VW Comfort CAN for Multimedia

Hello,

I've now spent hours logging and have discovered a few things .
My connection is directly to the CAN bus from the navigation system!

The following IDs:

3c2 for display transmission (MFA).
490 to the DSP.
464 to the TV tuner.

Here's what I've already figured out .

The ASCII table is implemented directly.

For the display, the block appears as if the MFD is sending it three times in a row.

Time ID B Values
52,726 3C2 1 B1
52,742 3C2 1 A8
53,368 3C2 6 A0 04 82 84 46 C5
53,388 3C2 8 20 09 CD 57 0D 22 00 00
53,399 3C2 8 21 01 00 20 41 4E 54 45 ANTE
53,412 3C2 8 22 4E 4E 45 57 0D 22 00 NNE
53,420 3C2 8 03 00 0B 00 46 4D 32 2E FM2.
53,430 3C2 6 14 34 20 54 50 08 4 TP
53,659 3C2 1 B1
53,669 3C2 1 A8

For the TV tuner, please note the following:

Time ID DLC Data Comment
48,310 464 5 1C 20 01 02 00 Button 1
48,862 464 5 1D 20 01 01 00 Button 2
49,399 464 5 1E 20 01 20 00 Button 3
50,524 464 5 1F 20 01 00 20 Button 4
51,120 464 5 10 20 01 00 10 Button 5
51,831 464 5 11 20 01 00 02 Press button 6.
02,119 464 5 12 20 01 00 40 Button pressed: Back.
02,264 464 5 13 20 02 00 40 Back button pressed.
56,569 464 5 1F 20 01 00 FF Knob: Rotate clockwise.
56,724 464 5 11 20 01 01 FF Knob: Rotate clockwise.
06,212 464 5 15 20 01 30 00 Key Scan Pressed
06,395 464 5 16 20 02 30 00 Key Scan Logged.
07,219 464 5 17 20 01 30 00 Button
08,526 464 5 1A 20 01 00 05 Rotate knob to the right and press.
09,052 464 5 1B 20 01 03 00 Both 'AS' keys pressed.
09,195 464 5 1C 20 02 03 00 AS button Both Logelassen
00,000 464 5 15 20 01 03 00 Button AS + Sound Pressed
00,000 464 5 16 20 01 FF 00 Button AS + K pressed.
00,000 464 5 17 20 02 FF 00 Button AS + Sound Released.

The first bytes are always from 10 to 1A.


Okay, hier ist die Übersetzung:

'Now, let's move on to the DSP.'

Time ID DLC Data Comment

It seems there are fixed values for the volume.
xx always the counter (10 to 1A)

00,000 490 6 13 2A 08 21 20 60 First byte of counter 10 to 1A
00,000 490 1 B5 Confirmation from the DSP that the COMMAND has been accepted.
00,000 490 6 14 2A 14 21 20 60 Only the 3rd byte is changing.
00,000 490 1 B6
00,000 490 6 15 2A 20 21 20 60
00,000 490 1 B7
00,000 490 6 16 2A 2C 21 20 60
00,000 490 1 B8
00,000 490 6 17 2A 38 21 20 60
00,000 490 1 B9
00,000 490 6 18 2A 44 21 20 60
00,000 490 1 BA
00,000 490 6 19 2A 4C 21 20 60
00,000 490 1 BB
00,000 490 6 1A 2A 58 21 20 60
00,000 490 1 BC
00,000 490 6 1B 2A 64 21 20 60
00,000 490 1 BD
00,000 490 6 1C 2A 6C 21 20 60
00,000 490 1 PC
00,000 490 6 1D 2A 74 21 20 60
00,000 490 1 BF
00,000 490 6 1E 2A 7C 21 20 60
00,000 490 1 B0
00,000 490 6 1F 2A 84 21 20 60
00,000 490 1 B1
00,000 490 6 10 2A 8C 21 20 60
00,000 490 1 B2
00,000 490 6 11 2A 94 21 20 60
00,000 490 1 B3
00,000 490 6 12 2A 9C 21 20 60
00,000 490 1 B4
00,000 490 6 13 2A A4 21 20 60
00,000 490 1 B5
00,000 490 6 14 2A AC 21 20 60
00,000 490 1 B6
00,000 490 6 15 2A B4 21 20 60
00,000 490 1 B7
00,000 490 6 16 2A B8 21 20 60
00,000 490 1 B8
00,000 490 6 17 2A BC 21 20 60
00,000 490 1 B9
00,000 490 6 18 2A C0 21 20 60
00,000 490 1 BA
00,000 490 6 19 2A C4 21 20 60
00,000 490 1 BB
00,000 490 6 1A 2A C8 21 20 60
00,000 490 1 BC
00,000 490 6 1B 2A CC 21 20 60
00,000 490 1 BD
00,000 490 6 1C 2A D0 21 20 60
00,000 490 1 PC
00,000 490 6 1D 2A D4 21 20 60
00,000 490 1 BF
00,000 490 6 1E 2A D8 21 20 60
00,000 490 1 B0
00,000 490 6 1F 2A DC 21 20 60
00,000 490 1 B1
00,000 490 6 10 2A E0 21 20 60
00,000 490 1 B2
00,000 490 6 11 2A E4 21 20 60
00,000 490 1 B3
00,000 490 6 12 2A E8 21 20 60
00,000 490 1 B4
00,000 490 6 13 2A EC 21 20 60
00,000 490 1 B5
00,000 490 6 14 2A F0 21 20 60
00,000 490 1 B6
00,000 490 6 15 2A F4 21 20 60
00,000 490 1 B7
00,000 490 2 A3 00 Probably means 'waiting always happens when there's no interaction.'
00,000 490 2 A3 00 quieter from here.
00,000 490 2 A3 00
00,000 490 6 16 2A F0 21 20 60
00,000 490 1 B8
00,000 490 6 17 2A EC 21 20 60
00,000 490 1 B9
00,000 490 6 18 2A E8 21 20 60
00,000 490 1 BA
00,000 490 6 19 2A E4 21 20 60
00,000 490 1 BB
00,000 490 6 1A 2A E0 21 20 60
00,000 490 1 BC
00,000 490 6 1B 2A DC 21 20 60
00,000 490 1 BD
00,000 490 6 1C 2A D8 21 20 60
00,000 490 1 PC
00,000 490 6 1D 2A D4 21 20 60
00,000 490 1 BF
00,000 490 6 1E 2A D0 21 20 60
00,000 490 1 B0
00,000 490 6 1F 2A CC 21 20 60
00,000 490 1 B1
00,000 490 6 10 2A C8 21 20 60
00,000 490 1 B2
00,000 490 6 11 2A C4 21 20 60
00,000 490 1 B3
00,000 490 6 12 2A C0 21 20 60
00,000 490 1 B4
00,000 490 6 13 2A BC 21 20 60
00,000 490 1 B5
00,000 490 6 14 2A B8 21 20 60
00,000 490 1 B6
00,000 490 6 15 2A B4 21 20 60
00,000 490 1 B7
00,000 490 6 16 2A AC 21 20 60
00,000 490 1 B8
00,000 490 6 17 2A A4 21 20 60
00,000 490 1 B9
00,000 490 6 18 2A 9C 21 20 60
00,000 490 1 BA
00,000 490 6 19 2A 94 21 20 60
00,000 490 1 BB
00,000 490 6 1A 2A 8C 21 20 60
00,000 490 1 BC
00,000 490 6 1B 2A 84 21 20 60
00,000 490 1 BD
00,000 490 6 1C 2A 7C 21 20 60
00,000 490 1 PC
00,000 490 6 1D 2A 74 21 20 60
00,000 490 1 BF
00,000 490 6 1E 2A 6C 21 20 60
00,000 490 1 B0
00,000 490 6 1F 2A 64 21 20 60
00,000 490 1 B1
00,000 490 6 10 2A 58 21 20 60
00,000 490 1 B2
00,000 490 6 11 2A 4C 21 20 60
00,000 490 1 B3
00,000 490 6 12 2A 44 21 20 60
00,000 490 1 B4
00,000 490 6 13 2A 38 21 20 60
00,000 490 1 B5
00,000 490 6 14 2A 2C 21 20 60
00,000 490 1 B6
00,000 490 6 15 2A 20 21 20 60
00,000 490 1 B7
00,000 490 6 16 2A 14 21 20 60
00,000 490 1 B8
00,000 490 6 17 2A 08 21 20 60
00,000 490 1 B9
00,000 490 6 18 2A 00 21 20 60
00,000 490 1 BA
00,000 490 2 A3 00


YY is in the list of values!

Switch sound mode: Linear, Pop, etc.

XX 20 01 Linear
XX 20 02 Pop.
XX 20 03 Rock
XX 20 04 Jazz.
XX 20 05 Classic
XX 24 01 Driver On
XX 24 02 Driver Off
XX 22 01 Dynamic. On.
XX 22 02 Dynamic. Off.


Sound.

XX 2A 6C 21 YY 18 Balance
0B Links
1F Middle.
3E Legal.
Steps (0B 13 17 1A 1D 1E 1F 20 21 24 27 2B 33 3E)


Fader.

XX 2A 6C YY 1F 18
0B Links
1F Middle.
3E Legal.
Steps (0B 13 17 1A 1D 1E 1F 20 21 24 27 2B 33 3E)

TA-Min.
XX 2A YY 21 1F 18
2C 38 44 4C 58 64 6C 74 7C 84 8C 94 9C A4 AC B4
b8 bc c0 c4 c8 cc d0 d4 d8 dc e0 e4 e8


Phone.
XX 2A YY 21 1F 60
4c 58 64
6c 74 7c 84 8c 94 9c a4 ac b4
b8 bc c0 c4 c8 cc d0 d4 d8 dc e0 e4 e8 ec F0 F4


Navigation Min.



DSP Mute.

XX 2c 01 From
XX 2c 02 A

I have already managed to send individual commands using CANHack, such as volume control and mute.

However, I haven't been able to send a message to the MFA yet because something is still missing for it to work.

I hope more people searching for VAG-CAN bus information will find this.

'ewtlt' can contribute to completing the list.

I'm looking for someone who can help me write a small program in VB6 that can receive and send commands, as I've only programmed in VB6 using Access so far, and I have absolutely no experience with things like that .

My goal is to reach the MFA (presumably a location or organization), and to use the DSP (Digital Signal Processor) and other devices via the CAR PC (Car PC), etc.


Okay, see you then.

Naruto.

Brief update.

3C2 is likely responsible for the complete FIS system, specifically regarding text display.

This also creates a menu entry in the FIS.

54,333 3C2 8 20 02 70 36 10 4E 41 56 Menu entry: NAV
54,344 3C2 8 11 49 47 41 54 49 4F 4E Menu Entry: IGATION
54,349 3C3 1 B2


then the welcome screen in the lower part of the FIS.

13,980 3C3 6 A1 04 8A 85 43 94
13,994 302 6 03 01 00 00 00 00
13,995 3C2 8 20 09 FC 57 0F 26 00 00
13,999 351 3 00 1C 17
14,006 3C2 8 21 04 00 56 4F 4C 4B 53 VOLKS
14,016 3C2 8 22 57 41 47 45 4E 57 0A WAGON
14,027 3C2 8 03 26 00 00 10 00 52 41 RA
14,032 3C3 1 B4
14,037 3C2 8 24 44 49 4F 57 0F 26 00 DIO
14,038 303 6 04 01 00 00 00 00
14,046 345 1 03
14,049 3C2 8 25 00 1A 00 4E 41 56 49 NAVI
14,057 3C2 8 26 47 41 54 49 4F 4E 57 GATION
14,068 3C2 8 07 0B 26 00 00 24 00 53 S
14,072 34D 2 20 00
14,073 363 4 01 FF 70 FF
14,076 3C3 1 B8
14,080 3C2 7 18 59 53 54 45 4D 08 YSTEM
14,082 304 6 05 01 00 00 00 00
14,086 3C3 1 B9


and in the upper part, the radio indicator.

30,999 3C2 8 20 09 CD 57 0D 22 00 00
31,009 3C2 8 21 01 00 20 41 4E 54 45 ANTE
31,013 363 4 01 80 70 FF
31,020 3C2 8 22 4E 4E 45 57 0D 22 00 NNE
31,031 3C2 8 03 00 0B 00 46 4D 32 2E FM2.
31,032 35E 1 03
31,036 305 6 08 01 00 00 00 00
31,037 345 1 03
31,040 3C3 1 B4
31,052 3C2 6 14 34 20 20 1C 08 4
31,057 3C3 1 B5


I have tried writing, but I have had absolutely no success .

Has anyone successfully documented the FIS (Financial Information System) or created a program for Folker's interface?

Sure, here is the translation of the text from German to English:

'Cu' is a Spanish word that means 'with'. It is often used in greetings and farewells. For example, you might say 'Hola, cu' to someone you are greeting, or 'Adios, cu' to someone you are saying goodbye to.

'Cu' can also be used as a verb, meaning 'to be with'. For example, you might say 'Estoy con mi familia' to mean 'I am with my family'.

In some cases, 'cu' can also be used as a noun, meaning 'a companion'. For example, you might say 'Ella es mi cu' to mean 'She is my companion'.

I hope this helps!

Well,

Writing also involves a little bit more .

Take a closer look at ID 208 .

3C2 creates a data channel for the Display Data Protocol (DDP). The content of this channel is announced upon its opening. The ID208 includes 'alive' messages, which also need to be acknowledged.

It's not quite that simple, but it works .

Please note the following: The G Navi and connected components (TV tuner, DSP, and TMC) use Bosch's McNet, which is compatible with the VW TP 1.6 CAN bus system found in the Golf IV. Therefore, the TMC Box also serves as a converter...

Regards,
Sven.

@Svenni Thanks.

I cannot find ID 208 on my system .

Did you get the IDs directly from the Comfort CAN bus (after conversion by the TMC box) or from the infotainment bus directly at the navigation system where you are currently connected?

Sure, here is the translation of the text from German to English:

'Cu' is a Spanish word that means 'with'. It is often used in greetings and farewells. For example, you might say 'Hola, cu' to someone you are greeting, or 'Adios, cu' to someone you are saying goodbye to.

'Cu' can also be used as a verb, meaning 'to be with'. For example, you might say 'Estoy con mi familia' to mean 'I am with my family'.

In some cases, 'cu' can also be used as a noun, meaning 'a companion'. For example, you might say 'Ella es mi cu' to mean 'She is my companion'.

I hope this helps!

I'm talking about CAN bus comfort features. The value 208 also exists on the navigation CAN bus, but it has a different ID (which is handled by the TMC).

I now have the IDs.

3B2
3B3
3C3
3C2

It seems that all of them are responsible for communicating with the FIS. Unfortunately, I have still not been able to describe the FIS, even though I have tried to emulate the command structure exactly.

I'm really starting to feel desperate.

If you've already managed to write to the FIS via CAN, I hope you can help me.

Cu.

Naruto.

Hi Naruto,

I'm currently trying to do the same thing on an Audi A6, and I'm at the exact same point as you are.

IDs 341 and 342 are responsible for the data bus in the A6, but unfortunately, I'm still having trouble with the 'alive' messaging.

Okay, I just remembered that Svennie mentioned the ID 208 on the KOMFORT bus, but the navigation system should be on the Infotainment bus, right? Am I mistaken?
Certainly, it should be the case that one is obligated to answer a specific question, such as:
Navi (Radio): Are you still connected? -> Yes, I am still connected. -> FIS remains active...

Unfortunately, I'm not really making any progress either. I believe that in the Audi, the IS modules 218 and 21C are responsible for the Alive messaging.

Best regards, Flo.

'Svennie is right; the entertainment functions are implemented via the TMC box and are then made available through the Comfort CAN bus.'

There probably is.
There are still two other IDs in the Audi that are responsible for this.
In VW 3B3 systems, the navigation system and the 3B2 display exchange only 3-byte commands when the navigation system needs to send data.

3B3 3 08C0B6 from the navigation system.
3B2 3 36D096 from the display.

Now, the actual communication can begin.

I can also provoke a response, but I haven't managed to get the navigation system to respond correctly; it always stops at the initialization sequence .

Sure, here is the translation of the text from German to English:

'Cu' is a Spanish word that means 'with'. It is often used in greetings and farewells. For example, you might say 'Hola, cu' to someone you are greeting, or 'Adios, cu' to someone you are saying goodbye to.

'Cu' can also be used as a verb, meaning 'to be with'. For example, you might say 'Estoy con mi familia' to mean 'I am with my family'.

In some cases, 'cu' can also be used as a noun, meaning 'a companion'. For example, you might say 'Ella es mi cu' to mean 'She is my companion'.

I hope this helps!

As far as I've found out so far, Audi radios can be connected to either the CAN Comfort bus or the CAN Infotainment bus (depending on the year of manufacture and the other equipment installed). The RNS-D (CD Navi Plus) is connected to the Bosch CAN bus, which is transmitted via TMC on the CAN Comfort bus. The RNS-E (DVD Navi Plus) is always connected to the Infotainment CAN bus. The Dan BNS navigation system is also always connected to the infotainment CAN bus (or to the 3LB connector in older Audis).

@Svennie

Do you perhaps mean 2E8?

And directly on the comfort.

696 and 6B6?

Hi Naruto,

Okay, I've made some progress with the Audi. The IDs 21c and 41c are responsible for communication, but the protocol doesn't seem straightforward...
The ID 21c responds differently to the same message from 41c... I'll probably be a little 'smarter' tonight. Let's see how I'm progressing...

Best regards, Flo.

@Satprogger

I've been able to elicit responses, but somehow the timing is off.

There are 4 IDs responsible for communication in total, but unfortunately, I can't say exactly which ones, as my usual computer is being repaired and I hope it will be working again by the end of the week .

Sure, here's the translation:

'Just off the top of my head.'

2E8
696
6B6
I can't quite think of anything right now.

I hope you make some progress, because whether it's Audi or VW, once we have it, we can definitely find a way to adapt it .

Cu.

Maik.

Okay, after 3 hours of unsuccessfully trying to activate FIS...
There are probably several IDs involved.
But what was truly amazing was the following:
When you disconnect the navigation system from the CAN bus with it turned off, and then reconnect it while it's turned on, the following happens with an ID (218)), which is otherwise hardly active:


5.7342 1 218 Rx d 3 E0 0F 00
5.7375 1 418 Rx d 2 E1 0F
5.7419 1 341 Rx d 8 20 42 49 47 20 46 4D 20
5.7430 1 218 Rx d 7 10 15 01 00 01 02 00
5.7441 1 342 Rx d 8 46 4D 31 2D 35 20 54 50
5.7461 1 418 Rx d 1 B1
5.7498 1 346 Rx d 8 00 00 00 00 85 85 00
5.7506 1 418 Rx d 3 10 00 01
5.7542 1 328 Rx d 6 16 01 00 00 00 00
5.7560 1 218 Rx d 1 B1
5.7573 1 218 Rx d 3 11 01 01
5.7600 1 418 Rx d 1 B2
5.7642 1 218 Rx d 8 22 51 D3 A3 85 42 01 A0
5.7649 1 418 Rx d 2 11 08
5.7659 1 218 Rx d 6 13 00 00 0D 01 0C
5.7679 1 418 Rx d 1 B4
5.7696 1 345 Rx d 1 03
5.7709 1 218 Rx d 1 B2
5.7735 1 218 Rx d 7 14 09 01 03 50 63 04
5.7753 1 418 Rx d 1 B5
5.7773 1 41C Rx d 8 16 50 05 42 01 A0 00 00
5.7799 1 21C Rx d 1 B7
5.7864 1 418 Rx d 2 12 C2
5.7887 1 218 Rx d 1 B3
5.7910 1 21C Rx d 4 10 51 01 00
5.7934 1 218 Rx d 8 25 C3 4E 00 55 4E 4A 35
5.7940 1 41C Rx d 1 B1
5.7952 1 218 Rx d 8 26 48 49 00 00 00 00 00
5.7965 1 218 Rx d 8 27 00 00 00 47 57 41 59
5.7978 1 218 Rx d 8 28 5F 54 4D 43 00 00 00
5.7992 1 218 Rx d 8 29 00 00 00 FF FF FF FF
5.8006 1 218 Rx d 8 2A FF FF FF FF FF FF FF FF
5.8019 1 218 Rx d 8 2B FF FF FF FF 1E 00
5.8032 1 218 Rx d 8 2C 4A 61 6E 20 32 35 20
5.8045 1 218 Rx d 8 2D 32 30 30 31 00 00 00
5.8057 1 218 Rx d 8 2E 31 35 3A 34 37 3A 32
5.8071 1 218 Rx d 8 1F 37 00 00 00 00 00 00

She's sending a whole block of messages...
I can't explain where it comes from...

It's quite annoying. I'm now going to write out the entire logged data exchange using µC...

Best regards, Flo.

Hi,

Okay, so you want to write the entire data exchange process with the microcontroller?
That sounds like a lot of work.
It must take a very long time to program that.
Well, I'm sure you'll manage it, @satprogger!


It's really frustrating that it hasn't worked after 3 hours.
You just have to collaborate with professionals sometimes, and then it will work out.

Good luck with FIS.

Best regards,
Mario

Oh man, I've done much crazier things than that.
But I appreciate you offering to help and taking the programming task off my hands .

See you tomorrow!

Best, Flo.

3h I've already spent 3 hours x * x, which I won't reveal because it would be embarrassing.
But it's really depressing.

You don't have to replicate everything, as that probably won't work. Instead, send a 'let's get started' message to a channel, then wait for a response, and then reply with the initialization, etc.
When I have access to the data I have already gathered, I will make it available .

Sure, here is the translation of the text from German to English:

'Cu' is a Spanish word that means 'with'. It is often used in greetings and farewells. For example, you might say 'Hola, cu' to someone you are greeting, or 'Adios, cu' to someone you are saying goodbye to.

'Cu' can also be used as a verb, meaning 'to be with'. For example, you might say 'Estoy con mi familia' to mean 'I am with my family'.

In some cases, 'cu' can also be used as a noun, meaning 'a companion'. For example, you might say 'Ella es mi cu' to mean 'She is my companion'.

I hope this helps!