Ateca Windows: Installation & Repair Services

"These codes don't function when the car is parked and turned off. They only work during the times when the window buttons would normally operate."

Right front window:
185#8000000000000000 Full Open
185#4000000000000000 Down
185#1000000000000000 Up
185#2000000000000000 Full Close

Window, front left:
185#0800000000000000 Full Open
185#0400000000000000 Down
185#0100000000000000 Up
185#0200000000000000 Full Close

Window Right-Back:
185#0080000000000000 Full Open
185#0040000000000000 Down
185#0010000000000000 Up
185#0020000000000000 Full Close

Window, left rear.
185#0008000000000000 Full Open
185#0004000000000000 Down
185#0001000000000000 Up
185#0002000000000000 Full Close


"Does anyone know why the front-left window (the driver's side door with the four window buttons) isn't responding to these commands, while all the other windows are working?"

Hi.

Quote:

Does anyone know why the front-left window (the door with the four window buttons) doesn't respond to these codes, but all other windows do?

My guess is that it controls the other window positions. However, I'm quite sure there's a way via CAN to make it go up and down: When you press the close/open button on the key's remote control, you can open/close all four windows.

Best regards,
Rainer

Yes, I am trying to find these codes now, but the log I recorded while closing the windows using the remote key, I get a log with a size of 211 kb .

"Do you have any suggestions about which code (such as 185 for the windows) I should check? The code 185 isn't appearing in this log."

Message ID | Message Count
17334600 1
17FC0114 2
17FE0114 2
17FE010E 3
16A95493 4
17331101 4
17331901 5
17331A01 5
17331B01 5
17332101 5
66E 6
671 6
386 7
5F5 7
5F7 7
52A 8
58C 8
643 8
64E 8
658 8
6A6 8
6AE 8
6B2 8
6B6 8
6B7 8
6B8 8
6B9 8
16A95497 8
16A95499 8
17331210 8
585 9
17330310 9
17330910 9
17330C10 9
17330D10 9
17330E10 9
17331310 9
17330110 11
17332710 12
3D4 13
65A 13
17332310 13
569 15
588 15
5BB 15
5E0 15
5EA 15
5EB 15
5F4 15
65E 15
6B0 15
6B5 15
16A95498 15
17330810 15
17F0000C 15
17F0000E 15
17F00014 15
17F00023 15
17F00031 15
17F00032 15
17F00046 15
17F00047 15
17F0004A 15
17F0004B 15
17F00084 15
17F000A9 15
1A55552B 15
16A9540A 18
1B000014 20
1B000023 20
1B000031 20
1B000032 20
1B000046 20
1B000047 20
1B00000C 21
1B000010 21
1B0000A9 21
593 22
1B00004B 24
1B00004A 25
1B00000E 26
17331110 30
366 33
17330F10 34
1B000084 34
3EA 36
551 36
5A0 36
6B4 36
530 37
584 37
5E1 37
5E9 37
5F0 37
668 37
12DD546F 37
582 38
5F2 42
395 72
3DA 72
3EB 72
48B 72
504 72
5AC 72
661 72
663 72
3B5 73
3C0 73
3D5 73
3D6: 73
3E5 73
3E9 73
3CF 74
3D0 74
3D1 74
3CE 76
1FA 80
583 111
592 133
30B 144
3DC 144
656 144
12B 237
184 362
12DD5471 362

Do not use the logging function; instead, use the "Message Changes" view in KCANMonitor to see what changes occur when you press the remote control.

Best regards,
Rainer

Using two PuTTY windows, I can replay the log file on a virtual CAN bus on a Raspberry Pi using the command "canplayer vcan0=can0 -I Close-Windows-by-Remote-2.log", and use "cansniffer -c vcan0" to observe the message changes.

But because there are SO many messages, I'm unable to find the correct one...

Quote:

Thanks for your help! "I have a Raspberry Pi connected to the Comfort CAN bus in my car, powered by its own LiFePO4 battery that is only charged when the engine is running." How can I use the log file to feed KCanMonitor with data?

Hi Chris,

"Please note that support is only provided for the RKS+CAN CAN-Bus Kit and the KCANMonitor software, not for any other tools. I am not familiar with your other tools, and it is not my responsibility to provide support for them."

Please only contact support if you are experiencing issues with a product you have purchased. Thank you.

Best regards,
Rainer

Okay, I have the hardware you mentioned. I will connect it to the Comfort CAN bus and let you know how it goes.

"This is what KCanMOnitor displays, and I don't understand how to determine the Message ID used by the Remote Key Receiver."

Sure, I can try to help you find it. Could you please provide me with more information about what you are looking for? The more details you give me, the better chance I have of finding it.

For example, tell me:
* What is it called?
* Where did you see it last?
* What does it look like?
* What is it used for?

The more information you give me, the better chance I have of finding it.

When the car is running, there are more than three pages displaying messages that constantly change values and colors. It's far too much information to process.

Do you know the MQB Excel file named "vw_mqb_2010.xlsx"?

Since I don't have a strong understanding of technical German, I'm unable to identify which message IDs might be relevant.

Hi,

You can use the CAN hardware filters (programming options) to reduce the number of displayed messages to a manageable level.

When you press the remote control first "window down" and then "window up", the corresponding bytes are highlighted in a "toggled" color (orange). Now, subtract all the highlighted bytes that change even when you don't perform any action; this will leave only the bytes related to the remote control and the window up/down functions.
To subtract, you can print out the screens and overlay them on top of each other. It would be a great feature for the future to add a "Subtract this" button in KCANMonitor.

"You should only monitor the specific data packets that change when you press the remote control buttons to move the window up or down, rather than monitoring all changing messages."

Best regards,
Rainer

I am absolutely unable to find it using KCanMonitor.

Eventually, I resorted to a brute-force approach: I recorded a log of commands and replayed it. If the Windows systems responded in any way, I halved the log and replayed it again. If they still responded, I halved it again and replayed it... and so on.

Okay, I've cleaned up the log and now there are only 12 commands remaining.

1531641028.749384) can0 66E#E0783800FE000000
(1531641028.749702) can0 671#0007801500000000
(1531641028.749933) can0 1FA#0000002800000000
(1531641028.750531) can0 6B5#FD83FD03FD00FD07
(1531641028.754089) can0 3CE#0000000085400000
(1531641028.758577) can0 3D1#0200041881040000
(1531641028.759753) can0 6B2#2A400F20B997E40D
(1531641028.760864) can0 656#8D80090000000000
(1531641028.764774) can0 663#6028000E00910004
(1531641028.770602) can0 592#0000000000020000
(1531641028.774262) can0 583#00300A80200B5414

"Only the sunroof closes slightly on occasion when repeating these commands."

When I remove any of these codes, nothing seems to happen anymore when I replay them.

"Erkennt jemand diese Situation?"

**Translation:**

"Does anyone recognize this situation?"

Please any help would be greatly appreciated.

DatafoxChris wrote:

"Only the sunroof closes slightly on occasion when repeating these commands." When I remove any of these codes, nothing seems to happen anymore when I replay them. "Erkennt jemand diese Situation?" **Translation:** "Does anyone recognize this situation?" Please any help would be greatly appreciated.

Hi,

My guess is that when you "write" those messages, the original messages are still present on the bus, and the corresponding control units don't know what to do: Should they "do nothing," as indicated by the normal CAN messages, or should they "do something" based on your CAN replay?

"I would obtain the wiring diagram for your car and attempt to determine which messages originate from each control unit and how the window switch positions are communicated to the relevant control unit/motor driver."

"As with most VAG cars, there's a function that automatically closes the windows/roof when it rains. It should be possible to send a signal to control the windows/roof even when the ignition is off. I don't know if your car supports this feature, but I would be curious to see if it does."

Best regards,
Rainer

Do you have these VAG codes?
I could always give it a shot...

It appears you are correct: Whenever I send messages on a quiet line while the car is off, all modules start sending messages for a short period. It seems these modules are sending "do nothing" messages to the control units, which interferes with my "do something" messages. This is also the problem I encounter when trying to activate the headlights (find my car function).

My goal is to create an app that has buttons to control certain parts of the car while it's parked. There's a Raspberry Pi in my car, which is connected to a MiFi router and uses OpenVPN to connect to my home router. I will use SocketCanD (bound to the VPN connection only) to be able to send CAN commands from within the mobile app.

Right now, I can control and monitor the auxiliary heater, as well as the turn signal indicator lights.

I would like to be able to remotely close the windows and the roof, and control the headlights.

Not much luck so far... I would really appreciate any help!

DatafoxChris wrote:

Do you have these VAG codes? I could always try...

The central electrical module should include functionality for a rain sensor, and the control module must support the necessary coding.

DatafoxChris wrote:

It appears you are correct: Whenever I send messages on a quiet line while the car is off, all modules start sending messages for a short period. It seems these modules are sending "do nothing" messages to the control units, which interferes with my "do something" messages. This is also the problem I encounter when trying to activate the headlights (find my car function). My goal is to create an app that has buttons to control certain parts of the car while it's parked. There's a Raspberry Pi in my car, which is connected to a MiFi router and uses OpenVPN to connect to my home router. I will use SocketCanD (bound to the VPN connection only) to be able to send CAN commands from within the mobile app. Right now, I can control and monitor the auxiliary heater, as well as the turn signal indicator lights. I would like to be able to remotely close the windows and the roof, and control the headlights. Not much luck so far...

Again, any help would be greatly appreciated! }
Your Raspberry Pi module should act as a gateway: in normal mode, it simply routes all relevant messages on the bus from one side to the other. When you want to perform your specific function, replace the "normal" message with your custom message, which will trigger the desired action.

Best regards,
Rainer

Thank you for your help .

I have a VCDS Ross-Tech module, and I can log the special OBD messages when I control various components of the car using the VCDS software. However, I haven't been able to activate the headlights through VCDS.

I'll check if my dealer can connect to the car and control functions like turning on the headlights and closing the windows through their configuration console. I'll also enable logging and filter out any unusual messages.

I don't want to use Raspberry Pi devices as gateways to modify messages being sent to the headlight modules. This would consume additional power from the secondary battery, which would drain too quickly. I could use an Atmel chip with two CAN bus interfaces and communicate with my Raspberry Pi via a serial interface. I can write a program in C++ for the Atmel chip, but it would take some time, and I don't have much free time available right now.

By allowing the rain sensor to automatically close the windows (I believe the sunroof cannot be closed automatically), I was able to record this process, replay it, and identify the code responsible for closing the windows.

Close the front left and right windows when the car is parked:
5A0#0C04826E78

"I haven't been able to locate the code for closing the rear windows or the sunroof."

Bonus finds:

Lock all doors.
184#965245010A000600

Unlock the front left and front right doors:
184#60A20A0009000600


"Do you recognize these? If so, do you have any further information on how to interpret the individual components within the data contained in these codes?"