged the in-car one on the bus?) and repeated? You may just be missing a byte or wrong canid, bit set wrong somewhere, hard to say...
Are you on the correct bus? I assume there is more than one in the car?
|
|
|
|
|
Logged
|
|
|
|
seishuku
Full Member
Karma: +13/-0
Offline
Posts: 131
|
|
« Reply #2 on: September 12, 2015, 01:52:09 PM »
|
|
|
Yeah, identical messages from logs.
Like I said, I can reproduce for radio steering wheel controls just fine, but the radio is the only thing to respond.
Blinkers, wipers, headlights, door locks, audio amp, etc... Nothing else will respond.
|
|
|
|
|
Logged
|
|
|
|
|
dream3R
|
|
« Reply #3 on: September 12, 2015, 02:02:54 PM »
|
|
|
I had something else similar happen once, never got to the bottom of it, lol.
What are you using to read and send the messages? Have you checked EVERY bit? Are they coliding with same messages from the car from another module, well not colliding but being ignored perhaps.
|
|
|
|
|
Logged
|
|
|
|
|
dream3R
|
|
« Reply #4 on: September 12, 2015, 02:03:34 PM »
|
|
|
Same bus?
|
|
|
|
|
Logged
|
|
|
|
seishuku
Full Member
Karma: +13/-0
Offline
Posts: 131
|
|
« Reply #5 on: September 12, 2015, 02:10:25 PM »
|
|
|
Yeah, tapped right at the back of the radio.
I've also tried from the actual "comfort bus", tapped directly at the BCM (body computer has CAN gateway built-in), same results though.
On this car, it seems the comfort bus and infotainment bus are the same, or at least carry the same messages.
|
|
|
|
|
Logged
|
|
|
|
|
dream3R
|
|
« Reply #6 on: September 12, 2015, 02:12:07 PM »
|
|
|
My only thoughts are hat the target mcu's can controller is filtering the messages somehow.
What are you using so send the messages?
|
|
|
|
|
Logged
|
|
|
|
|
dream3R
|
|
« Reply #7 on: September 12, 2015, 02:16:05 PM »
|
|
|
afiak it's 11 bit can? There's no registration, termination is a very important subject in can though.
|
|
|
|
|
Logged
|
|
|
|
|
dream3R
|
|
« Reply #8 on: September 12, 2015, 02:22:39 PM »
|
|
|
Ideas:
120R on CAN connection (might already be on your board though)
Move the connection to somewhere else.
disconnect the ECU you are cloning effectively (via fuse and retry)
Can timing is weird too, as is some of the open source libraries for MCU's and their implementation of registers etc.
|
|
|
|
|
Logged
|
|
|
|
seishuku
Full Member
Karma: +13/-0
Offline
Posts: 131
|
|
« Reply #9 on: September 12, 2015, 02:28:07 PM »
|
|
|
Yeah, no extended IDs.
I actually had to remove the terminator from my transceiver, otherwise I got absolutely nothing.
I don't know how the target could filter it, it's all broadcast... In CAN you can't really specifically target one controller without everyone else being able to see the same messages, otherwise there's no point in a "global network" type system.
This is on my STM32F429 discovery board, but I also get the same issues with my Teensy 3.1 (which also only the radio responds to, nothing else).
So I don't think I'm sending CAN data wrong (code wise anyway), there's got to be something the modules do on wake up that I'm not.
I can try tapping it at the audio amp under the seat, see if that's any better, but if I can't get anything right at the gateway, I don't think that will work either.
|
|
|
|
|
Logged
|
|
|
|
|
dream3R
|
|
« Reply #10 on: September 12, 2015, 02:34:01 PM »
|
|
|
Each ecu will have a filter set to ignore messages it doesn't need to see. I admit never on VW but I've never seen a button type signal that needs registered. The ECU's themselves will broadcast on boot, and a central controller may set a code for one not being present. ECM for speed signal missing for example. Give can hacker a shot with an arduino, it helped me a lot. There's an open source drivers/flash for the MCU. So you get speed signals broadcast, rpm etc, also button presses are broadcast but bit's change when the button is hit, possibly you are transmitting too slow? That's all i have  |
|
|
|
|
Logged
|
|
|
|
|
dream3R
|
|
« Reply #11 on: September 12, 2015, 02:40:02 PM »
|
|
|
You may have the option of diagnostic override as well. I did that on Volvo, once set the controller in ignores everything except the diag command on/off up/down etc.
I found that way much easier.
|
|
|
|
|
Logged
|
|
|
|
seishuku
Full Member
Karma: +13/-0
Offline
Posts: 131
|
|
« Reply #12 on: September 12, 2015, 02:43:38 PM »
|
|
|
Yeah, thus the reason I'm posting here, it doesn't make sense to me, it SHOULD work.
I'll check out CAN Hacker, might help, my CAN logger was just kinda slapped together. lol
Everything recieves just fine, no issues at all, no hiccups at all... Just nothing happens with sending.
I guess I have more digging to do, I really wish there was more info available.
|
|
|
|
|
Logged
|
|
|
|
|
dream3R
|
|
« Reply #13 on: September 12, 2015, 02:53:46 PM »
|
|
|
Been there lol. That's all I can think of mate.  |
|
|
|
|
Logged
|
|
|
|
|
dream3R
|
|
« Reply #14 on: September 12, 2015, 03:02:44 PM »
|
|
|
Also some of the broadcast frames are sent sequentially if they are out of sequence then the entire message is ignored iirc.
Generally with something like can hacker you can see the pattern once you filter down to a specfic canid, you could have a race condition for example as hinted earlier.
|
|
|
|
|
Logged
|
|
|
|
|
