Welcome Anonymous !

Everything you need to modify your ride
 

ECU - OBDII DTCs and PIDs

GM Lan Single Wire CAN Bus Sniffing

Discuss Diagnostic Trouble Codes and Parameter IDs for the Holden VE Commodore, VEII Series Commodores, and HSV E1, E2, and E3 models

Postby tek1229 » Fri Mar 07, 2014 12:40 pm

Hello all, I apologize if you feel I am hijacking this thread but I had found this forum looking for information and some helpful hints as I explore my gmlan system in my truck, adding navigation radio and backup cameras.. Have read this entire thread and I have taken some notes and will be experimenting and hopefully learning as I'm going. Please don't think I will be asking for all the answers, lol.. I heard mention of this GMW3110 document and that it contains quite a bit of information in helping understand the bus and the protocols.. Does anyone have it? or know of a location where it will not cost me an arm and a leg to get?

So far I have the door locks figured out, can activate remote start using the RKE or Onstar commands.. Learning this 29 bit header is confusing, but I am getting the hang of it.. Really want to research 11 bit and see what else I can work with..

thanks, Sorry don't really have a lot to offer, hopefully in the future I can help out.. I am a GM dealer Tech, if someone needs some info I have access to, let me know.. tek1229
tek1229
Kicking Tyres
 
Posts: 5
Joined: Sun Mar 02, 2014 2:50 pm
Has thanked: 0 time
Been thanked: 1 time

Postby nfsve » Fri Apr 04, 2014 7:32 pm

acca
if you take a look at the 2515 datasheet you can see what all the registers do. MCP2515 is an external Can processor that can communicate via SPI to the main processor be it arduino or PIC. This chip is also inside some of the top tools like the NeoFire,
The first half of your code reads the CANINTF register. This is an 8 bit wide register (1 byte). First line puts that byte into a memory location called flags. 2nd line 'and' s it with 1 hex 00000001 which removes all binary bits execpt for the LSB. It then checks if it is one. So the top 2 lines check it Receive buffer 0 has interrupted. If it has it looks like it runs the rendermessage subroutine and sends it 61 in hex. It then clears the Interrupt flag ready for the next shot.

The second half does the same thing with Receive buffer 1. .... ands it with 2.. 00000010 to check if the 2nd bit (rXB1) is set. If so run Rendermessage subroutine and send it 0x71, then clear int flag to go again.
nfsve
Newbie Modder
 
Posts: 1
Joined: Fri Sep 06, 2013 10:43 pm
Has thanked: 0 time
Been thanked: 0 time

Postby acca » Mon Apr 07, 2014 10:40 pm

Ok
If i understand everything, there is two reception buffers

But i still can't intercept text sent to the display

Thank you very much
nfsve wrote:acca
if you take a look at the 2515 datasheet you can see what all the registers do. MCP2515 is an external Can processor that can communicate via SPI to the main processor be it arduino or PIC. This chip is also inside some of the top tools like the NeoFire,
The first half of your code reads the CANINTF register. This is an 8 bit wide register (1 byte). First line puts that byte into a memory location called flags. 2nd line 'and' s it with 1 hex 00000001 which removes all binary bits execpt for the LSB. It then checks if it is one. So the top 2 lines check it Receive buffer 0 has interrupted. If it has it looks like it runs the rendermessage subroutine and sends it 61 in hex. It then clears the Interrupt flag ready for the next shot.

The second half does the same thing with Receive buffer 1. .... ands it with 2.. 00000010 to check if the 2nd bit (rXB1) is set. If so run Rendermessage subroutine and send it 0x71, then clear int flag to go again.
acca
Kicking Tyres
 
Posts: 8
Joined: Sat Jan 11, 2014 6:14 am
Has thanked: 0 time
Been thanked: 0 time

Postby Sleepy » Wed Apr 23, 2014 3:37 am

acca
It appears that your code is working correctly. maybe the display data isnt on the single wire bus? The can messages do not match up to the gmlan bible because your vehicle is one of the new global a (global architecture) vehicles. GM has changed the messaging for this new system. The good news is that once every platform has changed to global a (which is the plan) it will be standardized. I have successfully used some of your data to bench test a 2010 Cadillac SRX radio (also global a). specifficaly the VIN which was found in a preveous post and the ignition state 10242040. Perhaps we should start another gmlan bible for global a. I would not be to much help with this though as I do not have one of these vehicles. That being said I am trying to get the radio I have to go into low current mode. I can use the ignition state to get it to turn off and the bus will go to sleep but the radio still draws two amps. I am assuming that after the RAP or the door is opened there is a message sent by the BCM to turn it off. I would greatly appreciate it if you could post a log of turning the ignition off opening the door and waiting for the bus to go silent.

Here are some links to info about global a
http://www.vector.com/portal/medien/cmc/events/commercial_events/VectorCongress_2012/VeCo12_6_Keynote_1_Peti_Lecture.pdf
http://www.sandyblogs.com/techlink/feb2010techlink.pdf
Sleepy
Newbie Modder
 
Posts: 2
Joined: Mon Jun 17, 2013 11:58 am
Has thanked: 0 time
Been thanked: 1 time

Postby acca » Sat May 03, 2014 1:59 am

Thank you very much sleepy

I'm sorry but for the moment i don't have time to log this.

I'll do it as soon as i have the time

don't hesitate to ask again if i forget

regards
acca
Kicking Tyres
 
Posts: 8
Joined: Sat Jan 11, 2014 6:14 am
Has thanked: 0 time
Been thanked: 0 time

Postby Sleepy » Wed May 07, 2014 8:28 am

Thanks acca.
I found a site with a couple global a messages listed on it. I don't think it helps you to much, but here it is.
http://vehicle-reverse-engineering.wiki ... GM_GlobalA
Sleepy
Newbie Modder
 
Posts: 2
Joined: Mon Jun 17, 2013 11:58 am
Has thanked: 0 time
Been thanked: 1 time

Postby tiburon » Sat Jul 12, 2014 12:48 pm

acca,

Can you tell my how you wired the spark fun board to work? Am I just splicing the cable going into the board to reroute pins or do I need to actually do some soldering on the board?

Thanks
tiburon
Newbie Modder
 
Posts: 4
Joined: Wed Aug 14, 2013 1:34 pm
Has thanked: 0 time
Been thanked: 0 time

Postby acca » Sun Jul 13, 2014 8:14 pm

Hi

you can use db9 plug or soldier to CANh and CANL pins on the board
acca
Kicking Tyres
 
Posts: 8
Joined: Sat Jan 11, 2014 6:14 am
Has thanked: 0 time
Been thanked: 0 time

Postby Hank303 » Tue Jul 15, 2014 10:07 am

Hey guys,

Great work on the GMLAN research!

I'm trying to write a GMLAN protocol module for python-can for use with my Lawicel canusb. It works great for sending & receiving CAN messages, but I'd like to break out the GMLAN fields in the arbitration IDs.

Anyone have a 2010 or newer version of the GMW 3110? There were a few links earlier in the thread, but they're all dead now.

I appreciate any help and will of course post my code when done.

Hank
Hank303
Newbie Modder
 
Posts: 1
Joined: Tue Jun 17, 2014 12:01 pm
Has thanked: 0 time
Been thanked: 0 time

Postby McJ » Thu Aug 14, 2014 6:32 pm

Hi All,

I just found this place, and got really excited. Years and years ago (2010?) i built a homebrew SWCAN bus sniffer pilfered from industrial samples and junk box bits and pieces. Back then, there was virtually nobody else with any info, and wow has it blossomed!

Anyway, I wanted to say hi, and i have some stuff to share. Indeed it seems you already have some of it, as i was the one who wrote the post that the "chime" section of the GMLAN bible was taken from (with credit, which I'm even happier about!)

Looking forward to sharing and learning more great knowledge

-Jesse
You do not have the required permissions to view the files attached to this post.
-Jesse
'06 VE SSV
User avatar
McJ
Kicking Tyres
 
Posts: 5
Joined: Thu Aug 14, 2014 5:59 pm
Location: Sydney
Has thanked: 0 time
Been thanked: 1 time

PreviousNext

Return to ECU - OBDII DTCs and PIDs

  • View new posts
  • View unanswered posts
  • Who is online
  • In total there is 1 user online :: 0 registered, 0 hidden and 1 guest (based on users active over the past 5 minutes)
  • Most users ever online was 151 on Fri Mar 03, 2017 1:44 pm
  • Users browsing this forum: No registered users and 1 guest