Well, I discovered that turning off Logic-7 substantially reduces the aggressiveness of the volume gain versus speed curve - almost the to point of being tolerable, so there is much less urgency for me in having a can blocker. I think my next move will be to install a 4 conductor can bus "loop" from the audio head unit run to some place that is convenient to connect to (like the passenger foot well). With that can setup a can bus sniffer, monitor the traffic to/from the head unit, and even disconnect the head unit from the can bus if needed. I suspect I will lean a lot.

 

I've been a bit crazy guys!

So I finally had enough data on my w203 and courage to do this. I'm porting MBUX from the new S class to my w203s android tablet!

It's running as an android app (custom design) using images extracted from a w205 IC firmware. Canbus communication is done using an arduino with 2 shields on it, one for can C, and another for Can B.

If anyone to try this out, you can check out the code repository. This would work perfectly with the w211 as well!
https://github.com/rnd-ash/MBUX-Port

I'm going to attempt to do a lot of controls from the tablet such as windows and wipers. Unfortunately AC system is read only but I can still display more information such as refrigerant temperature and interior temp!

 

Amazing work and kudos to you brother. I didn’t know you can address two separate CAN shields stacked on one Arduino. Keep up the good work.

 

Following up on my speed controlled volume hack, I have been looking into it and I may go with a different strategy other than a can blocker. MB uses a brain dead algorithm for SCV (which helps make it extra annoying). They increment the volume in discrete steps at discrete speeds. At 0, 30, 60 (and presumably 90) MPH, the head unit steps the volume up or down depending on whether you are accelerating or decelerating. So my thought was to build a unit that sits on can B and monitors the speed signal and whether I am accelerating or decelerating. At 0, 30, and 60 MPH it would inject the appropriate volume down or volume up frame to counter act the action of the SCV, resulting in a more consistent volume level. This is essentially what I have been doing manually while driving anyway, so I "modeled" this using the steering wheel volume up/down, watching the speedo, and using me as the controller and it seems to work pretty well (my timing wasn't always perfect).

While not perfect, this approach has several advantages, including substantially reduced hardware/software requirements, no need to cut into the can wiring, and it won't interfere with the nav system function.

 

Hi R,
If I may trouble you a bit for your knowledge.
You got the transmission oil temp data from the CAN B, if I am using an OBD2 with Torque Pro App, what do you think is the suitable custom PID to get the trans oil data ?
I have been digging/googling for custom PID of W212 with M276 DE LA 30, 3 liter engine and 7 speed plus 722.9 transmission oil temp PID, no one has it.

OBD2 protocol itself does not have PID for engine oil pressure, engine oil temp and trans oil temp... which is so sad.

My iCarsoft MB V2.0 which is supposedly Mercedes specific, can extract Trans Oil Temp data from the OBD port, but I do not know if that is OBD2 protocol or CAN B , sorry, me IT dummy.

Many thanks....

 

Does anyone know of a convenient post to access CAN B on a 2014 G550 (W463)? I knew exactly where to go on my '03, but in 2013 there was a major update. Is CAN B by any chance available on the ODBII connector on two of the non-reserved pins?

Thanks!

 

Displaying some important data from canbus C on my android tablet. Any more sensors to consider?

https://github.com/rnd-ash/MBUX-Port

 

Hi kidturbo. I am interested in experimenting with CAN bus hacking my 2016 W222. Is there any sort of resource as to decoded message Ids, etc and any recommendations on an interface to use?

Thanks for any information you have time to share.
-Wade

 

Well, I cheated on my speed controlled volume project. While it would have been fun to hack CAN bus, I wanted a quicker solution. So I bought a video-in-motion system from Mid City Engineering. While I don't need VIM, this device blocks the speed signal to the COMAND unit which has the lovely side effect of disabling that damn SCV function. Works like a charm! I'm much happier with my G now.

 

Hi Jbondox.

I would like to hear if you can help me, what can be done and how. I got a 2007 w211 220CDI. i have bougth a OM648 to put in, but after i bought it i hear that I can´t put it in, but I personally don´t like " you Can´t" i have head that from 2007 > mercedes changed protocols and bit code. Is this true? I have the OM 648 with 0281 011 698 EDC16C2 ECU, but how do I get it to talk to the rest of the car?
Like this?

Common Rail Diesel Management - SCS Delta
Adaptronic Diesel ECU ECM - Aftermarket ecu shop
MPC1 multi purpose CAN controller and logger- https://controls.is/shop/ecu/MPC1

Or maybe rasberry pii?
I want it to talk to dash and all the other units.

hope you will give me some advice.
Thanks.
Nicholas

 

All you need is engine, ECU, EIS and the keys. And if you’re like me you’d go to Mercedes and have your data card updates accordingly. The government and your insurance company would also like to know the changes or in case of an accident you could be in trouble.

 

Hi Mackhack.
Thanks for your reply, so correkt me if I didn´t understand, all stuff needed is: OM648, (ECU, EIS, KEYS)- That is matching? no need to change ELV-?

So MB didn´t changes, for the w211 in the last facelift, other than bringing new engine types?

Again Thanks a lot,

Best regards
Nicholas

 

ELV too. It slipped

Once it’s running you can work out the kinks like transmission and rear Diff coding if needed, but that’s not too bad. If you have Keyless-Go you also need the electronic gear shifter module from the donor car as it is a theft relevant part.

Hope I got it all together now.

 

So It is not a possibility OM648, 0281 011 698 EDC16C2, doing Adaptation to the cars existing EIS,ELV ect. Please see link below.



https://keymaster.pl/poldiag/

 

It is possible if you have the data. I didn’t know you do. But IMHO it’s cheaper to just buy a new used car instead of doing this crazy swap. Good luck.

 

Sorry for being absent for so long on this forum....I've done quite a lot lately. I thought I would make a video discussing my entire car hacking background over the past couple years, discussing some of the projects I've done in my W203 (Which can be copied in the W211). Feel free to check out some of the projects I've been up to in the video description.

 

Big thanks to angelovAlex, rnd_ash, Mackhack and others on the thread. angelovAlex, your discovery with the windows all down code was helpful to see how to put multiple instructions in the same byte. Mackhack, you were totally right, it was well worth diving in to learn it all rather than take shortcuts. rnd_ash, thanks for the inspiration from your videos. I've been hacking on the UCP and finally got the command to allow it open and close through the button on the front. Now to see if it will work in the car...

 

I just finished reading this entire thread. Thank you to all of the contributors here! I am working on a different project, but similar in many ways. I have recently finished swapping a M113K into an R170 (Chrysler Crossfire). The car is running great, and no complaints! However, it is now time to move on to better instrumentation. I am looking to deploy an Android based device, running RealDash. So far, I have modified an R170 cluster to accept a 12.3" LCD, integrated driver and translation electronics, and even have a Wideband O2 sensor tied in. Several analog sensors have already been added to the engine, including oil pressure, fuel pressure, and a few others. I will be using a VIM3 attached to an arduino (Teensy 4.0) setup to pull in various analog and digital I/O. So far I have built a "hot mock up" on the bench of all of the vehicle's electronics, and have most of the functions working. I still have some issues to work out with powering the VIM3 (specifically, getting it to go to sleep properly and wake up properly). I have a bead on how to approach that. Here's a couple of quick pics. Try to ignore the mess in the background. Have to make messes to make progress!


The SRT-4 symbology is a left over. Before I wound up with the M113K, I was headlong into putting a four cylinder turbo engine from a Dodge SRT-4 into the car. That progressed past all of the electronics, and into fitting the engine into a mule car. That's a different story...


My next task is human interfacing. This car is early enough that it only has a CAN-C bus in it. It has no CAN-B, LIN, EIS or other items that the newer cars have. I'd like to add a steering wheel from a W205:


I have three of these wheels in hand. Here's my problem: The wheels themselves have a LIN controller onboard. I have no data on the protocol for that. I do have various LIN transceivers for development, but by nature, the controller in the wheel remains in a very low power standby mode, until it receives a wakeup command. I do not have any MB vehicle with steering wheel controls, so I do not have a way of collecting the traffic, or even the data rate used for this. Would any of you have this info, or if not, be willing to tap into your wheels, to run a data capture? I feel that if I had that, I could work with this on the bench, and figure out the remaining commands. In the W205, this wheel is attached to the steering angle and control module, which then puts this info onto a FlexRay bus. I need the data from the LIN side of this. Any takers? Thanks!

 

Hi everyone.

I'm reverse engineering a Mercedes Comand joystick.
Would anyone happen to know the default message that turns all modules on? When I send a random message, the module does turn on, but seems to restart every 6 seconds.
Also looking for the message that turns on interior lighting.

Any help is much appreciated.

 

The messages have to keep coming, or the bus goes to sleep.

 

Is anyone's Mercedes similar to the W209 model in the sense that the seat heater buttons do not send any message on CAN B? o_0

I've seen brown/blue cables behind the panel, is this another CAN? Worth tapping into?

EDIT: Red/blue and brown**

 

Think that would be straight power to the heating elements, wouldn't it?

 

This is beautiful work! I don't have any good advice for you at this time, but I will be tracking your progress and am also registering on the RealDash forums to become informed myself... I'd love to convert the cluster of the '06 G55 I'm picking up this week to be actually-useful in this way!

 

I think it’s possible to create some protective system for hacking information. To do it will help me https://bambooapps.eu/because I do not have much skills in programming before. I heard about hacking information of car owners before. Hacking is the act of finding the possible entry points that exist in a computer system or a computer network and finally entering into them.

 

I have progressed since I posted that. I have created a LIN interface, and have decoded the buttons on the W204 and W205/213 wheel. Even have the backlighting working for the buttons, and it is selectable for brightness. I haven't had time to deploy it to the car itself quite yet, but it is coming.