I apologize for the English, my German isn't good enough for technical postings (or anything else for that matter!
), also there isn't a better place for CANbus hacking!
I'm working on later generation VW CAN messages (2013 Jetta TDI), I'm quite surprised on the amount of data VW exposes on the "infotainment" bus (did they combine comfort and infotainment?).
So far, this is what I've figured out:
0x35B - Engine speed/temp
- byte1 = low byte RPM
- byte2 = high byte RPM
- byte? = Coolant temp?
0x29B - Vehicle speed?
- byte1 = low byte speed
- byte2 = high byte speed
0x5C1 - Steering wheel controls
0x291 - Remote control/Door lock button status
- byte0 = remote buttons (0x81 lock, 0x41 unlock, 0x11 trunk, 0x21 panic)
- byte1 = interior lock buttons (0xAA unlock, 0x55 lock)
0x2c1 - Stalk status?
- byte0 = blinker status (0x01 left, 0x02 right)
- byte1 = wiper status (0x10 spray, 0x02 intermittent, 0x04 low speed, 0x08 high speed)
0x381 - Driver's window status
0x3B1 - Passenger's window status
0x4BD - Rear passenger's window status
0x4B9 - Rear driver's window status
- byte1 = auto roll switch (0x10 up, 0x20 down)
- byte2 = window level (0x00 up, 0xff down)
These seem to be just status messages, but I don't see any command messages pop up when working locks or windows... Maybe I just need to dig more, but I was hoping maybe someone could enlighten me?