GM Lan Single Wire CAN Bus Sniffing

[ZerOne]

Yep, I think that is going to be the ice breaker for this.....
When I get a chance I will definitely do this... (It might take a couple of days due to work hours, and crap)....

But I will definitely will give it a go by the weekend...

The next question is what should I log ????
Is 0x094 for GPS, or is it just for the cluster Display for the GPS (AUX Nav Data Display) ???

I will log 0x080 for the Radio stuff, but is there anything else I should be looking for ????

[jezzab]

I'm still getting my head around it all and TMKs is the guru but I would assume the 0x94 stuff as this is where the packets are come from and the rest is telling the module that is listening for them what to do with them. But like I said, I'm still a n00b with this all and learning more every day.

[tmk]

Ohhh.. More packets to look at. Thanks ZerOne!

When I say ECU I mean the first 13 bits of the GMLAN header. It is the sending address or module. The next 13 are the ArbID (Command) and the last3 are priority.

$094 and $095 seem to be the Nav setup. Which is what.. TBD.

I have made some progress. I need to digest the work from ZerOne and update. But.. The good news is the G8 DIC can get Nav packets!

[tmk]

OK.. I think the G8 Radio isn't programmed to do NAV video input. I can get the audio mute working- Thats ARB 0x19e. And in fact, once I get that going, the radio even has a NAV AUDIO menu in it. (Never seen that before - and it is as described by ZerOne - Volume and speaker selects). I can get the DIC kinda working mostly - but it isn't better then the Onstar DIC packets.

10 33 40 94 01 - Audio switched to Nav
10 33 40 94 00 - Audio switched back

What I can't seem to do is get the Composite input to switch.. I am 99% sure that is the packets as identified are 10 2E 20 94 25 00 and 10 2E 20 94 24 00..

I also am not seeing the radio key presses at 0x170 like you see in the logs. Which further makes me think G8s are stuck and don't have the features enabled. May have to get the eeprom flasher going. Might be something that can be enabled via that.

So I am thinking it's a partial win for now - Need somebody there to try this..

TMK

[tmk]

ZerOne..

Can we get some scans of the ARBS between 0x170 and 0x179? I think that's where GM is doing the car specific stuff. Maybe it's still possible. Maybe there is a message that we are missing.

So..

Can ID: 0x002E0000 (0x170 << 13 places)

Mask:
0x03FF0000

ID
MASK 0000 0011 1111 1111 0000 0000 0000 0000

Basically the mask sets the bits that have to match the header.. IT does a boolean & and sees that everything that matches matches.

Thanks!

[jezzab]

Have a friend with a module he purchased that enables the NAV RGB input on his Holden VE and its been tested on the G8 headunit too. He offered to open it up for a bit of a look inside.

On the G8 headunit the OFF button was mapped to be NAV. I wonder if this was the fasia programming or the main unit.

Interesting they just used a pic chip.

[jezzab]

OK.. I think the G8 Radio isn't programmed to do NAV video input. I can get the audio mute working- Thats ARB 0x19e. And in fact, once I get that going, the radio even has a NAV AUDIO menu in it. (Never seen that before - and it is as described by ZerOne - Volume and speaker selects). I can get the DIC kinda working mostly - but it isn't better then the Onstar DIC packets.

10 33 40 94 01 - Audio switched to Nav
10 33 40 94 00 - Audio switched back

What I can't seem to do is get the Composite input to switch.. I am 99% sure that is the packets as identified are 10 2E 20 94 25 00 and 10 2E 20 94 24 00..

I also am not seeing the radio key presses at 0x170 like you see in the logs. Which further makes me think G8s are stuck and don't have the features enabled. May have to get the eeprom flasher going. Might be something that can be enabled via that.

So I am thinking it's a partial win for now - Need somebody there to try this..

TMK

So what header do you want me to send (#define NAV 0x90xxxxxx)? And then the
10 2E 20 94 25 00
10 2E 20 94 24 00

? With a wait in between?

See if I can give it a try today

Jez

[tmk]

Here are the functions I am using for testing....


/*

As seen on a Holden from ZerOne. Testing for COMPOSITE ON OFF.
//Nav Audio
0x4 0x19a 0x094 | 1 | 10 33 40 94 01
0x4 0x19a 0x094 | 1 | 10 33 40 94 00

Or..

0x4 0x171 0x094 | 2 | 10 2E 20 94 01 00
0x4 0x171 0x094 | 2 | 10 2E 20 94 01 00
0x4 0x171 0x094 | 2 | 10 2E 20 94 21 00
0x4 0x171 0x094 | 2 | 10 2E 20 94 20 00
0x4 0x171 0x094 | 2 | 10 2E 20 94 24 00
0x4 0x171 0x094 | 2 | 10 2E 20 94 24 00


*/

#define NAVSCRARB 0x10334094
#define NAVSCRARB2 0x102e2094

// Nav AUDIO
void navaudio(byte onoff)
{

can_send_29bit_message(0x10334094, onoff, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01);

}


void navon()
{
Serial.println("NAV COMP ON");

can_send_29bit_message(0x102e2094, 0x25, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02);

}

void navoff()
{
Serial.println("NAV COMP OFF");

can_send_29bit_message(0x102e2094, 0x24, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02);
delay(50);
}


void navRegister()
{
/*

0x4 0x171 0x094 | 2 | 10 2E 20 94 01 00
0x4 0x172 0x094 | 1 | 10 2E 40 94 03
0x4 0x183 0x094 | 4 | 10 30 60 94 01 C0 00 03
0x4 0x19a 0x094 | 1 | 10 33 40 94 00
0x4 0x171 0x094 | 2 | 10 2E 20 94 21 00
0x4 0x183 0x094 | 4 | 10 30 60 94 01 C0 00 03
0x4 0x053 0x094 | 6 | 10 0A 60 94 0C 04 10 20 60 1A
0x4 0x171 0x094 | 2 | 10 2E 20 94 25 00
0x4 0x19a 0x094 | 1 | 10 33 40 94 00


*/

Serial.println("REgistered NAV..?");
//10 2E 20 94 01 00
can_send_29bit_message(0x102e2094, 0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02);
delay(100);
//10 2E 40 94 03
can_send_29bit_message(0x102e4094, 0x03, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01);
delay(100);
//10 30 60 94 01 C0 00 03
can_send_29bit_message(0x10306094, 0x01, 0xC0, 0x00, 0x03, 0x00, 0x00, 0x00, 0x00, 0x04);
delay(100);
//10 33 40 94 00
can_send_29bit_message(0x10334094, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01);
delay(100);
//10 2E 20 94 21 00
can_send_29bit_message(0x10220094, 0x21, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02);
delay(100);
//10 30 60 94 01 C0 00 03
can_send_29bit_message(0x10306094, 0x01, 0xC0, 0x00, 0x03, 0x00, 0x00, 0x00, 0x00, 0x04);
delay(100);
//10 0A 60 94 0C 04 10 20 60 1A
can_send_29bit_message(0x100a6094, 0x0C, 0x04, 0x10, 0x20, 0x60, 0x1A, 0x00, 0x00, 0x06);
delay(100);
//10 2E 20 94 25 00
can_send_29bit_message(0x102e2094, 0x25, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02);
delay(100);
//10 33 40 94 00
can_send_29bit_message(0x10334094, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01);


}

Register First.. Then send navon() or navoff().. navaudio(0x00 or 0x01) should mute/unmute too..

TMK

[jezzab]

Roger that. Ill give it a crack

[ZerOne]

Sorry, I as out of action yesterday, (Ive had a bad cough that I havent been able to shake for a couple of weeks, and it get the better of me yesterday.
Will give the above logging a g tonight, and post up the results.

Cheers