E-Class (W212) 2010 - 2016: E 350, E 550
Sponsored by:
Sponsored by: CARiD

CAN BUS SNIFFING - The hardware & software you need

Old Jul 30, 2024 | 02:31 PM
  #26  
bv9900's Avatar
Junior Member
 
Joined: Jan 2024
Posts: 63
Likes: 2
200cdi w204
Hello guys, I'm still working with Arduino and I'm making progress, or so I think.
Since my knowledge of CAN networks is zero, everything is conjecture for me, and perhaps the use of Arduino causes me these doubts, but I don't think so.
So I come to the forum for feedback from the experts.
I put you in situation:
I analyze messages sent by vediamo, coding, for example, long messages that are decomposed into frames, but... the first bit has three digits, is this possible?
Ejemplo:
Message Trace Vediamo

15:32:04 Request:
22 02 07
15:32:04 IC_204:
62 02 07 00 CC 00 AE 00 8E 00 52 00 2A 00 14 00
00 03 84 06
A4 0D 48 10 68 12 8E 05 50 76 11 00
CC 00
B6 00 A2 00 76 00 4A 00 14 00 00 01 F4 03
E8 09 C4 0F 3C 15 7C 01 2C 07 D0 0F A0 17 70 1F
40 27 10 00 00 00 18 00 2F 00 47 00 5E 00 76 20
1E 12 57 08 56 3C 1E 19 14

message in arduino

ID: 60A, Data: 82 3E 0 0 0 0 0 0
ID: 481, Data: 82 7E 0 54 0 11 9 3
ID: 481, Data: 83 7F 22 78 0 11 9 3 request
ID: 481, Data: 810 59 62 2 7 0 CC 0
ID: 481, Data: 821 AE 0 8E 0 52 0 2A
ID: 481, Data: 822 0 14 0 0 3 84 6
ID: 481, Data: 823 A4 D 48 10 68 12 8E
ID: 481, Data: 824 5 50 76 11 0 CC 0
ID: 481, Data: 825 B6 0 A2 0 76 0 4A
ID: 481, Data: 826 0 14 0 0 1 F4 3
ID: 481, Data: 827 E8 9 C4 F 3C 15 7C
ID: 481, Data: 828 1 2C 7 D0 F A0 17
ID: 481, Data: 829 70 1F 40 27 10 0 0
ID: 481, Data: 82A 0 18 0 2F 0 47 0
ID: 481, Data: 82C 8 56 3C 1E 19 14 57
ID: 60A, Data: 82 3E 0 0 0 0 0 0 hasta aqui codigo

The captured bits are faithful to the source, so I don't think Arduino is playing tricks on me.
Can someone tell me this is normal and correct?
I don't see anything similar on the internet and I'm stuck in doubts that don't let me move forward with firm steps, because I can't do the next step, which is to replicate these messages.
Greetings

Last edited by bv9900; Jul 30, 2024 at 02:37 PM.
Reply
Old Jul 30, 2024 | 03:00 PM
  #27  
CaliBenzDriver's Avatar
Out Of Control!!
Community Builder
Community Influencer
Liked
Community Favorite
 
Joined: Apr 2019
Posts: 11,921
Likes: 6,769
From: Silicon Valley
W212 MY'14 M276-3.5NA @75kMi
streams of 01011100011

You need to decode the hexadecimal packets to make sense of what's coming through.
​​​​​​
The issue at the binary level is you won't be able to deferenciate good from bad signaling.

Reply
Old Jul 30, 2024 | 03:51 PM
  #28  
bv9900's Avatar
Junior Member
 
Joined: Jan 2024
Posts: 63
Likes: 2
200cdi w204
It seems to indicate the position in eeprom?
The last copy of the IC I have doesn't match very closely, I've tinkered around quite a bit since then. I will have to make a new copy to study and confirm the theory, although I don't really want to go in there, it is very laborious.
Trying to send these messages should work.
What do I focus on?
study? send messages trying different things as if it were a donkey asking for food?
Reply
Old Aug 24, 2024 | 01:41 PM
  #29  
bv9900's Avatar
Junior Member
 
Joined: Jan 2024
Posts: 63
Likes: 2
200cdi w204
I finally got it some time ago, Arduino is valid for receiving non-corrupted messages, but... you have to repeat the captures many times, because sometimes messages escape when there is a lot of traffic, other hardware is better. I finally got what I wanted, I will continue exploring possibilities
Reply
Old Aug 24, 2024 | 02:52 PM
  #30  
CaliBenzDriver's Avatar
Out Of Control!!
Community Builder
Community Influencer
Liked
Community Favorite
 
Joined: Apr 2019
Posts: 11,921
Likes: 6,769
From: Silicon Valley
W212 MY'14 M276-3.5NA @75kMi
What's with oil pressure sensor circuit ...?
Few MB engines have one.
Are you trying to network oil sensor data ?
Reply
Old Aug 24, 2024 | 07:09 PM
  #31  
bv9900's Avatar
Junior Member
 
Joined: Jan 2024
Posts: 63
Likes: 2
200cdi w204
correct, buy a 10bar psa group sensor (I hope it is enough), this sends the signal to an arduino, the arduino will send a signal to canbus to represent the alarm
Reply
Old Dec 8, 2024 | 10:40 PM
  #32  
benzdude's Avatar
MBWorld Fanatic!
20 Year Member
Loved
Community Favorite
Top Answer: 1
 
Joined: Nov 2003
Posts: 2,412
Likes: 497
From: Earth
2015 C300 4Matic Sport

https://www.youtube.com/@MrDIYca

https://store.mrdiy.ca/p/esp32-can-bus-shield-bundle/
Reply
Old Dec 26, 2025 | 08:19 PM
  #33  
Kurss's Avatar
Newbie
 
Joined: Dec 2025
Posts: 1
Likes: 0
w124, 2x w212 and w205
i would be happy if someone can sniff me information about w212 instrument cluster canbus


Originally Posted by S-Prihadi
Finally, with a powerful hardware : the CL2000 and software SavyCAN, I know now why the DIY grade Arduino and Can Bus Shield v2 does not produce good enough result for me to detect the High Beam Command.

Its the data frames high load from my W212. Average 1,700ish data frames per second !!! Damn. 50MB of text file from 10 minutes logging and a bit more than 1 million total data frames captured....crazy !!!




I only have 47 modules, 37 of CAN BUS and 10 of LIN. I think some modules can generate more than 1 ID, I got total 107 ID ( devices ) broadcasting on the CAN E2.
I think also some ID are not from CAN E2 only, from other BUS, because there is a N93 gateway re-broadcasting them. I don't know, me CAN BUS stupid for now

Lowest priority at 107th, is ID 0x39F device ( I don't know what it is, that is a Hex ID ) and is transmitting only once per second. The 1,001 is millisecond, so that is 1 second. Device 107 total have broadcast out 306 times.
The above file is part 2 or 4 minutes worth of the total 10 minutes sniffing.
The log files I on purpose set it at 20MB size each, because 20MB for a TEXT file or CSV is already very big.


Highest priority ID is 0x003 in Hex, in decimal that means 3rd. The lower the Hex ID, the said device wins and gets to broadcast first. In CAN BUS the who gets first to talk mechanism is called arbitration.
The 107th ID is 0x39F in Hex and in decimal that is 927th.
https://www.kvaser.com/about-can/the...n%20idle%20bus.
So in just 4 minutes, ID 0x003 per 10millisecond broadcast, has broadcasted 30,128 data frames.




Near 10 minutes worth of sniffing, near 50MB log files in 3 splits, that is a lot. CL2000 is not only a live stream sniffer, it is also a smart Logger. I really like it.






These are the device ID and the messages for High Beam Toggle , permanent ON, stalk push forward) ...... and
Blip-Momentary ON, stalk push towards us the driver ...and
Low Beam
https://youtu.be/tkk8snrjT9A
Apology for the first 1 minute of the video, I was choked by the smell of Baygon insect spray I just sprayed because there was a cockroach.




.
This gentlemen has a good video showing on how he uses SavyCAN on a Land Rover. He is lucky his CAN BUS load is low, under 700 frames per second.
https://youtu.be/tyHpL1LmgWg




WILL CONTINUE.....................
Reply
MB World Stories

The Best of Mercedes & AMG

story-0

6 Mercedes Models That Did NOT Age Well (But Are Somehow Still Cool)

 Verdad Gallardo
story-1

Manual Mercedes? 6 Times Sindelfingen Let Drivers Have All The Fun

 Verdad Gallardo
story-2

Mercedes SLR McLaren 722 S Is Extremely Rare Example Modified by McLaren

 Verdad Gallardo
story-3

8 Classic Boxy Mercedes Designs That Have Aged Like Fine Wine

 Verdad Gallardo
story-4

Flawlessly Restored Mercedes 190E Evo II Heads to Auction

 Verdad Gallardo
story-5

Electric Mercedes C-Class Unveiled: 11 Things You Need to Know

 Verdad Gallardo
story-6

Mercedes EQS Gets A Major Update: Everything You Need to Know

 Verdad Gallardo
story-7

5 Underrated Mercedes-Benz Models That Don't Get the Love They Deserve

 Verdad Gallardo
story-8

Mercedes 300D Has Pushed Well Past 1 Million Miles and It Ain't Stopping

 Verdad Gallardo
story-9

10 Most Reliable Mercedes-Benz Models You Can Buy Used

 Verdad Gallardo
Old Jan 3, 2026 | 11:01 AM
  #34  
long3rsky's Avatar
Newbie
 
Joined: Dec 2025
Posts: 5
Likes: 3
fabia 1 sdi
As a newbie to the CAN network too, I will share my experiences related to this thread.

First of all I wouldn't use notepad, canhacker or excel; not anymore
Savvy or Cangaroo is a free and good tool designed for exactly what you need. Excel is fine but only for playback data, not live.
Right now I use esp32 and savvy. Imo old espwroom32 is much better than stoneage unor3 with his all shields. There are many opensource projects like for arduino.
It allows read/write data with builtin wifi over lan or even internet. It's powerfull gpio device with internet connection if you want make your projects but it's other srory.
But you will need some coding knowledge; 10 minutes youtube solutions never work

If you're looking for a cheap, ready-to-use device, I've heard a lot good things about the Canable 2.0, a few dollars from myfriends, but I haven't tried it myself.
Modern models like 213 has canfd - one frame is sent with different speeds. MCP modules with arduino or even cl2000 can't read it, Canable2 apparently can do.

Back to your 212 CHASSIS2; signals under 45, 69 and 283 IDs from youtube






Also here are IDs you are curious about.





As you noticed single device may have many IDs according to the data inside. Lower ID - more important message and priority in transmit.
So first IDs are ezs/eis (usually 0), brakes, srs, gearbox, engine, sam etc.
One device may appear in several bus under the same ID, fox example 39F is cluster which appears in can-b, can-e and can-e2 and it has 3 CANs in wiring. Some data between different buses may be also exchanged thru ZGW.

I share you some dbc files for savvy and 212lift. In savvy go file/dbc file mnger and load filters appropriate for the tested bus.
Some random of my can-e logs from 212prelift below with dbc.




Attached Files
File Type: rar
212lift.rar (184.0 KB, 2 views)
Reply

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 

Thread Tools
Search this Thread
Rate This Thread
Rate This Thread:
You have already rated this thread Rating: Thread Rating: 0 votes,  average.


All times are GMT -4. The time now is 05:33 AM.

story-0
6 Mercedes Models That Did NOT Age Well (But Are Somehow Still Cool)

Slideshow: Not every Mercedes design becomes timeless, some feel stuck in the era they came from.

By Verdad Gallardo | 2026-05-12 18:09:07


VIEW MORE
story-1
Manual Mercedes? 6 Times Sindelfingen Let Drivers Have All The Fun

Slideshow: Yes, Mercedes built manual cars, and some of them are far more interesting than you'd expect.

By Verdad Gallardo | 2026-05-02 12:36:58


VIEW MORE
story-2
Mercedes SLR McLaren 722 S Is Extremely Rare Example Modified by McLaren

Slideshow: A one-of-one U.S.-spec Mercedes-Benz SLR McLaren Roadster became even rarer after a factory-backed transformation at McLaren's headquarters.

By Verdad Gallardo | 2026-04-29 11:19:28


VIEW MORE
story-3
8 Classic Boxy Mercedes Designs That Have Aged Like Fine Wine

Slideshow: Before curves took over, Mercedes mastered the art of the straight line, and some of those shapes still look right today.

By Verdad Gallardo | 2026-04-25 12:05:49


VIEW MORE
story-4
Flawlessly Restored Mercedes 190E Evo II Heads to Auction

Slideshow: The 190E Evolution II shows how a homologation necessity became a six-figure collector icon.

By Verdad Gallardo | 2026-04-22 17:53:47


VIEW MORE
story-5
Electric Mercedes C-Class Unveiled: 11 Things You Need to Know

Slideshow: Mercedes is turning one of its core nameplates electric, and the details show just how serious this shift is.

By Verdad Gallardo | 2026-04-21 13:58:06


VIEW MORE
story-6
Mercedes EQS Gets A Major Update: Everything You Need to Know

Slideshow: Faster charging, longer range, and a controversial steer-by-wire system define the latest evolution of Mercedes-Benz EQS.

By Verdad Gallardo | 2026-04-15 10:35:34


VIEW MORE
story-7
5 Underrated Mercedes-Benz Models That Don't Get the Love They Deserve

Slideshow: These overlooked Mercedes-Benz models never got the spotlight, but they quietly delivered more than most remember.

By Verdad Gallardo | 2026-04-13 19:35:45


VIEW MORE
story-8
Mercedes 300D Has Pushed Well Past 1 Million Miles and It Ain't Stopping

Slideshow: A well-used 1991 Mercedes-Benz 300D with more than one million miles is now looking for a new owner, and it still appears ready for more.

By Verdad Gallardo | 2026-04-10 10:05:15


VIEW MORE
story-9
10 Most Reliable Mercedes-Benz Models You Can Buy Used

Slideshow: From bulletproof sedans to surprisingly tough SUVs, these Mercedes models proved that the three-pointed star can go the distance.

By Verdad Gallardo | 2026-04-08 09:55:49


VIEW MORE