Jeep > 2013 ignition message ID

Ideas and discussion of what to do with the CAN Bus ( i.e. XMDirect, iPod, Carputer, etc... )
Post Reply
marian
How the heck did I end up here?
Posts: 3
Joined: 2016 Oct 03 11:05

Jeep > 2013 ignition message ID

Post by marian » 2016 Nov 14 10:40

Hi,

I'm looking for ignition on message - Jeep > 2013.

Best regards,
Marian

nemiro
CAN? Tin or aluminum?
Posts: 35
Joined: 2015 Feb 07 20:06

Re: Jeep > 2013 ignition message ID

Post by nemiro » 2016 Dec 15 20:46

Responded in your other thread. Here's a bunch of stuff I have gathered from these forums, my own testing, and elsewhere. Some of the items must be from other model year vehicles, because they are in conflict with each other. I use it to run a RER radio:

20b#6100 to turn it on, and 20b#0000 to turn it off. The car broadcasts the on message about every 100ms to keep the listening
nodes alive, so on a bench you'll need to send it frequently.


Message id 308 is sent out when the interior dimmer is changed. I've seen the following data so far:
Try id 210, as well (0x210 works with 2009 MY radios):
308#0000ff # lights off
308#110000 # daytime - lights on bright
308#122200 # lowest dimmer setting
308#124c00 # next highest
308#12a000 # next highest
308#12c800 # all the way up

No key 000 (6) 00 XX XX XX XX XX
Key in 000 (6) 01 XX XX XX XX XX
Accessory 000 (6) 63 XX XX XX XX XX
Ignition (before start) 000 (6) 87 XX XX XX XX XX
Start 000 (6) AF XX XX XX XX XX
Ignition (after start) 000 (6) 87 XX XX XX XX XX


Byte order is:
0 1 2 3 4 5 6 7
0->MSB, 7->LSB
( Vice: 7 6 5 4 3 2 1 0 which is probably the way we 'should' address them )

1BD :: SDAR Status?
Byte 0 : 0 -> Signal Good, C -> No Signal, 8 -> Mute(during channel change)
Byte 0.1 : 9 -> On, 5 -> Off, 1 -> Initial Power up?
Byte 1 : Sirius Channel #
Remaining bytes change in sets. Below are samples of observed data.
Byte 2->3: 6D 83
Byte 2->3: 86 83
Byte 2->3: 69 94

43B :: SDAR More status? ( Maybe just presence )
Observed variations:
Most common: FD 3E 3F FF FF FF FF FF
Next most common: FD 3E BF FF FF FF FF FF
Remaining were only observed during buffer overflow state on the can232,
and can probably be discarded.
And next most: FE 3E 3F FF FF FF FF FF
Least common: FE 3B 3F FF FF FF FF FF

1BE :: Genre ascii values ( Zero padded on right )
1BF :: Channel Name ascii values ( Zero padded on right )


3D0 :: Stereo Audio Settings ( Decimal )
Byte 0 : Volume 00 -> 38 (Mute->Full Blast)
Byte 1 : Balance 01 -> 19 (L->R) 10 => Center
Byte 2 : Fade 01 -> 19 (F->R) 10 => Center
Byte 3 : Bass 01 -> 19 (-9 -> +9) 10 => Center
Byte 4 : Mid 01 -> 19 (-9 -> +9) 10 => Center
Byte 5 : Treble 01 -> 19 (-9 -> +9) 10 => Center
Byte 6 : On x13 Off x00 ?

394 :: EVIC?? :: FM and AM Mode
Byte 0 : Same as 09F ( for 0.0 and 0.1 )
Byte 1.0 : 0
Byte 1.1,2 : Same as 09F
Byte 3->5: 00 00 00

09F :: Radio :: Power up Logo
Byte 0->7 : 07 20 00 00 FF FF FF CF

09F :: Radio :: AM Mode
Byte 0.0 : Preset # ( 0 if not preset )
Byte 0.1 : 0
Byte 1.0 : 2
Byte 1.1,2 : Chan #
Byte 3->7: 01 FF FF FF 0F

09F :: Radio :: FM Mode
Byte 0.0 : Preset # ( 0 if not preset )
Byte 0.1 : 1
Byte 1.0 : 2
Byte 1.1,2 : Chan # * 10
Byte 3->7: 01 FF FF FF 0F

09F :: Radio :: CD mode ( 6 disc MP3 Changer )
Byte 0.0 : Disc #
Byte 0.1 : 3
Byte 1 : 20 ( Right halfbyte May be part of Track # if #>255 )
Byte 2 : Track #
Byte 3 : 3F ?
Byte 4 : Hours
Byte 5 : Minutes
Byte 6 : Seconds
Byte 7 : 0F ?

09F :: Radio :: Sirius Mode
Byte 0.0 : Preset # ( 0 if not preset )
Byte 0.1 : 4
Byte 1 : x20
Byte 2 : Chan #
Byte 3->7: FF FF FF 0F



ID - Byte # - Description

159 - 6 - Fuel Level, in 0.5 liters. The LX cars have a 19 gallon/71 liter tank, the full reading is 142 units, one gallon to go at 4 units.



Unverified:
0x000 power mode
0x002 speed, tach
0x003 shifter, foot brake and gear position?
0x1C8 lights?
0x012 key fob
0x0D0 parking brake?
0x210 dimmer


ID: 1A6 (steering wheel buttons)
00 00 (ready)
01 00 (menu up)
04 00 (menu down)
02 00 (menu right)
08 00 (music button)
10 00 (menu button)
20 00 (vol up)
80 00 (vol down)
40 00 (nav button)

Notes:
00 00 must follow other commands to "ready" the system

in CAN HACKER it looks like:
ID: 1A6 DLC:2 DATA:XX 00 (xx = see above table)


Steering Wheel Input Controls
id:3A0 byte:0 bit:0 -> Note Button
id:3A0 byte:0 bit:1 -> Vol Up Button
id:3A0 byte:0 bit:2 -> Vol Down Button
id:3A0 byte:0 bit:3 -> Up Arrow Button
id:3A0 byte:0 bit:4 -> Down Arrow Button
id:3A0 byte:0 bit:5 -> Right Arrow Button

SKREEM
id:012 {0x01, 0x02, 0x00, 0x40, 0x87, 0xa5} -> Lock Doors
id:012 {0x03, 0x02, 0x00, 0x40, 0x87, 0xa5} -> Unlock Doors
id:012 {0x05, 0x02, 0x00, 0x40, 0x87, 0xa5} -> Trunk Release

Radio Status...
One mode at a time
AM Radio Status
id:09F {0xm0, 0xnn, 0xoo, 0x07, 0xFF, 0xFF, 0xFF, 0x01}
m=preset #
0xnnoo = AM frequency
FM Radio Status
id:09F {0xm1, 0xnn, 0xoo, 0x07, 0xFF, 0xFF, 0xFF, 0x01}
m=preset #
0xnnoo = FM frequency * 10
CD Status
id:09F {0xm3, 0x00, 0xnn, 0x07, 0xoo, 0xpp, 0xqq, 0x01}
m=preset #
0xnn = track number
0xoo = hour
0xpp = minute
0xqq = second
Satellite Radio Status
id:09F {0xm4, 0x00, 0xnn, 0x07, 0xFF, 0xFF, 0xFF, 0x01}
m=preset #
0xnn = Satellite Channel

EVIC Display...
I think it only cares about AM or FM radio
AM Radio
id:394 {0xm0, 0xnn, 0xoo, 0x00, 0x00, 0x00}
m=preset #
0xnnoo = AM frequency
FM Radio
id:394 {0xm1, 0xnn, 0xoo, 0x00, 0x00, 0x00}
m=preset #
0xnnoo = FM frequency * 10

Amplifier Settings
id:3D0 {0xVolume, 0xBalance, 0xFade, 0xBass, 0xMid, 0xTreble, 0x00}
Volume (0-39)
Balance (0-20)
Fade (0-20)
Bass (0-20) need to double check range
Mid (0-30) need to double check range
Treble (0-30) need to double check range

Radio Power
id:0x416 {0xFE, 0x16, 0x3f, 0xff, 0xff, 0xff, 0xff, 0xff}

Satellite Radio Control
id:3B0 {0xmm, 0xstation, 0x00, 0x00, 0x00, 0x00}
mm=0x21
mm=0x23
mm=0x00
station = station number

Satellite Radio Status
id:1BD byte:0
value = 0x85 -> needs station initialization ??
id:1BD byte:1
value = channel number

Satellite Radio Genre
id:1BE

Satellite Radio Channel Name
id:1BF

Satellite Radio Text
id:3BD byte:0 bits:0-3 -> Line number (8 lines total) (Each line consists of 4 sub lines)
id:3BD byte:0 bits:4-7 -> Sub Line (clear the line when receiving sub line 1)
id:3BD bytes 1-7 -> Text

Dimmer ID is 0x210 and byte 2 value varies the brightness


3e6 00 0d 12 ... # hours, minutes, seconds since vehicle turned on
244 81 00 39 C3 80 # Driver's door open, byte 0
244 80 00 39 C3 80 # Driver's door closed, byte 0
208 01 22 6d 5a 1e 01 2c # Left blinker on, byte 0
208 00 22 6d 6a 1e 01 2c # Left blinker off, byte 0
208 02 22 6d 5a 1e 01 2c # Right blinker on, byte 0
208 00 22 6d 6a 1e 01 2c # Right blinker off, byte 0
1e1 00 00 10 65 00 00 00 00 # Steering wheel position, bytes 3 & 4
2e0 00 01 47 21 ff ff 0c # Brake pedal depressed, byte 4
2e0 00 01 47 20 ff ff 0c # Brake pedal released, byte 4
2e7 84 1c 00 00 00 00 87 # Parking brake on, byte 0
2e7 04 1c 00 00 00 00 87 # Parking brake off, byte 0
292 00 49 33 00 00 48 28 # Throttle pressed, byte 3
2a8 00 01 00 00 00 00 # Windshield wipers, byte 3
2e5 03 # Rear wiper
2d2 01 06 00 # 4WD-HI
2d2 04 04 00 # 4WD-LO
2d2 00 03 00 # 2WD
208 00 22 6d 5a 1e 01 2c # Lights on w/ fogs
208 58 22 6d 51 1e 01 2c
2e1 1a
208 00 22 6d 5a 1e 01 2c # Lights off w/ fogs
2e1 1b
2e1 1b # Fogs on
2e1 0b # Fogs off
2e1 0a # Lights on w/o fogs
2e1 0b # Lights off w/o fogs
29e 00 03 97 20 02 ff ff ff # Change to FM 91.9
291 09 01 05 30 f0 00 07 # Change to satellite, w/ no signal
293 00 00 b8 20 02 ff ff ff
291 01 01 05 10 10 00 07 # Change to FM, 91.5
291 00 03 93 20 02 ff ff ff
291 09 01 05 30 80 00 07 # Change satellite stations
293 00 00 19 23 02 ff ff ff
295 43 65 73 52 65 77 6e 64 # ClsRewnd
29e 00 00 0f 21 02 00 00 00 # Change CD tracks, byte 3
3d9 0a 0a 0a 0a 0a ff # Change volume, byte 0
3d9 08 0a 0a 0a 0a ff # Change volume, byte 0

Keiron
How the heck did I end up here?
Posts: 4
Joined: 2017 Feb 23 04:24

Re: Jeep > 2013 ignition message ID

Post by Keiron » 2017 Feb 28 12:22

I'm just about to start looking into this myself on my 2011 Jeep Patriot, managed to get the can attached this afternoon and data started flowing. Took me a while to realise that my difficulties were down to an 83.3k can b bus!

Anyway, if you want to catch up and swap notes - drop me a line!

Keiron

nemiro
CAN? Tin or aluminum?
Posts: 35
Joined: 2015 Feb 07 20:06

Re: Jeep > 2013 ignition message ID

Post by nemiro » 2017 Mar 08 14:52

I'd be interested in if you could isolate the following messages:
- Parking brake on / off
- Transmission range selection (PRND3)

Thanks!

Keiron
How the heck did I end up here?
Posts: 4
Joined: 2017 Feb 23 04:24

Re: Jeep > 2013 ignition message ID

Post by Keiron » 2017 Mar 19 06:26

Hello again,

$0D0 is the handbrake on my Patriot $80 = on, $00 = off (5th bit?)
$002 is the RPM in offset $00 * 256 + $01
$002 is the Speed in offset $02 and $03, haven't worked out the formula yet
$150 is my drive mode $01 = 4WD, $03 = 2WD
$006 is the actual lights status at offset $00 01 = left indicator 02 = right indicator 08 = side lights 016 = main beam 32 = full beam 64 = front fogs 128 rear fogs
$0EC = rear heater at offset $00, $80 =on $00 = off
$02e = traction control at offset $01, $01 = on, $00 = off

nemiro
CAN? Tin or aluminum?
Posts: 35
Joined: 2015 Feb 07 20:06

Re: Jeep > 2013 ignition message ID

Post by nemiro » 2017 Apr 15 23:59

What year Patriot? Can you capture the full PRND3 (PRNDL) messages? Thanks!

Post Reply