This file contains the list of CAN bus frame formats and semantics discovered by looking at the frames captured on a manual-transmission diesel 2013 Nissan Qashqai J10. A portion of the data here applies to other Nissan models like Juke, Pulsar, Sentra, 370Z, X-Trail, Murano from the same period of time, and to a lesser extent to the automatic-transmission and electric models (Nissan Leaf). The automatic-transmission models will have frames 421 and/or 41f, 176 with gearbox information which the manual models don't use. Some specifics for other models can be found here, here and here.
Nissan Qashqai, unlike many other cars, only has one major CAN bus with between 6 and 12 devices connected to it (depending on model configuration) and it's the same bus you can access through the Data Link Connector (connector M4 in the service manual schematics) or the comfort unit. The service manuals refer to that bus as "CAN communication" or "CAN COMM". There is one other isolated bus using the CAN protocol and it connects the Audio unit to the NAVI unit who is the master device on that bus. That bus is referred to as "AV communication" or "AV COMM" in the service manuals. This file always refers to the main CAN bus. Both busses run at 500kbps with 11-bit addresses.
I captured the data using an off-the-shelf ESP32 board with an SN65HVD230 CAN transciever who's main function is to automate the power mirrors folding and unfolding in my car. Schematics, tutorial.
This file follows the bit addressing in this doc where CAN
bus message bytes in positions 1 to 8 are referenced by letters A-H and bits are numbered from 8th (MSB) to 1st (LSB).
Bit M in byte N is represented by N.M, e.g. the lowest bit of the 3rd byte is C.1 while the highest bit in
byte 1 -- or the first bit of the entire messsages -- is A.8. Frame IDs (addresses) are hexadecimal.
This lists individual values in the frames transmitted periodically by devices on the main CAN bus, i.e. frames that don't need to be requested. Multi-byte values are encoded as big-endian except where noted.
TODO: map signals to their names in chart in service manual LAN.pdf. TODO: map values to their names in chart on service manual INL-38 or DLK-610.
| Frame | Position in frame | Meaning | Format | Unit |
|---|---|---|---|---|
| 002 | A.8-B.1 |
Steering wheel angle | 2's complement 16-bit integer, little-endian, positive values in right turn, negative in left turn, range of about -6000 to 6000 | 0.1 degree / LSB |
| 002 | C.8-1 |
Steering wheel rate (TODO) | ||
| 002 | E.8-1 |
Message serial/timestamp | unsigned integer | |
| 160 | A.8-B.5 |
Effective engine torque, or could be pressure value, > when revving up, < when revving down, usually follows 180: C.8-D5 and 180: D.4-E.1 |
12-bit unsigned integer | |
| 160 | D.8-E.7 |
Accelerator/throttle pedal position (soft zone, value remains at maximum when above 75% stroke, i.e. all stiff zone) | integer between 0 (released) and 792 (at or behind the stiff-zone threshold) | |
| 160 | E.6 |
WOT -- Accelerator/throttle pedal in stiff zone, i.e. > 75% stroke | boolean, 1 if at or behind threshold | |
| 160 | G.8-H.7 |
Same as D.8-E.7 -- according to brad370 these two values are compared for error detection |
||
| 161 | A.8-1 |
Some sensor value, varies with engine RPMs | ||
| 161 | B.8-1 |
Some voltage value, strictly goes down with electric current consumption (with a delay) when engine running, constant when stopped -- might be used for the idle RPM calcluation or similar | ||
| 161 | C.8-1 |
Same as above but also goes up with engine RPMs -- roughly follows the sum of A.8-1 and B.8-1 |
||
| 161 | D.1 |
WOT -- Accelerator/throttle pedal in stiff zone, i.e. > 75% stroke | boolean, 1 if behind threshold | |
| 161 | E.8-1 |
Accelerator/throttle pedal position (soft zone, value remains at maximum when above 75% stroke, i.e. all stiff zone) | integer between 0 (released) and 0xfc (at or behind the stiff-zone threshold) | |
| 180 | A.8-B.2 |
Engine speed / revolutions | 15-bit unsigned integer | 0.25 RPM / LSB (service manual page MWI-27 says 8191.875 is displayed in case of malfunction, implying that the whole 16-bit value of A.8-B.1 -- hypothetically 0xffff in that case -- is simply divided by 8 to get the RPMs) |
| 180 | C.8-D.5 |
Reported to be engine torque, varies with engine load, could be pressure value, usually follows D.4-E.1 and 160: A.8-B.5 |
12-bit unsigned integer | |
| 180 | D.4-E.1 |
Varies with engine load, could be pressure value, usually follows C.8-D.5 and 160: A.8-B.5 |
12-bit unsigned integer | |
| 19b | A.8-5 |
Engine running status? | ||
| 19b | C.8-D.1 |
Related to fuel consumption, up when revving up, low at constant revs, 0 when revving down (doesn't match fuel consumption calculated from the l/100km efficiency indication on dashboard multiplied by current velocity though) | 16-bit unsigned integer | |
| 19b | E.8-5 |
Drive / reverse status? | 0b1111 for a moment after ignition switched to ON, 0b0000 when driving forward or stopped, 0b1001 in reverse, 0b0100 on cruise-control?, 0b0010 when gear-up request, 0b0101 when gear-down request |
|
| 19b | F.8-G.1 |
A rather stable sensor value | 16-bit unsigned integer | |
| 1f9 | A.7 |
A/C on while engine running | boolean, 1 when true | |
| 1f9 | A.4 |
A/C on while engine running (after A/C off, goes to 0 before A.7) |
boolean, 1 when true | |
| 1f9 | C.8-D.2 |
Engine RPM, same as 180: A.8-B.2 |
||
| 215 | B.7 |
Reverse gear / reverse light | boolean, 1 when in reverse | |
| 280 | B.8-D.5 |
A rapidly changing sensor value -- reacts to longitudinal axis acceleration | ||
| 280 | E.8-F.1 |
Vehicle absolute speed, similar to 284: E.8-F.1 |
16-bit unsigned integer | 0.01 km/h / LSB (slightly higher) |
| 280 | G.8-1 |
A rapidly changing sensor value -- reacts to longitudinal axis acceleration | 2's complement 16-bit integer, positive when force towards front, i.e. when parked on a downward slope or decelerating, negative on upward slope or accelerating | |
| 284 | A.8-B.1 |
Front right wheel absolute speed | 16-bit unsigned integer, 0 when stopped, positive when rolling in either direction | 1/175th km/h / LSB (7000 at 40kmh) |
| 284 | C.8-D.1 |
Front left wheel absolute speed | 16-bit unsigned integer, 0 when stopped, positive when rolling in either direction | 1/175th km/h / LSB (7000 at 40kmh) |
| 284 | E.8-F.1 |
Vehicle absolute speed | 16-bit unsigned integer | 0.01 km/h / LSB (slightly lower) |
| 284 | G.8-H.1 |
Message serial/timestamp | unsigned integer | |
| 285 | A.8-B.1 |
Rear right wheel absolute speed | 16-bit unsigned integer, 0 when stopped, positive when rolling in either direction | 1/175th km/h / LSB (7000 at 40kmh) |
| 285 | C.8-D.1 |
Rear left wheel absolute speed | 16-bit unsigned integer, 0 when stopped, positive when rolling in either direction | 1/175th km/h / LSB (7000 at 40kmh) |
| 285 | E.8-1 |
Vehicle absolute speed | 8-bit unsigned integer | km/h |
| 285 | G.8-H.1 |
Message serial/timestamp | unsigned integer | |
| 2a0 | B.8-C.1 |
Lateral axis acceleration force | 16-bit unsigned integer, 0x8000 in equilibrium, higher values when force towards right, i.e. when parked with right wheels lower or turning left (in forward or in reverse), < 0x8000 when parked with right wheels higher or turning right (in forward or in reverse) | 0.0001274 g / LSB according to some specs |
| 2a0 | D.8-E.1 |
Turn rate about vertical axis | 16-bit unsigned integer, 0x8000 no turn, higher values in left turn (right in reverse), < 0x8000 in right turn (left in reverse) | 0.005 °/s / LSB according to some specs |
| 2de | E.2 |
Efficiency unit is l/100km, as opposed to MPG or km/l | boolean, 1 when l/100km | |
| 2de | G.8-H.1 |
Distance-to-empty -- range at current fuel economy and fuel left (minus reserve, i.e. 0 km when fuel gauge in red zone), as shown on one of the dashboard panels | 16-bit unsigned integer | 0.1 km / LSB rounded to 1 km (10 LSBs) -- when efficiency unit set to l/100km |
| 354 | A.8-B.1 |
Vehicle absolute speed, similar to 284: E.8-F.1 |
16-bit unsigned integer | 0.01 km/h / LSB (slightly higher) |
| 354 | E.7 |
ESP (VDC/TCS) disable button | boolean, 1 when button in | |
| 354 | E.6 |
ESP (VDC/TCS) off dash light | boolean, 1 when light on | |
| 354 | E.4 |
ESP (VDC/TCS) off dash light | boolean, 1 when light on | |
| 354 | E.3 |
ESP (VDC/TCS) off dash light | boolean, 1 when light on | |
| 354 | E.1 |
ABS? off dash light | boolean, 1 when light on | |
| 354 | G.5 |
Brake pedal switch / brake light / stop light | boolean, 1 when foot on pedal | |
| 355 | A.8-B.1 |
Vehicle absolute speed, similar to 284: E.8-F.1 |
16-bit unsigned integer | |
| 355 | C.8-D.1 |
Vehicle absolute speed, similar to 284: E.8-F.1 |
16-bit unsigned integer | |
| 355 | F.8-1 |
TODO (Ambient brightness? unlikely) | 8-bit unsigned integer | |
| 358 | A.1 |
Key inserted | boolean, 1 when key in ignition | |
| 358 | B.7 |
Blower fan on (climate control) | boolean, 1 when fan running | |
| 358 | D.6 |
Likely oil pressure dashboard warning light | boolean, 1 when true | |
| 358 | F.2 |
Other-than-driver doors locked (even if some were unlocked manually) | boolean, 1 when locked | |
| 358 | F.1 |
Driver door locked | boolean, 1 when locked | |
| 35d | A.8 |
Ignition in ON | boolean, 1 when ON | |
| 35d | A.7 |
Ignition in half ON (TODO) | ||
| 35d | A.6 |
Blower fan on (climate control) | boolean, 1 when fan running | |
| 35d | A.3 |
Rear window defogging (defrost) | boolean, 1 when on | |
| 35d | A.2 |
Rear window defogging (defrost) | boolean, 1 when on | |
| 35d | A.1 |
A/C on | boolean, 1 when on | |
| 35d | B.2 |
Dashboard power | boolean, 1 when on | |
| 35d | B.1 |
Dashboard power | boolean, 1 when on | |
| 35d | C.8 |
Wipers moving | boolean, 1 when moving | |
| 35d | C.7 |
Wipers moving | boolean, 1 when moving | |
| 35d | E.5 |
Brake pedal switch / brake light / stop light | boolean, 1 when foot on pedal | |
| 551 | A.8-1 |
Engine coolant temperature | 8-bit unsigned integer, values in °C + 40, 0x75 at middle of gauge range, '0x5b' bottom of range |
deg C / LSB (service manual page MWI-27 says 215ºC is displayed in data monitor in case of malfunction, suggesting the raw 8-bit value received -- hypothetically 0xff in the malfunction case -- is offset by 40 and taken directly as degrees Celcius between -40 and 215) |
| 551 | B.8-1 |
Engine-related counter, rate proportional to revs, wraps at 0xff -- fuel consumed? |
8-bit integer | at idle increases at ~1.5 LSB / s |
| 551 | C.4-1 |
Some sensor reading, changes gradually from 0x4 to 0xa when blower fan spins up and back when it spins down but is independent of blower speed (may include all of C.8-1) |
integer | |
| 551 | D.8-1 |
Possibly dashboard lights | ||
| 551 | E.8-1 |
ASCD cruise speed/limit speed and status | target speed in km/h when engaged, 1 if being set currently | km/h |
| 551 | F.7-5 |
bitmap, 0b110 when setting ASCD cruise speed, 0b011 when setting limit speed, 0b100 if cruise engaged, 0b001 if limit engaged, 0b101 after cruise dis-enagaged?, 0s otherwise |
||
| 551 | F.4 |
Engine running? | boolean, 1 when running | |
| 551 | F.4-1 |
Other engine status bits? | ||
| 551 | H.8-1 |
Engine-related counter, same as B.8-1 |
||
| 5c5 | A.7 |
IGN not fully ON? | ||
| 5c5 | A.3 |
Handbrake / parking brake engaged as indicated on dashboard | boolean, 1 when engaged | |
| 5c5 | B.8-D.1 |
Car odometer absolute value (mileage) | 24-bit unsigned integer | km / LSB |
| 5c5 | E.1 |
Driver seatbelt unbuckled | boolean, 1 when unbuckled | |
| 5c5 | F.4-1 |
Might be oil level | ||
| 5dd | B.8-C.1 |
Some down counter, not fuel though | 16-bit unsigned integer | |
| 5e1 | A.8-B.1 |
Rapidly changing counter | 16-bit unsigned integer | |
| 5e4 | A.2 |
Some status bit, true before engine start, false after start (also after stop), not any dashboard light | boolean | |
| 5e4 | B.8-C.1 |
Rapidly changing counter | 16-bit unsigned integer | |
| 60d | A.7 |
Rear RH door open | boolean, 1 when open | |
| 60d | A.6 |
Rear LH door open | boolean, 1 when open | |
| 60d | A.5 |
Passenger door open | boolean, 1 when open | |
| 60d | A.4 |
Driver door open | boolean, 1 when open | |
| 60d | A.3 |
Position/parking/side lights on | boolean, 1 when on | |
| 60d | A.2 |
Headlights (either low-beam or high-beam) on | boolean, 1 when either lights on | |
| 60d | B.7 |
Right-turn signal or emergency lights on | boolean, 1 when on (delayed?) | |
| 60d | B.6 |
Left-turn signal or emergency lights on | boolean, 1 when on (delayed?) | |
| 60d | B.4 |
High-beam lights on (use together with A.2) |
boolean, 1 when on | |
| 60d | B.3 |
IGN switch ON or START (BCM input 38) | boolean, 1 when ON or START | |
| 60d | B.2 |
IGN switch ACC or ON (BCM input 37) | boolean, 1 when ACC or ON (can be interpreted as a bitmap together with B.3: 0b00 for OFF, 0b01 for ACC, 0b11 for ON, 0b10 for START) |
|
| 60d | B.1 |
Front fog lights on | boolean, 1 when on | |
| 60d | C.5 |
Any door locked | boolean, 1 when locked | |
| 60d | C.4 |
Any door locked | boolean, 1 when locked | |
| 60d | C.3 |
Rear fog lights on | boolean, 1 when on | |
| 60d | D.6 |
Trunk door request / beep | boolean, 1 when on | |
| 60d | D.2 |
Trunk door request / beep | boolean, 1 when on | |
| 625 | A.6-5 |
0b11 when ready to start? (injectors ready?) |
||
| 625 | B.7 |
Position/parking/side lights on | boolean, 1 when on (delayed?) | |
| 625 | B.6 |
Headlights (either low-beam or high-beam) on | boolean, 1 when either lights on (delayed?) | |
| 625 | B.5 |
High-beam lights on | boolean, 1 when on (delayed?) | |
| 625 | B.4 |
Front fog lights on | boolean, 1 when on (delayed?) | |
| 625 | C.7-1 |
Battery voltage (possibly Diesel-only) | 8-bit unsigned integer | 1/16th V / LSB, e.g. 0xc0 is 12V |
These are the BCM's service 0x30 PIDs that can be used to send commands and only send commands (there don't seem to be any useful information queries). The service listens on address 0x745 and replies on address 0x765 but it allows communication only as documented by Brad370z here, i.e. in a diagnostic session. SID 0x30 is known as "I/O control by local ID" in some protocols.
These commands toggle the different lights, actuators, speakers and other devices connected to the BCM, plus it seems the BCM will automatically request power to the right rails on the car from the IPDM-E/R so that the commands mostly work even when the car is completely off. The changes will time out after 5 seconds so these seem to be strictly diagnostic commands for quickly testing the different devices. At the same time it seems the changes can be extended in time by resending the commands before the 5s run out.
As documented by Brad370z each command consists of the service number 0x30, the PID/CID number, the function byte and the requested value.
Three functions seem to available:
| Function byte | Description |
|---|---|
0x00 |
Sends a one-time command such as door unlocking. Either this or 0x20 is supported by every PID, never both. |
0x01 |
Queries whether given value is supported by this PID. Every PID supports this function |
0x20 |
Causes a temporary 5-second change to a device's state |
Most PID/CIDs support values 0 (off) and 1 (on). For function 0x00 requesting the value 0 does nothing. For function 0x20 the value 0 disables a device temporarily if it's on, and cancels a previously requested value that hasn't timed out yet. For example if the left turn signal is currently blinking because the turn signal & wiper switch (stick/lever) is in the left position, requesting value will 1 will start blinking the right turn signal (and disable the left turn signal) for 5 seconds. Requesting value 0 will disable either turn signal for 5s whether it was requested with the physical switch or a diagnostic command.
| PID | Function (0x00/0x20) |
Values |
|---|---|---|
| 00 | Supported PIDs 01-1f bitmask: 32 20 c6 81 |
|
| 03 | 00 |
0: nothing, 1 & 2: TODO -- beeps like the lock/unlock switch and a relay action can be heard from the BCM |
| 04 | 20 |
0, 1, 2: TODO |
| 07 | 00 |
0: nothing, 1: Lock doors, 2: Unlock all doors, 3: Unlock driver door, 4: Unlock passenger doors |
| 0b | 20 |
0: Rear window defogging (defrost) off for 5s, 1: Rear window defogging (defrost) on for 5s |
| 11 | 20 |
0: Key beep off, 1: Key beep continuous tone for 5s |
| 12 | 20 |
0: Key beep off, 1: Key beep 4 short tones repeating for 5s (5 times) |
| 16 | 20 |
0: key beep off, 1: Key beep 4 short tones repeating for 5s (5 times) |
| 17 | 20 |
0: Roof light on for 5s, 1: Roof light on for 5s (same?) |
| 19 | 20 |
0: Roof light off, 1: Roof light on for 5s, 2: Roof light auto mode? in ACC on for 5s, in ON fade out and off for 5s |
| 20 | Supported PIDs 21-3f bitmask: 84 00 00 6d |
|
| 21 | 20 |
0: No-key dashboard light off for 5s, 1: No-key dashboard light on for 5s |
| 26 | 00 |
0: nothing, 1: Trunk door open |
| 3a | 20 |
0: Position/parking/side lights off for 5s, 1: Position/parking/side lights on for 5s |
| 3b | 20 |
0: Low-/high-beam off for 5s, 1: Low-beam lights on for 5s, 2: High-beam lights on for 5s |
| 3d | 20 |
0: Front fog lights off for 5s, 1: Front fog lights on for 5s |
| 3e | 20 |
0: Rear fog lights off for 5s, 1: Rear fog lights on for 5s |
| 40 | Supported PIDs 41-5f bitmask: 09 90 00 01 |
|
| 45 | 20 |
0: Front wiper off for 5s, 1: Front wiper fast mode for 5s, 2: Front wiper slow mode for 5s, 3: front wiper one-shot mode |
| 48 | 20 |
0: Rear wiper off for 5s, 1: Rear wiper on for 5s |
| 49 | 00 |
0, 1: TODO |
| 4c | 20 |
0: Turn signals/blinkers off for 5s, 1: Right turn signal on, left off for 5s, 2: Left turn signal on, right off for 5s |
| 60 | Supported PIDs 61-7f bitmask: 00 10 03 00 |
|
| 69 | MISSING | |
| 77 | 20 |
0: Check oil dashboard light off for 5s, 1: Check oil dashboard light on for 5s |
| 78 | 20 |
0, 1: TODO |
The engine computer seems to have its own service 0x30 to trigger diagnostic actions, with a similar syntax to the BCM's service 0x30. The service 0x30 commands as well as the diagnostic session request (02 10 c0) now need to be sent to address 7e0 instead of 745. The function byte is always 00 and the value byte is apparently ignored, so the functions and values are not listed below.
These commands can't be used when the engine is running, error 22 (conditionsNotCorrect) is returned if they're attempted with the engine running. Similarly some of the commands return error 22 if a previous related command is still in effect. The PID/CIDs may be specific to the K9K engine or a subset of engines.
| PID | Action |
|---|---|
| 03 | Runs the radiator for 2-3 secs |
| 04 | Runs the radiator for 2-3 secs |
| 11 | TODO |
| 12 | TODO (2 or 3 quiet tick sounds in 2 sec intervals) |
| 13 | TODO |
| 14 | TODO |
| 17 | TODO |
| 18 | TODO (makes a quiet ~5 Hz ticking noise from engine room for ~5 secs) |
| 22 | TODO |
| 26 | TODO |
| 35 | TODO |
| 36 | TODO |
| 37 | TODO |
| 38 | TODO |
| 41 | TODO |
| 42 | TODO |
| 43 | TODO |
Some or all of these may correspond to test commands (TODO: find matches), note this list is a mix of lists from different ECUs:
| ID | Action |
|---|---|
| AC001 | Preheating unit |
| AC004 | Turbocharging solenoid valve |
| AC011 | Rail pressure regulator |
| AC012 | Damper valve |
| AC017 | Canister bleed solenoid valve |
| AC018 | Upstream O2 sensor heating |
| AC019 | Downstream O2 sensor heating |
| AC027 | Motorised fuel valve |
| AC031 | Heating element no. 3 relay |
| AC038 | Low speed fan assembly relay |
| AC039 | High speed fan assembly relay |
| AC047 | OBD warning light |
| AC063 | Heating element no. 1 relay |
| AC064 | Heating element no. 2 relay |
| AC068 | Injection fault warning light |
| AC069 | Severe injection fault warning light |
| AC070 | Air conditioning compressor |
| AC109 | Idle regulation valve |
| AC116 | Coolant temperature warning light |
| AC180 | Air conditioning compressor relay control |
| AC195 | Electric coolant pump |
| AC250 | Heating resistor no. 1 relay |
| AC251 | Heating resistor no. 2 relay |
| AC252 | Heating resistor no. 3 relay |
These are the diagnostic PIDs/CIDs for the IPDM-E/R ECU (or BCM?) at address 74d. Like before diagnostic session 0xc0 required.
| PID | Function (0x00/0x20) |
Values |
|---|---|---|
| 00 | Supported PIDs 01-1f bitmask: 0b d2 00 00 |
|
| 05 | 00 | 0: nothing, 1: Very short honk |
| 07 | 20 | 0: Rear window defogging (defrost) off for 5s, 1: Rear window defogging (defrost) on for 5s |
| 08 | 20 | 0: Front wipers off for 5s, 1: Front wipers run slow for 5s, 2: Front wiper run fast for 5s |
| 09 | 20 | 0: Radiator off for 5s, 1, 2, 3: Run the radiator at different speeds |
| 0a | 20 | 0, 1: TODO triggers some big relay on for 5s |
| 0c | 00 | 0, 1: TODO |
| 0f | 20 | 0: Front lights off for 5s, 1: Low/high-beam off for 5s, 2: Position and high-beam off for 5s, 3: Blink high-beam, position lights off for 5s, 4: Front fog lights on and low/high-beam/position lights off for 5s |
Frames with Msg IDs 342 / 512 (two of each) can be seen exchanged by ECUs when ignition is moved from ACC to ON. See further description in key.md.
This is the supported subset of the standard ECU service 01 PIDs just as described on wikipedia. I captured the values with the engine off, ignition in ON on my 2013 manual transmission diesel J10. Any PIDs not listed here seem to be unsupported. The queries are sent to the address 7e0 and the replies are returned from address 7e8.
| PID | Meaning | Unit (formula to get physical value) | Captured value |
|---|---|---|---|
| 00 | Supported PIDs 01-1f bitmask | 98 3b 80 11 |
|
| 01 | Monitor status since DTCs cleared | bitmap | 00 64 80 00 (Diesel engine, Components test incomplete, Fuel test incomplete, EGR System test available) |
| 04 | Calculated engine load | % (100/255 A) | 00 |
| 05 | Engine coolant temperature | °C (A-40) | 4d |
| 0b | Intake manifold absolute pressure | kPa (A) | 5e |
| 0c | Engine speed | rpm (1/4(256A+B)) | 00 50 |
| 0d | Vehicle speed | km/h (A) | 00 |
| 0f | Intake air temperature | °C (A-40) | 51 |
| 10 | Mass air flow sensor (MAF) air flow rate | grams/sec (1/100(256A+B)) | 00 00 |
| 11 | Throttle position (doesn't seem to work, always 0?) | % (100/255 A) | 00 |
| 1c | OBD standards this vehicle conforms to | enum | 06 (EOBD-Europe) |
| 20 | Supported PIDs 21-3f bitmask | a0 01 80 00 |
|
| 21 | Distance traveled with malfunction indicator lamp (MIL) on | km (256A+B) | 00 00 |
| 23 | Fuel Rail Gauge Pressure | kPa (10(256A+B)) | 00 00 |
| 30 | Warm-ups since codes cleared | count (A) | 13 |
| 31 | Distance traveled since codes cleared | km (256A+B) | 03 7c |
As before this is the supported subset of the standard ECU service 09 PIDs just as described on wikipedia. Any PIDs not listed here seem to be unsupported, i.e. very little is actually supported and the VIN query (02), while available, returns no data. The other two PIDs have lengths that don't match the specs.
| PID | Meaning | Value |
|---|---|---|
| 00 | Supported PIDs 01-1f bitmask | 54 00 00 00 |
| 02 | Vehicle Identification Number (VIN) | 01 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff |
| 04 | Calibration ID | 02 32 33 37 31 30 42 42 33 31 41 00 00 00 00 00 00 32 33 37 30 31 42 42 33 36 41 00 00 00 00 00 00 (ascii 23710BB31A 23701B36A) |
| 06 | Calibration Verification Numbers (CVN) Several CVN can be output (4 bytes each) the number of CVN and CALID must match | 01 44 d8 62 a7 |
These are the manufacturer-specific service 22 PID/CIDs that can be queried for current values from sensors, internal BCM/Engine state and/or hardcoded information. They're read in the same way as services 01 and 09 except for the PID/CID numbers being 16-bit. SID 0x22 is known as "Read Data by Common Identifier" (CID, or Data Identifier - DID)
| PID | Meaning | Unit (format) | Captured value |
|---|---|---|---|
| 2000 | Supported PIDs 2001-201f bitmask | ff bf 14 59 |
|
| 2001 | [PR064] Engine coolant temperature | 0.1 °K (or °C offset by -273) | 0c 6a |
| 2002 | [PR055] Engine speed/revolutions | 0.5 RPM / LSB | 00 50 |
| 2003 | [PR089] Vehicle absolute speed | km/h | 00 00 |
| 2004 | [PR015] Engine torque, similar to 180: C.8-D.5 but higher resolution, documentation says must be between 20 and 40 Nm with engine running |
1/32 Nm offset by -400 | 32 00 |
| 2005 | [PR071] Computer supply voltage (battery voltage) | 0.01 V / LSB | 04 cf |
| 2006 | [PR025/PR992] Car odometer absolute value (mileage) | km | 01 fd ad |
| 2007 | Some engine temperature reading | 0c 6a |
|
| 2008 | [PR063] Fuel temperature | 0.1 °K (kelvin, aka. °C offset by -273) | 0c 4e |
| 2009 | [PR035] Athmospheric air pressure | mBar | 03 b8 |
| 200b | [PR147] Raw accelerator/throttle pedal potentiometer voltage gang 1, should less than ~817mV released, greater than 4185mV when floored | mV | 02 e6 |
| 200c | [PR148] Raw accelerator/throttle pedal potentiometer voltage gang 2, should less than ~440mV released, greater than 2013mV when floored | mV | 01 73 |
| 200d | [PR872] Coolant pressure sensor voltage reading | 0.01 V | 00 5b |
| 200e | [ET001] Computer "+ after ignition" feed active -- it seems "+ after ignition" is the name of a specific electrical signal and this becomes 1 when that signal is on | 01 |
|
| 200f | [ET759] Braking multiplex signal detected, one of ABSENT (0 -- when brake pedal fully released), PRESENT (2 -- when brake pedal depressed enough that the stop light comes on), INTERMEDIATE (1 -- foot on pedal, barely pressed) | 00 |
|
| 2010 | [ET038] Engine status, one of: 00: STOPPED (ign on without starter engaged), 20: STALLED, 30: RUNNING, 10: STARTING |
00 |
|
| 2011 | (Present on some ECUs) Reportedly engine coolant pressure | 0.1 bar | |
| 2012 | (Present on some ECUs) [PR079] Reportedly atmospheric air pressure sensor voltage | mV | |
| 2014 | [ET775] Camshaft TDC (Top Dead Centre) synchronisation, values COMPLETED/NOT COMPLETED, 1 when engine running | 00 |
|
| 2016 | 1 when engine running | 00 |
|
| 201a | bit 1: [ET134/ET160] Injector pre-heat relay command | 00 |
|
| 201c | [PR303] Aux information, TODO | 00 |
|
| 201d | bits 3: [ET207] Thermoplunger 3 relay control, bit 2: [ET206] Thermoplunger 2 relay control, bit 1: [ET205] Thermoplunger 1 relay control. On K9K: [PR372] number of active glow-plugs? | 00 |
|
| 2020 | Supported PIDs 2021-203f bitmask | fd 0c 0e ff |
|
| 2021 | [PR215] Sensor supply voltage no. 1, should be ~5V | mV | 13 8d |
| 2022 | [PR216] Sensor supply voltage no. 2, should be ~5V | mV | 13 8d |
| 2023 | [PR635] Sensor supply voltage no. 3, should be ~5V | mV | 13 8d |
| 2024 | [PR190] Idle RPM setpoint, changes with current demand, by the spec must be equal to PR145 to within 25 RPM | 0.25 RPM / LSB | 0c 80 |
| 2025 | 2 when brake pedal pressed (light on), 1 otherwise | 01 |
|
| 2026 | [ET799] Brake wire contact, 2 when brake pedal pressed (light on), 1 otherwise | 01 |
|
| 2028 | Some dashboard lights? | 03 |
|
| 202d | TODO | 00 |
|
| 202e | [PR030] Accelerator/throttle pedal position scaled to 0-3ff range but not clamped at 75% | 00 00 |
|
| 2035 | [PR130] Cruise control setpoint, 0xff when disabled | km/h | ff |
| 2036 | [ET673] Jammed accelerator/throttle pedal detected (command RZ001 clears this), or [PR1249] Brake pedal error? | 00 |
|
| 2037 | Varies with engine load, could be pressure value, same as 160: A.8-B.5 but higher resolution |
2b ed |
|
| 2039 | [PR135] Cruise control/speed limiter buttons voltage -- each button's switch connects through a different resistance resulting in a voltage divider, voltage is ~4V normally, ~3V when "R" is pressed, ~2V when "+" is pressed, ~1V when "-" is pressed, ~0V when "O" is pressed (actually seems to be ~3V for "+", ~2V for "-" and ~1V for Cancel) | mV | 0f 95 |
| 203a | bit 1: [LC166] Cruise control function | 01 |
|
| 203b | bit 1: [ET727] Cruise control disengaged ("Cruise control/Speed limiter connection after after cruise control button pressed", values DETECTED, NOT DETECTED) | 01 |
|
| 203c | TODO | 00 |
|
| 203d | bit 1: [LC165] Speed limiter function | 01 |
|
| 203e | bit 1: [ET728] Speed limit disengaged ("Cruise control/Speed limiter connection after after speed limiter button pressed", values DETECTED, NOT DETECTED) | 01 |
|
| 203f | TODO | 00 |
|
| 2040 | Supported PIDs 2041-205f bitmask | ff 7f ff fb |
|
| 2041 | [LC167] ASCD cruise control/speed limiter buttons (doesn't seem to actually do anything) | 01 |
|
| 2042 | TODO | 00 |
|
| 2043 | TODO | 01 |
|
| 2044 | Accelerator/throttle pedal angle scaled to 0-3ff range, clamped at 75% stroke | 00 00 |
|
| 2045 | TODO | 03 |
|
| 2046 | Reported to be starter engine status | 00 |
|
| 2047 | bit 1: [ET760] First engine start, values COMPLETED/NOT COMPLETED | 01 |
|
| 2048 | 1 when engine stopped, 2 when running | 01 |
|
| 204a | bit 8: [ET820] High speed fan assembly final request, bit 7: [ET819] Low speed fan assembly final request, bit 6: [ET818] High speed fan assembly request by automatic gearbox, bit 5: [ET817] Low speed fan assembly request by automatic gearbox, bit 4: [ET816] High speed fan assembly request by air conditioning, bit 3: [ET815] Low speed fan assembly request by air conditioning, bit 2: [ET814] High speed fan assembly request by injection, bit 1: [ET813] Low speed fan assembly request by injection | bitmap | 00 |
| 204b | [ET703] ASCD cruise control/speed limiter buttons, values: INACTIVE, INCREASE, DECREASE, SUSPEND, RESUME, CO.1 (open circuit or short circuit), INVALID -- doesn't seem to actually react to any buttons | 00 |
|
| 204c | [ET413] Cruise control/Speed limit function, 0 when cruise control disabled, 1 when limit speed engaged, 2 when setting limit speed, 5 when setting cruise speed, other values TODO | 00 |
|
| 204d | TODO | 00 |
|
| 204e | ASCD Cruise control status, bit 6: [ET792] Speed limiter inhibition by injection ("This indicates that the injection computer has requested deactivation of the speed limiter function for system reasons. This is a normal deactivation."), bit 5: [ET797] Speed unit change, bit 4: [ET796] No vehicle speed signal displayed ("This means that the injection computer has not received the vehicle speed displayed on the instrument panel"), bit 3: [ET795] No real vehicle speed signal ("This means that the real vehicle speed coming from the ABS was unavailable."), bit 2: [ET794] Displayed vehicle speed signal unavaiable | bitmap | 24 |
| 204f | ASCD Cruise control status, bit 8: [ET791] Cruise control inhibition by injection ("This indicates that the injection computer has requested deactivation of the cruise control function for system reasons. This is a normal deactivation."), bit 7: [ET756] Automatic transmission in defect mode, bit 6: [ET790] Sudden deceleration without depressing brake pedal, bit 5: [ET789] Deceleration without depressing brake pedal (this is an error, like ET790, indicates that something is slowing down the car or that the brake pedal switch failed), bit 4: [ET788] Brake pedal position information missing ("This means that the injection computer did not receive the signal from the UCH concerning the brake pedal switch"), bit 3: [ET787] Brake pedal position information unavailable, bit 2: [ET786] Clutch pedal position information missing ("This means that the injection computer did not receive the signal from the UCH concerning the clutch pedal start of travel switch"), bit 1: [ET785] Clutch pedal signal unavailable ("signal from the UCH concerning the clutch pedal start of travel switch") | 80 |
|
| 2050 | [PR851] Vehicle speed being displayed | 0.01 km/h | 00 00 |
| 2051 | [ET767] Vehicle Speed measurement unit, TODO | 00 |
|
| 2052 | [PR890] Glow plug preheat power | 100 / 255 A | 00 |
| 2053 | TODO | 01 |
|
| 2054 | 1 when engine stopped, 7 when running? nope, something else | 07 |
|
| 2055 | [ET838] Combustion mode setpoint: 1: Normal, 2: DPF regeneration start, 3: DPF regeneration, 4: DPF cooling, 5: NOx purge, 6: SOx purge, 7: Start, 8: Catalytic converter test, (spec values: NORMAL, STATUS1: Heating phase, STATUS2: Regeneration phase, STATUS3: Particle filter protection, STATUS4: Catalytic converted check) | 07 |
|
| 2056 | [ET839] Combustion mode, same values as above and actual values should follow ET838 | 00 |
|
| 2057 | [PR306/PR1029] Alternator power | 10 W | 00 06 |
| 2058 | K9K-specific: diesel fuel water-content status | 00 |
|
| 2059 | ASCD Clutch switch, 0 when release, 1 when depressed | 00 |
|
| 205a | 4 when RPMs above idle, 8 when engine stopped, 0x40 when idle. Values 2 and 0x20 seen briefly while going from higher RPMs to idle | 08 |
|
| 205b | TODO | 00 |
|
| 205c | 0 when IGN in OFF or ACC, 1 when in ON | 01 |
|
| 205d | 0 when accelerator/throttle pedal pressed, 1 when released | 01 |
|
| 205f | TODO | 0f a0 |
|
| 2060 | Supported PIDs 2061-207f bitmask | ff ee 01 ff |
|
| 2061 | Varies with engine load, could be a pressure value, similar to 180: C.8-D.5 but higher resolution |
32 00 |
|
| 2062 | Varies with engine load, could be a pressure value, similar to 180: C.8-D.5 but higher resolution |
32 00 |
|
| 2063 | Varies with engine load, could be a pressure value, different from 180: C.8-D.5 |
32 00 |
|
| 2064 | Battery voltage? Varies with engine RPM | 2b ed |
|
| 2065 | Varies with engine load, could be a pressure value | 2b ed |
|
| 2066 | Varies with engine load and RPMs | 06 13 |
|
| 2067 | [PR1019] Max. engine torque? Varies with engine load, could be a pressure value | 0d ad |
|
| 2068 | Varies with engine load, could be a pressure value | 0d ad |
|
| 2069 | [1127] Engine torque setpoint | 1/32 Nm | 00 00 |
| 206a | Engine running time in seconds (resets when ECU starts?) | 00 00 |
|
| 206b | Engine running time in seconds (resets every time IGN goes from OFF to ON?) | 00 00 |
|
| 206d | TODO | 01 |
|
| 206e | TODO, bit 1: [ET602] Brake switch? doesn't seem to react to brake pedal | 01 |
|
| 206f | TODO | f0 |
|
| 2078 | Occasionally 2, TODO | 00 |
|
| 2079 | bit 7: [ET835] Speed limiter system inhibition by injection, bit 6: [ET834] Cruise control system inhibition by injection, bit 5: [ET808] Handbrake, bit 4: [ET043] Cruise control, bit 3: [ET807] ESP/TCS - anti-yaw calibration, bit 2: [ET726] Reverse gear engagement, bit 1: [ET691] Engine start/stop switch | 00 |
|
| 207a | [PR827] Resume ("R") button pressing duration (doesn't actually do anything) | s | 00 |
| 207b | [PR828] "+" button pressing duration (doesn't actually do anything) | s | 00 |
| 207c | [PR829] "-" button pressing duration (doesn't actually do anything) | s | 00 |
| 207d | [PR830] Suspend ("O") button pressing duration (doesn't actually do anything) | s | 00 |
| 207e | [PR849] Number of abnormal cruise control/speed limiter transitions | 00 |
|
| 207f | TODO | 00 |
|
| 2080 | Supported PIDs 2081-209f bitmask | ff 21 ff aa |
|
| 2081 | TODO | 00 |
|
| 2082 | TODO | 00 |
|
| 2083 | TODO | 00 |
|
| 2084 | TODO | 01 |
|
| 2085 | TODO | 01 |
|
| 2086 | TODO | 00 |
|
| 2087 | TODO | 01 |
|
| 2088 | TODO | 01 |
|
| 208b | TODO | 00 |
|
| 2090 | TODO | 0f |
|
| 2091 | TODO | 0f |
|
| 2092 | bit 1: [ET116] A/C on (permission to stop A/C?) | 00 |
|
| 2093 | TODO | 02 |
|
| 2094 | TODO | 00 |
|
| 2095 | 1 when engine stopped, 0 when running | 01 |
|
| 2096 | Transmission status (AT vs. MT) | 03 |
|
| 2097 | TODO | 02 |
|
| 2098 | TODO | 00 00 |
|
| 2099 | [PR002] Alternator charge, goes up with electric current demand, goes down with engine RPMs | 100/255 % | eb |
| 209b | TODO, bit 1: [ET428] Idle control | 00 |
|
| 209d | TODO | ff |
|
| 209f | TODO | 00 00 |
|
| 2100 | Supported PIDs 2101-211f bitmask | ff ff ff fd |
|
| 2101 | TODO | 0f |
|
| 2102 | TODO | 00 75 3f 01 c6 76 01 33 72 00 e2 95 |
|
| 2103 | TODO | 04 7d 8b a7 05 0b 43 74 02 ff bc fc 04 8a 8d 47 |
|
| 2104 | TODO | 00 00 00 00 00 00 00 00 |
|
| 2105 | TODO | 01 |
|
| 2106 | TODO | 01 |
|
| 2107 | TODO | 01 a8 a2 |
|
| 2108 | TODO | 00 00 00 |
|
| 2109 | TODO | 00 0a |
|
| 210a | A km counter | 37 37 |
|
| 210b | TODO | 00 1f |
|
| 210c | TODO, a counter, increases faster than km count | 5e ce |
|
| 210d | TODO, a down counter | 00 f2 14 a8 |
|
| 210e | [PR1232/PR1330] Crankshaft revolution count, updates when stopping engine | 01 e0 51 22 |
|
| 210f | TODO | 00 |
|
| 2110 | TODO | 01 c6 76 |
|
| 2111 | TODO | 01 |
|
| 2112 | TODO | 00 |
|
| 2113 | TODO | 0d 9c |
|
| 2114 | TODO, bit 1: [ET716] Diesel fuel injector | 00 |
|
| 2115 | TODO | 00 |
|
| 2116 | TODO | 0a d2 |
|
| 2117 | TODO | 0c 26 |
|
| 2118 | TODO | 2c ec |
|
| 2119 | TODO | 32 c8 |
|
| 211a | TODO | ff ff |
|
| 211b | TODO | 03 a4 |
|
| 211c | TODO | 03 56 c0 68 |
|
| 211d | TODO | 00 |
|
| 211e | TODO | 00 |
|
| 2120 | Supported PIDs 2121-213f bitmask | ff f8 00 01 |
|
| 2121 | TODO | 01 |
|
| 2122 | TODO | 01 |
|
| 2123 | TODO | 01 |
|
| 2124 | [ET098] TODO | 01 |
|
| 2125 | TODO | 01 |
|
| 2126 | TODO | 00 |
|
| 2127 | TODO | 01 |
|
| 2128 | TODO | 01 |
|
| 2129 | 1 when engine stopped, 0 when running | 01 |
|
| 212a | TODO | 00 |
|
| 212b | TODO | 00 |
|
| 212c | TODO, 20 odometer snapshots from oldest to newest -- from DTC time? what's in the first byte? | 2c 01 fc 3c 01 fc 42 01 fc 6f 01 fc 6f 01 fc 70 01 fc 70 01 fc 70 01 fc 70 01 fd 4f 01 fd 55 01 fd 70 01 fd 71 01 fd 71 01 fd 72 01 fd 92 01 fd 93 01 fd 94 01 fd 95 01 fd 95 01 fd 9c |
|
| 212d | TODO | 00 10 9a 02 00 00 00 00 00 c0 00 78 76 74 72 70 6e 6c 6b 69 67 66 64 62 61 5f 5e 02 07 02 06 02 06 01 06 02 06 02 06 01 06 02 06 01 06 03 06 |
|
| 2140 | Supported PIDs 2141-215f bitmask | 00 00 00 03 |
|
| 215f | 1 if engine has been started since ECU boot? | 00 |
|
| 2160 | Supported PIDs 2161-217f bitmask | f4 00 00 01 |
|
| 2161 | [ET879] Crankshaft frequency signal, 1 when engine running | 00 |
|
| 2162 | [PR1026] Crankshaft synchronisation loss counter | 00 98 |
|
| 2163 | Changes rapidly whlie engine running (values from a subset) | 00 00 |
|
| 2164 | TODO | 00 |
|
| 2166 | bit 1: [ET825] Regeneration started | 00 |
|
| 2168 | (Present on some ECUs) [PR1312] Cylinder 4 run count, [PR1203] Engine start count | ||
| 2169 | (Present on some ECUs) [PR1311] Cylinder 3 run count | ||
| 216a | (Present on some ECUs) [PR1310] Cylinder 2 run count | ||
| 216b | (Present on some ECUs) [PR1309] Cylinder 1 run count | ||
| 2180 | Supported PIDs 2181-219f bitmask | 96 fe f8 7e |
|
| 2181 | TODO | 00 00 00 00 |
|
| 2184 | TODO | ff ff |
|
| 2186 | TODO | 00 |
|
| 2187 | TODO | 01 |
|
| 2189 | TODO | 00 |
|
| 218a | TODO | 00 |
|
| 218b | TODO | 00 |
|
| 218c | TODO | 00 |
|
| 218d | TODO | 00 |
|
| 218e | TODO | 00 |
|
| 218f | TODO | 00 |
|
| 2191 | TODO | 00 00 |
|
| 2192 | TODO | 00 |
|
| 2193 | TODO | 00 |
|
| 2194 | TODO | 00 |
|
| 2195 | Occasionally 1 when blower is on but not reliably | 00 |
|
| 219a | [PR891] Preheating mode | 0.25 % | 00 00 |
| 219b | TODO | 00 05 |
|
| 219c | TODO | 00 |
|
| 219d | TODO | ff ff |
|
| 219e | TODO | 00 00 |
|
| 219f | TODO | 00 00 00 |
|
| 2200 | Supported PIDs 2201-221f bitmask | 00 00 00 01 |
|
| 2201 | (Present on some ECUs) [PR371] Error count | ||
| 2220 | Supported PIDs 2221-223f bitmask | ff de 00 01 |
|
| 2221 | TODO | 00 |
|
| 2222 | [ET757] This is supposed to be some pedal signal but doesn't actually react to pedals | 00 |
|
| 2223 | TODO | 00 |
|
| 2224 | TODO | 00 |
|
| 2225 | bit 1: [ET724] Speed signal multiplexer, TODO doesn't react to speed | 00 |
|
| 2226 | bit 1: [ET723] Vehicle speed being displayed, doesn't react to speed | 00 |
|
| 2227 | TODO | 00 |
|
| 2228 | TODO | 00 |
|
| 2229 | [ET018] A/C on request | 01 |
|
| 222a | [PR037] Coolant/refrigerant pressure, reacts to climate control power usage | 0.1 bar | 00 37 |
| 222b | (Present on some ECUs) [ET732] AT/MT Parking brake (also SID 21 CID 22 byte M) | ||
| 222c | [ET764] ASCD cruise control/speed limit disable signal from pedal ("Clutch start of travel wire contact"), 1 when clutch depressed | 00 |
|
| 222d | [ET405] ASCD Clutch pedal switch, 1 when depressed | 00 |
|
| 222e | [ET755] Manual gearbox gear lever neutral, values DETECTED/NOT DETECTED | 02 |
|
| 222f | bit 1: [ET832] "ASCD cruise control/speed limiter engage authorisation" (also reported as ET764, like CID 222c) | 00 |
|
| 2240 | Supported PIDs 2241-225f bitmask | 00 00 00 01 |
|
| 2260 | Supported PIDs 2261-227f bitmask | 06 00 00 01 |
|
| 2266 | TODO | 00 |
|
| 2267 | TODO | 00 |
|
| 2280 | Supported PIDs 2281-229f bitmask | 60 20 00 00 |
|
| 2282 | TODO | 00 00 |
|
| 2283 | TODO | 00 00 |
|
| 228b | TODO | 01 54 |
|
| 2294 | (Present on some ECUs) [PR932/PR1233] Engine oil viscosity level | 100 * 2^-31 % | |
| 2400 | Supported PIDs 2401-241f bitmask | ff ab 62 05 |
|
| 2401 | [PR041] Turbocharging pressure | mBar | 03 b7 |
| 2402 | [PR009] Turbocharging pressure setpoint, goes up with RPMs | hPa | 04 55 |
| 2403 | [PR846] Turbocharging SV (solenoid valve) OCR (opening cyclic ratio), goes down with RPMs | 0.01% | 02 0e |
| 2404 | [PR1017] Relative position of damper valve, some noise | 1/20.491 % | 06 5b |
| 2405 | [PR672] Reportedly fuel valve position setpoint | 0.01% | 88 00 |
| 2406 | [PR279/PR417] Air inlet valve setpoint OCR (opening cycle ratio) | 0.01% offset by 0x8000 | 7c 31 |
| 2407 | [PR136] EGR valve aperture feedback | 00 00 |
|
| 2408 | [PR005] EGR valve aperture | 0.01% open offset by 0x8000 | 7e 70 |
| 2409 | [PR241] EGR valve control, a noisy sensor | 0.01 % | 83 2c |
| 240b | [PR312] Intake manifold pressure | mBar | 03 b7 |
| 240d | [PR059] Inlet air temperature, goes up with RPMs, with IGN on should roughly equal exterior temperature, also PR059 ~= PR064 with engine cold | 0.1 °K (kelvin, aka. °C offset by -273) | 0c 6c |
| 240f | [ET587] EGR system cooling | 01 |
|
| 2410 | TODO | 93 88 |
|
| 2412 | [PR146] Air intake supply flow | 0.1 mg/cp | 00 00 |
| 2413 | [PR180] Reportedly air supply configuration, goes up with RPMs | 0.1 mg/cp | 1d bc |
| 2417 | [PR774] Air inlet valve position sensor voltage, a little noise | mV | 11 7e |
| 241e | [ET774] Turbochaging pressure control/turbocharger regulation, goes to 0 when engine running, quickly back to 9 when stopped | 09 |
|
| 2420 | Supported PIDs 2421-243f bitmask | 9f d5 fd f1 |
|
| 2421 | [PR018] Estimated airflow | 0.1 mg/cp | 0b 65 |
| 2422 | (Present on some ECUs) Reportedly mass airflow | 0.05 kg/h | |
| 2424 | [PR077/PR160/PR177] EGR potentiometer/position sensor voltage, up with engine load, spec says "If the values of PR077 are between 0.5 V ≤ X ≤ 4.5 V, the EGR valve is sound" | mV | 0e a1 |
| 2425 | [PR858] First intake valve open offset | 1/20.492% or 1/81.9691% | 07 2e |
| 2426 | [PR861] Last intake valve open offset | 1/20.492% or 1/81.9691% | 07 25 |
| 2427 | [PR859] First intake valve closed offset | 1/20.492% or 1/81.9691% | 00 c9 |
| 2428 | [PR860] Last intake valve closed offset | 1/20.492% or 1/81.9691% | 00 cb |
| 2429 | [PR129] Last EGR valve offset | 0.01% | 02 10 |
| 242a | [PR128] First EGR valve offset | 0.01% | 01 bf |
| 242c | [PR383] Weight of soot in the DPF, should never exceed 39g (but it does on some cars) | 0.01 g | 06 19 |
| 242e | Same as PR1012 in CID 24a5 |
04 de |
|
| 2430 | TODO | 00 00 |
|
| 2431 | TODO | 00 00 |
|
| 2432 | [PR1009] DPF upstream temperature setpoint | 0.1 °K (kelvin, aka. °C offset by -273) | 23 2b |
| 2433 | TODO | 00 |
|
| 2434 | [ET702] Static regeneration | 00 |
|
| 2435 | TODO | 80 00 |
|
| 2436 | TODO | 80 00 |
|
| 2438 | [PR889] Reportedly turbo entry gas temperature setpoint | 0.1 °K (kelvin, aka. °C offset by -273) | 0a aa |
| 2439 | [PR667] Turbine upstream temperature | 0.1 °K (kelvin, aka. °C offset by -273) | 0e 92 |
| 243a | [PR668] Turbine upstream temperature sensor voltage, varies with engine load | 2^-16 V | 54 62 |
| 243b | [PR1046] Temperature upstream from catalytic converter | 0.1 °K (kelvin, aka. °C offset by -273) | 09 1a |
| 243c | TODO | 54 62 |
|
| 2440 | Supported PIDs 2441-245f bitmask | c7 08 00 01 |
|
| 2441 | [PR381] DPF downstream temperature, goes above 550°C only during DPF regeneration -- goes up with RPMs | 0.1 °K (kelvin, aka. °C offset by -273) | 15 5b |
| 2442 | [PR382] DPF upstream temperature, goes above 600°C only during DPF regeneration | 0.1 °K (kelvin, aka. °C offset by -273) | 0d a1 |
| 2443 | (Present on some ECUs) [PR414] DPF pressure differential | mBar offset by 0x8000 | |
| 2446 | [PR1006] DPF pressure sensor reference voltage, up with RPMs up | mV | 01 e3 |
| 2447 | [PR1005/PR385] Exhaust gas DPF flow rate | 0.1 m³/h or 0.01 g/s? | 00 00 |
| 2448 | [PR636] Reportedly turbo entry pressure | mBar | 03 ac |
| 244d | [PR1024] Estimated damper valve upstream temperature, down when engine running then slowly recovers | 0c bd |
|
| 2460 | Supported PIDs 2461-247f bitmask | ff fc 4b a7 |
|
| 2461 | TODO | 00 00 00 03 00 00 00 3c 00 00 00 03 00 00 00 7d 00 00 00 0d 00 00 01 3f 00 00 00 0e 00 00 00 f8 00 00 00 04 00 00 |
00 00 00 11 00 00 00 ce 00 00 00 02 00 00 00 24 00 00 00 02 00 00 00 3f 00 00 00 11 00 00 00 f1 00 00 00 04 00 00
| 2462 | TODO, seems to be a queue, new value occasionally appears in the last 2 bytes and the other bytes are shifted to front || 00 00 00 00 00 00 00 00 00 67 00 3f 00 80 01 4c 01 06 |
| 2463 | TODO || ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff |
| 2464 | TODO || 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |
| 2465 | TODO || 00 00 00 00 00 02 01 02 02 02 |
| 2466 | TODO || 00 00 00 00 00 00 00 00 01 01 |
| 2467 | TODO || 00 00 00 00 00 02 02 00 00 00 |
| 2468 | TODO || 08 17 20 07 16 19 00 0a 17 1b |
| 2469 | TODO, seems to be a queue, new value occasionally appears in the last byte and the other bytes are shifted to front || 5a 4b 3d 35 2c 16 1b 24 20 1c |
| 246a | TODO || 00 00 00 00 00 00 00 00 00 00 |
| 246b | TODO || 02 04 0a 00 02 04 08 00 02 04 08 00 02 04 08 00 02 04 0a 00 |
| 246c | TODO || 12 15 14 04 15 10 1b 17 17 01 |
| 246d | [ET824] Regeneration request, TODO || 00 |
| 246e | TODO || a7 10 |
| 2472 | Car odometer absolute value (mileage) | km | 01 fd ad |
| 2475 | TODO || 80 00 |
| 2477 | [ET827] Damper valve first opening programmed || 01 |
| 2478 | [ET828] Damper valve first closing programmed || 01 |
| 2479 | [ET336] EGR function programming, values: completed/not completed || 01 |
| 247b | TODO || 72 |
| 247e | TODO || 00 |
| 247f | TODO || 0b 32 |
| 2480 | Supported PIDs 2481-249f bitmask || ff 80 0f 81 |
| 2481 | [PR914] Successful DPF regeneration count (some regenerations aren't included, yet PR848 gets reset to 0) || 05 |
| 2482 | TODO || 00 00 |
| 2483 | TODO || 00 04 |
| 2484 | TODO || 00 01 |
| 2485 | [PR848] Failed DPF regeneration attempt count (since last successful one, resets to 0 on successful regneration) || 01 |
| 2486 | [PR1004] TODO | 100/255 % | 00 |
| 2487 | [PR1008] DPF last regeneration duration | s | 00 00 |
| 2488 | [PR415] Time since last DPF regeneration, updates every second, wraps around | s | 12 ee |
| 2489 | [PR875] Oil viscosity reduction | 100/65536 % | 03 a4 |
| 2495 | TODO || 03 d4 |
| 2496 | TODO || 03 d4 |
| 2497 | TODO || 02 45 |
| 2498 | TODO || 00 00 |
| 2499 | TODO || 00 |
| 24a0 | Supported PIDs 24a1-24bf bitmask || 1f ff ef fd |
| 24a4 | TODO || 00 01 01 00 01 01 01 01 00 00 |
| 24a5 | [PR1012] Weight of soot in the DPF after last regeneration attempt (either successful or failed) | 0.01 g | 04 de |
| 24a6 | TODO || 02 26 |
| 24a7 | TODO || 04 4c |
| 24a8 | TODO || 00 |
| 24a9 | [PR1079] DPF mileage at last successful regeneration, updates when turning engine off || 01 fc b1 |
| 24aa | TODO || 00 |
| 24ab | Reported to be DPF regeneration success status || 00 |
| 24ac | TODO || 02 23 e2 |
| 24ad | TODO || 02 24 bb |
| 24ae | TODO || 02 24 bb |
| 24af | Reported to be DPF load || 02 |
| 24b0 | TODO, odometer snapshot when? updates on every trip || 01 fd ad |
| 24b1 | TODO || 01 a4 |
| 24b2 | TODO || 74 |
| 24b3 | TODO || 01 |
| 24b5 | TODO || 00 0d |
| 24b6 | TODO || 00 00 |
| 24b7 | TODO || 12 80 |
| 24b8 | TODO || 00 00 |
| 24b9 | TODO || 00 |
| 24ba | TODO || 00 00 |
| 24bb | [PR1078] DPF mileage at replacement | km | 00 00 00 |
| 24bc | TODO || 00 00 fc |
| 24bd | Same as 247f, TODO || 0b 32 |
| 24be | TODO || 03 a5 |
| 24c0 | Supported PIDs 24c1-24df bitmask || 47 7f ef 31 |
| 24c2 | [PR1020] DPF pressure offset | mBar offset by 0x8000 | 7f f9 |
| 24c6 | TODO || 86 5a |
| 24c7 | TODO || 00 cb |
| 24c8 | TODO || 80 00 |
| 24ca | [PR1021] Last damper valve absolute position | 1/20.491% | 07 26 |
| 24cb | TODO || 00 |
| 24cc | TODO || 00 |
| 24cd | TODO || 00 |
| 24ce | TODO, varies with engine load || 80 00 |
| 24cf | [PR542] EGR valve potentiometer voltage when closed according to one description, DPF pressure differential according to another (doesn't match readings), varies with engine load, slowly goes back to earlier values || 02 07 |
| 24d0 | TODO || 00 |
| 24d1 | TODO || 80 00 |
| 24d2 | [PR1025] Air inlet valve position setpoint || 80 00 |
| 24d3 | [PR1016] Air inlet valve diagnostic supply voltage || 00 00 |
| 24d5 | [PR1033] EGR sensor supply voltage | mV | 13 97 |
| 24d6 | [PR1023] Damper valve sensor supply voltage | mV | 13 97 |
| 24d7 | TODO, goes up with RPMs || 03 ba |
| 24d8 | TODO || 00 |
| 24db | TODO || 01 |
| 24dc | TODO || 02 |
| 24e0 | Supported PIDs 24e1-24ff bitmask || 67 7b ff d1 |
| 24e2 | TODO || 00 00 |
| 24e3 | [PR929] Total relative pressure in the DPF | mbar offset by 0x8000 | 7f f9 |
| 24e6 | TODO || 00 |
| 24e7 | TODO || 00 |
| 24e8 | TODO || 1f db |
| 24ea | TODO || 00 00 00 |
| 24eb | TODO || 00 00 |
| 24ec | [PR932] Engine oil dilution rate || 00 15 b6 89 |
| 24ed | TODO || 03 03 03 00 05 04 03 03 0a 06 |
| 24ef | TODO || 00 ab 00 ae 00 82 00 28 00 21 00 24 00 09 00 6e 00 03 00 05 |
| 24f0 | TODO, odometer snapshot when? doesn't update on every trip || 01 fd a9 |
| 24f1 | TODO, odometer snapshot when? doesn't update on every trip || 01 fd ad |
| 24f2 | [PR916] Mass airflow rate | 0.1 kg/h | 00 00 |
| 24f3 | [PR1223] Aux information | 0.1 °K (or °C offset by -273) | 09 1a |
| 24f4 | TODO || 00 |
| 24f5 | TODO || 01 |
| 24f6 | TODO || 00 |
| 24f7 | TODO || 1f db |
| 24f8 | TODO || 1f db |
| 24f9 | TODO || 1f db |
| 24fa | TODO || 00 00 |
| 24fb | (Present on some ECUs) [PR1236] DPF pressure differential offset | mbar ||
| 24fc | TODO || 80 00 |
| 2500 | Supported PIDs 2501-251f bitmask || 00 00 00 01 |
| 2519 | [PR1288] Oxygen content on some ECUs |||
| 2520 | Supported PIDs 2521-253f bitmask || ff f8 00 01 |
| 2521 | TODO || 80 d2 |
| 2522 | TODO || 01 |
| 2523 | TODO || 00 |
| 2524 | TODO || 00 00 |
| 2525 | TODO || 80 00 |
| 2526 | TODO || 80 00 |
| 2527 | TODO || 01 f4 |
| 2528 | TODO || 25 1c |
| 2529 | TODO || 00 00 |
| 252a | TODO || 00 00 |
| 252b | TODO || 00 00 |
| 252c | TODO || 05 78 |
| 252d | TODO || 00 |
| 2540 | Supported PIDs 2541-255f bitmask || ff ff e0 01 |
| 2541 | TODO || 80 00 |
| 2542 | [PR414] DPF pressure differential | mBar offset by 0x8000 | 80 00 |
| 2543 | Car odometer absolute value (mileage) | km | 01 fd ad |
| 2544 | TODO || 00 |
| 2545 | TODO || 80 00 |
| 2546 | TODO || 00 00 |
| 2547 | TODO || 01 |
| 2548 | TODO || 01 |
| 2549 | TODO || 00 |
| 254a | Reportedly Weight of soot in the DPF (matches PR383) | 0.01 g | 06 19 |
| 254b | TODO || 00 00 |
| 254c | TODO || 00 00 |
| 254d | TODO || 00 00 |
| 254e | TODO || 00 |
| 254f | TODO || 00 |
| 2550 | TODO || 01 |
| 2551 | TODO || 00 |
| 2552 | TODO || 00 00 |
| 2553 | TODO || 00 |
| 2560 | Supported PIDs 2561-257f bitmask || 00 00 00 11 |
| 2561 | (Present on some ECUs) [PR1286] Low-pressure Valve position? |||
| 2562 | (Present on some ECUs) [PR1208] Low-pressure Valve last close offset? |||
| 2563 | (Present on some ECUs) [PR1205] Low-pressure valve first open offset? |||
| 2564 | (Present on some ECUs) [PR1206] Low-pressure valve position? |||
| 2567 | (Present on some ECUs) [PR1213] EGR low-pressure differential? |||
| 2569 | (Present on some ECUs) [PR1214] Air exit damper/silencer? |||
| 256a | (Present on some ECUs) [PR1224] Intermediate setpoint? |||
| 256b | (Present on some ECUs) [PR1222] Air exit valve position? |||
| 256c | (Present on some ECUs) [PR1218] Air exit valve offset? |||
| 256d | (Present on some ECUs) [PR1209] Low-pressure Valve first close offset? |||
| 256f | (Present on some ECUs) [PR1225] Air release absolute position? |||
| 2578 | (Present on some ECUs) [PR1215] First bleed valve offset? |||
| 257b | (Present on some ECUs) [PR1226] Low pressure valve voltage | mV ||
| 257c | [PR1227] Low-pressure valve control? | 0.01% offset by 0x8000 | 80 00 |
| 257d | (Present on some ECUs) [PR1239] Airflow sensor voltage | mV ||
| 2580 | Supported PIDs 2581-259f bitmask || 00 00 00 00 |
| 2589 | (Present on some ECUs) [PR1207] Valve first close offset? |||
| 258b | (Present on some ECUs) [PR1210] Valve last close offset? |||
| 258d | (Present on some ECUs) [PR1211] Valve first open offset? |||
| 2594 | (Present on some ECUs) [PR049] Valve turbulence damper? |||
| 259b | (Present on some ECUs) [PR1228] Valve swirl control? |||
| 2800 | Supported PIDs 2801-281f bitmask || c5 fd e0 21 |
| 2801 | [PR038] Fuel rail pressure | 0.1 bar | 00 00 |
| 2802 | [PR008] Fuel rail pressure setpoint (theoretical pressure for optimum engine operation) -- 250 +/- 50 bar | 0.1 bar | 01 20 |
| 2806 | [PR017] Fuel mass flow | 0.01 mg/cp | 00 00 |
| 2808 | TODO || 80 00 |
| 2809 | [PR1031] Total injection system fuel use | 0.01 mg/cp | 00 00 |
| 280a | TODO || 00 00 |
| 280b | TODO || 00 00 |
| 280c | TODO || 00 00 |
| 280d | [PR1229] Injection system fuel flow rate | 0.01 mg/cp | 00 00 |
| 280e | [PR988] Post injector fuel flow rate 1 | 0.01 mg/cp | 00 00 |
| 2810 | TODO || 80 00 |
| 2811 | TODO || 80 00 |
| 2812 | TODO || 80 00 |
| 2813 | [PR1245] Post-injection phase? || 80 00 |
| 2817 | (Present on some ECUs) Reportedly fuel valve electric current | mA offset by 0x8000 ||
| 281a | (Present on some ECUs) Reportedly fuel manifold pressure regulator electric current | mA offset by 0x8000 ||
| 281b | bit 1: [ET521] Low fuel level warning light || 01 |
| 2820 | Supported PIDs 2821-283f bitmask || 34 00 00 01 |
| 2823 | bit 1: [ET115] Injector pre-heat warning light || 00 |
| 2824 | TODO || 00 |
| 2826 | [PR1007] DPF OCR (opening cycle ratio) control | 0.01% | 00 00 |
| 2840 | Supported PIDs 2841-285f bitmask || 00 00 00 01 |
| 2860 | Supported PIDs 2861-287f bitmask || 01 00 09 c1 |
| 2868 | TODO || 00 4a ff 9c |
| 2875 | [PR304] Aux information, TODO || 00 00 |
| 2878 | bit 1: [ET826] Exhaust injector solenoid valve control || 00 |
| 2879 | TODO || 00 00 |
| 287a | TODO || 00 |
| 2880 | Supported PIDs 2881-289f bitmask || 00 00 00 00 |
| 2882 | (Present on some ECUs) [ET605] Fuel pump relay |||
| 2c00 | Supported PIDs 2c01-2c1f bitmask || 30 00 00 01 |
| 2c03 | TODO || 01 |
| 2c04 | [ET041] Trans. gearbox ratio, 0: in reverse gear (as soon as lever moved to reverse), 1: neutral or declutched (most of the time), 2: 1st gear, 3: 2nd gear, 4: 3rd gear, 5: 4th gear, 6: 5th gear, 7: 6th gear, switches to values 2-7 only when the gear is actually engaged and clutch fully released || 01 |
| 2c20 | Supported PIDs 2c21-2c3f bitmask || 00 10 00 01 |
| 2c2c | TODO || 00 |
| 2c40 | Supported PIDs 2c41-2c5f bitmask || 00 00 00 00 |
| 2e04 | (Present on some ECUs) [PR848] Failed DPF regeneration attempts count |||
| 2ec2 | (Present on some ECUs) [PR241] Reportedly EGR control |||
| 3400 | Supported PIDs 3401-341f bitmask || 00 3f ff f8 |
| 340b | TODO || 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |
| 340c | TODO || 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |
| 340d | TODO || 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |
| 340e | TODO || 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |
| 340f | TODO || 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |
| 3410 | TODO || 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |
| 3411 | TODO || 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |
| 3412 | TODO || 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |
| 3413 | TODO || 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |
| 3414 | TODO || 00 00 |
| 3415 | TODO || 00 00 |
| 3416 | TODO || 00 00 |
| 3417 | TODO || 00 00 |
| 3418 | TODO || 00 00 |
| 3419 | TODO || 00 00 |
| 341a | TODO || 00 00 |
| 341b | TODO || 00 00 |
| 341c | TODO || 00 00 |
| 341d | TODO || 00 00 |
| ef00 | Supported PIDs ef01-ef1f bitmask || 58 3b 00 01 |
| ef02 | TODO || 00 00 |
| ef04 | TODO || 00 |
| ef05 | TODO || 00 |
| ef0b | TODO || 00 |
| ef0c | TODO || 00 00 |
| ef0d | TODO || 00 |
| ef0f | TODO || 00 |
| ef10 | TODO || 00 00 |
| ef20 | Supported PIDs ef21-ef3f bitmask || 20 00 80 00 |
| ef23 | TODO || 00 00 |
| ef31 | TODO || 00 00 |
| f0e0 | Supported PIDs f0e1-f0ff bitmask || 00 00 00 02 |
| f0ff | MISSING (query returns error) |||
| f180 | Supported PIDs f181-f19f bitmask || 00 01 00 00 |
| f190 | TODO || 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |
| f400 | Supported PIDs f401-f41f bitmask || 98 3b 80 11 |
| f401 | Monitor status since DTCs cleared || 00 64 80 00 |
| f404 | Calculated engine load | 100/255 % / LSB | 00 |
| f405 | Engine coolant temperature | °C (offset by 40 (decimal)) | 54 |
| f40b | [PR931] Raw turbocharging pressure | kPa | 5e |
| f40c | Engine speed | 0.25 RPM / LSB | 00 50 |
| f40d | Vehicle speed | km/h | 00 |
| f40f | Intake air temperature | °C (offset by 40 (decimal)) | 55 |
| f410 | Mass air flow sensor (MAF) air flow rate | 0.01 grams/sec / LSB || 00 00 |
| f411 | Throttle position | 100/255 % / LSB | 00 |
| f41c | OBD standards this vehicle conforms to || 06 |
| f420 | Supported PIDs f421-f43f bitmask || a0 01 80 00 |
| f421 | Distance traveled with malfunction indicator lamp (MIL) on | km | 00 00 |
| f423 | Fuel Rail Gauge Pressure | 10 kPa / LSB | 00 00 |
| f430 | Warm-ups since codes cleared | literal | 13 |
| f431 | Distance traveled since codes cleared | km | 03 7c |
| f600 | Supported PIDs f601-f61f bitmask || 00 00 00 01 |
| f620 | Supported PIDs f621-f63f bitmask || 00 00 80 01 |
| f631 | TODO || 81 03 00 64 00 5a 00 c8 31 82 af 00 00 00 00 00 00 |
| f640 | Supported PIDs f641-f65f bitmask || 00 00 00 01 |
| f660 | Supported PIDs f661-f67f bitmask || 00 00 00 01 |
| f680 | Supported PIDs f681-f69f bitmask || 00 00 00 01 |
| f6a0 | Supported PIDs f6a1-f6bf bitmask || 00 00 40 01 |
| f6b2 | TODO || 86 01 00 3d 00 00 00 18 b2 87 01 00 01 00 00 00 ff |
| f6c0 | Supported PIDs f6c1-f6df bitmask || 00 00 00 00 |
| f6e0 | Supported PIDs f6e1-f6ff bitmask || 00 00 00 00 |
| f800 | Supported PIDs f801-f81f bitmask || 55 00 00 00 |
| f802 | Vehicle Identification Number (VIN) || 01 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff |
| f804 | Calibration ID || 02 32 33 37 31 30 42 42 33 31 41 00 00 00 00 00 00 32 33 37 30 31 42 42 33 36 41 00 00 00 00 00 00 |
| f806 | Calibration Verification Numbers (CVN) Several CVN can be output (4 bytes each) the number of CVN and CALID must match || 01 44 d8 62 a7 |
| f808 | TODO || 0a e8 53 d2 |
| fd00 | Supported PIDs fd01-fd1f bitmask || 03 cf 1f ff |
| fd07 | [PR364] Cylinder 1 fuel flow correction | 0.1 mg/st | 9f de |
| fd08 | [PR405] Cylinder 2 fuel flow correction | 0.1 mg/st | 71 de |
| fd09 | [PR406] Cylinder 3 fuel flow correction | 0.1 mg/st | 79 46 |
| fd0a | [PR365] Cylinder 4 fuel flow correction | 0.1 mg/st | 74 fe |
| fd0d | TODO || 45 48 48 48 |
| fd0e | TODO || 46 47 48 48 |
| fd0f | TODO || 46 4c 4c 4b |
| fd10 | TODO || 48 47 47 47 |
| fd14 | TODO || 3f f5 3f f5 3f f5 3f f5 3f f5 3f f5 40 17 40 0e 3f df 3f df 3f f8 40 20 3f f2 3f f2 40 04 40 0e |
| fd15 | [PR1035] Cylinder 1 adapter state? || 01 |
| fd16 | [PR1036] Cylinder 1 adapter state? || 01 |
| fd17 | [PR1037] Cylinder 1 adapter state? || 01 |
| fd18 | [PR1038] Cylinder 1 adapter state? || 01 |
| fd19 | TODO || 8e e7 |
| fd1a | TODO || 8f 08 |
| fd1b | TODO || 8c af |
| fd1c | TODO || 8c a7 |
| fd1d | TODO || 41 37 |
| fd1e | TODO || 3f f2 3f f2 3f f2 3f f2 3f f2 3f f2 40 1a 40 12 40 12 40 12 40 24 40 2d 3f fb 3f fb 40 02 40 0a |
| fd1f | TODO || 3f f1 3f f1 3f f1 3f f1 3f f1 3f f1 40 1d 40 15 3f fa 3f fa 40 31 40 2c 3f fa 3f fa 40 12 40 10 |
| fd20 | Supported PIDs fd21-fd3f bitmask || 00 00 00 1f |
| fd31 | (Present on some ECUs) [PR1288] Oxygen content |||
| fd38 | (Present on some ECUs) [PR364] Cylinder 1 fuel flow correction | 0.1 mg/st ||
| fd39 | (Present on some ECUs) [PR405] Cylinder 2 fuel flow correction | 0.1 mg/st ||
| fd3a | (Present on some ECUs) [PR406] Cylinder 3 fuel flow correction | 0.1 mg/st ||
| fd3b | (Present on some ECUs) [PR365] Cylinder 4 fuel flow correction | 0.1 mg/st ||
| fd3c | TODO || 41 36 |
| fd3d | TODO || 42 46 |
| fd3e | TODO || 41 31 |
| fd3f | TODO || 3f f5 3f f5 3f f5 3f f5 3f f5 3f f5 40 0e 40 05 3f f5 3f f5 40 15 40 18 40 07 40 07 40 04 40 03 |
| fd40 | Supported PIDs fd41-fd5f bitmask || 60 0d fe 01 |
| fd42 | TODO || 00 |
| fd43 | TODO || 00 |
| fd4d | TODO || 00 00 |
| fd4c | (Present on some ECUs) [PR1287] Low-pressure average value? | 0.1 °K (or °C offset by -273) ||
| fd4e | TODO || 00 |
| fd50 | TODO || 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05 00 04 00 00 00 00 00 05 00 1d 00 0b 00 00 00 08 00 ca 00 4f 00 01 00 03 00 bd 00 bc 00 08 00 00 00 15 00 1e 00 18 00 00 00 03 00 07 00 00 |
| fd51 | TODO || 00 00 00 00 00 00 00 00 00 cc c8 64 00 cc c3 73 00 cc e5 78 00 cc eb db 00 cc ef 6d 00 cc e6 aa |
| fd52 | TODO || 82 d8 83 22 83 17 81 40 82 d8 83 22 83 17 81 40 82 d8 83 22 83 17 81 40 81 05 82 ca 83 17 81 40 81 9c 83 31 82 29 81 40 81 14 82 29 82 f1 81 24 7f 1d 81 62 81 c2 81 bf 7f 1d 81 61 82 4e 7f 1d |
| fd53 | TODO || 00 |
| fd54 | TODO || 00 00 00 00 00 02 00 03 00 04 00 05 00 05 00 06 |
| fd55 | TODO || 00 00 00 00 00 00 00 00 00 cc c8 58 00 cc c8 3a 00 cc b8 ff 00 cc e3 13 00 cc d7 41 00 cc e5 c0 |
| fd56 | TODO || 7b 2f 7b 2f 7b 2f 7b 84 7e 56 7c ba 7d cf 80 3f |
| fd57 | TODO || 00 |
| fd60 | Supported PIDs fd61-fd7f bitmask || 00 81 0f 81 |
| fd69 | [PR1022] Average airflow sensor signal period || 00 57 |
| fd70 | bit 1: [ET649] Water in diesel fuel detector || 00 |
| fd75 | TODO || 00 00 |
| fd76 | TODO || 00 00 |
| fd77 | TODO || 80 00 |
| fd78 | TODO || 2c f5 |
| fd79 | TODO || 00 |
| fd80 | Supported PIDs fd81-fd9f bitmask || 57 f8 0f f9 |
| fd82 | [PR224] Turbo pressure sensor voltage | 10 * 2^-16 V? | 26 e0 |
| fd84 | [PR847] Inlet air temperature sensor voltage | 0.2 mV | 14 c9 |
| fd86 | [PR782] Turbo entry pressure sensor voltage | 0.2 mV | 14 e0 |
| fd87 | TODO || 00 00 |
| fd88 | [PR670] DPF entrance temperature sensor voltage | 0.1 mV | 52 e1 |
| fd89 | [PR082] Fuel temperature sensor voltage | ~0.076 mV? | 23 78 |
| fd8a | [PR080] Fuel rail pressure sensor voltage | 0.2 mV | 19 80 |
| fd8b | [PR084] Coolant temperature sensor voltage | 10 * 2^-16 V? | 22 75 |
| fd8c | [PR1241] Aux information | 0.2 V | 00 00 |
| fd8d | TODO || 54 62 |
| fd95 | TODO || 00 00 |
| fd96 | [PR1140] Aux information || 00 00 |
| fd97 | TODO || 00 00 |
| fd98 | TODO || 00 00 |
| fd99 | TODO || 00 00 |
| fd9a | TODO || 00 00 |
| fd9b | TODO || 80 00 |
| fd9c | [PR1141] Aux information | 0.1 °C | 80 00 |
| fd9d | [PR1142] Aux information || 80 00 |
| fda0 | Supported PIDs fda1-fdbf bitmask || 30 00 07 f0 |
| fda3 | TODO || 00 |
| fda4 | TODO || 00 |
| fda8 | (Present on some ECUs) [PR1235] Low-pressure sensor voltage? | 0.2 mV ||
| fdb6 | [PR864] Fuel supply regulation valve OCR || 00 00 |
| fdb7 | [PR850] Fuel supply current setpoint | mA | 00 00 |
| fdb8 | [PR007/PR739] Rail pressure regulator current setpoint | ~3 mA | 00 19 |
| fdb9 | [PR048] Rail pressure regulation valve OCR (opening cycle ratio) || 00 00 |
| fdba | [PR006] Rail pressure regulator current (should be 1600 mA or 1400+/-50 mA and in any case within 5 mA of PR007) | ~3 mA | 00 19 |
| fdbb | TODO || 00 |
| fdbc | TODO || 00 20 00 20 00 20 00 20 |
| fdbd | (Present on some ECUs) [PR1230] Low-pressure block temperature sensor voltage? | 0.2 mV | 00 |
| fde9 | (Present on some ECUs) [PR739] | mA | 00 |
| fee0 | Supported PIDs fee1-feff bitmask || 00 00 00 02 |
| feff | MISSING (query returns error 12) |||
These are some manufacturer-specific service 21 PID/CIDs that can be queried for BCM information. They're read in the same way as services 01 and 09 but only within a diagnostic session (command 10 c0). In a normal session the reads will return error 0x80. SID 0x21 is known as "Read Data by Local Identifier" in some protocols.
| PID | Meaning | Captured value |
|---|---|---|
| 00 | Supported PIDs 01-1f bitmask | c0 00 00 01 |
| 01 | TODO (the key fob remote IDs could be somewhere here) | d7 0a fc 95 28 04 20 d5 11 34 21 14 1e 98 14 cd 06 02 00 89 b8 02 0f bc 02 80 98 a0 00 00 40 88 88 00 |
| 02 | 42 52 30 33 30 (ascii BR030) |
|
| 20 | Supported PIDs 21-3f bitmask | 80 00 00 01 |
| 21 | BCM serial number in the first 5 digits (this can be used for PIN calculation with utilities like http://keytechtools.com/bcmcodes/index.php) | 90 8c df |
| 40 | Supported PIDs 41-5f bitmask | df fd 90 00 |
| 41 | A.8: IGN in ON, A.7: emergency lights switch, A.6: right turn switch, A.5: left turn switch, A.4: brake pedal (brake light switch) |
80 00 00 00 00 |
| 42 | A.8: IGN in ON, A.7: key inserted, A.6: driver door open, A.5: passenger door open, A.4: rear right door open, A.3: rear left door open, C.4`: IGN in ACC or ON, others TODO |
c0 00 08 00 00 00 00 00 |
| 44 | A.8: IGN in ON, A.7: key inserted, A.6: driver door open, A.4: lights selector in the 3rd or 4th position, i.e. low-beam lights and/or position lights are on -- but 0 when the same lights are on in AUTO or triggered by the fog lights switch -- this bit strictly depends on the selector position, A.1: passenger door open, B.8: rear right door open, B.7: rear left door open, B.6`: trunk door open, others TODO |
c0 00 00 00 00 |
| 45 | A.8 and A.7: IGN in ON or START, A.6-4: 0b000: front wipers selector in OFF (2nd position), 0b001: front wipers selector in AUTO (3rd position), 0b010: front wipers selector in SLOW or one-shot (4th or 1st position), 0b100: front wipers selector in FAST (5th position), B.5: front wipers NOT moving right now, E.8-7: 0b00: rear wiper selector in OFF, 0b01: rear wiper selector in INTERMITTENT, 0b10: rear wiper selector in FAST, E.5: rear wiper moving right now, E.4: reverse gear, other bits TODO |
c0 f0 00 00 00 00 00 00 00 |
| 46 | A.8: IGN in ACC or ON, A.7: IGN in ACC, other bits TODO |
c0 00 00 00 00 |
| 47 | A.8: IGN in ON or START, A.7: key inserted, A.4: driver door open, A.3: passenger door open, A.2: rear right door open, A.1: rear left door open, B.8: trunk door open, B.6: IGN in ACC or ON, other bits TODO |
c0 20 00 00 00 00 00 00 00 00 |
| 48 | A.8: IGN in ON or START, A.7: key inserted, A.2: IGN in ON or ACC, B.7: driver door open, B.6: passenger door open, B.5: rear right door open, B.4: rear left door open, B.3: trunk door open, other bits TODO |
e0 00 00 00 c0 00 00 00 00 |
| 49 | A.8: IGN in ON or START, A.7: IGN in ON or ACC, A.6: high-beam switch (stick forward) on, A.5-2: 0b0000: light selector in OFF, 0b0001: light selector in AUTO, 0b0010: light selector in position/parking/side position, 0b1110: light selector in low-beam position, A.1: high-beam temporary switch (stick towards driver) on, B.8-7: 0b00: fog lights selector in 1st position (OFF), 0b10: fog lights selector in 2nd position (front fog lights), 0b11: fog lights selector in 3rd position (toggle rear fog lights+front on) B.6: driver door open, B.5: passenger door open, B.4: rear right door open, B.3: rear left door open, B.2: trunk door open, B.1: right turn switch on, C.8: left turn switch on, C.3: engine running, G.8-7: dashboard lights? other bits TODO |
c0 00 00 00 00 00 40 1e 00 00 |
| 4a | A.8: right turn switch on, A.7: left turn switch on, A.6: high-beam switch (stick forward) on, A.5-3,1: 0b000x0: light selector in OFF, 0b000x1: light selector in AUTO, 0b001x0: light selector in position/parking/side position, 0b111x0: light selector in low-beam position, A.2: high-beam temporary switch (stick towards driver) on, B.8-7: 0b00: fog lights selector in 1st position (OFF), 0b10: fog lights selector in 2nd position (front fog lights), 0b11: fog lights selector in 3rd position (toggle rear fog lights+front on), B.6-4: 0b000: front wipers selector in OFF (2nd position), 0b001: front wipers selector in AUTO (3rd position), 0b010: front wipers selector in SLOW or one-shot (4th or 1st position), 0b100: front wipers selector in FAST (5th position), B.3: front wiper sprinkler switch on, C.5-4: 0b00: rear wiper selector in OFF, 0b01: rear wiper selector in INTERMITTENT, 0b10: rear wiper selector in FAST, C.3: rear wiper sprinkle switch on, other bits TODO |
00 00 e0 00 00 00 00 |
| 4b | B.4: IGN in ON or START, B.3: IGN in ON or ACC, B.2: key inserted, other bits TODO |
00 0e 80 00 00 |
| 4c | A.8: IGN in ON or START, A.7: blower fan on, A.6: A/C on, other bits TODO |
80 00 00 00 00 |
| 4d | A.8: key inserted, A.1: IGN in ON or START, other bits TODO |
81 00 00 00 00 00 00 00 |
| 4e | A.8: IGN in ON or START, A.7: IGN in ON or ACC, A.6: key inserted, other bits TODO |
e0 00 00 00 00 00 00 00 00 |
| 50 | A.8: IGN in ON or START, A.6: key inserted, other bits TODO |
d0 40 c0 00 00 |
| 51 | A.8: IGN in ON or START, A.7: brake pedal depressed (braking light on), other bits TODO |
80 00 00 00 00 |
| 54 | A.6: blower fan on, A.5: TODO, A.2,1: TODO (1 after engine stopped, 2 when running?), B.8-1: might be coolant temperature, C.8-1 might be battery voltage, E.8-1: engine revolutions / RPMs, F.8-1 might be intake temperature, other bits TODO |
81 53 9f 00 00 3a 00 00 00 00 00 |
| 82 | TODO (Partially matches PID 82 on addresses 74d, 742) |
32 4c 01 01 01 ff 01 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 01 ff ff ff ff ff ff ff ff ff ff ff 00 |
| 83 | A.8-E.1: The second half of the part number, the whole of which is 284B2-BR02A in my case (as printed on the BCM box label), F.8-1: Diag ID, G.8-I.1: Supplier code, L.8-M.1: One of the BCM encrypted PINs printed on the BCM box label, J.8-N.1: Hardware ID?, O.8-P.1: Software ID?, Q.8-R.1: Edition ID, S.8-T.1: Calibration ID?, Y.8-1: Manufacture date? |
42 52 30 32 41 45 44 03 17 00 05 03 68 01 11 00 00 00 00 00 00 00 00 80 (ascii BR02AED) |
| 90 | TODO | 0b b8 (3000) |
| 91 | TODO | 03 e8 (1000) |
| 92 | TODO | 05 |
| 94 | TODO | 00 |
These are some manufacturer-specific service 21 PID/LIDs that can be queried for ECU information. They're read in the same way as services 01 and 09 but there are no supported PID bitmasks for the LIDs after 0x80. SID 0x21 is known as "Read Data by Local Identifier" in some protocols.
Address 7e0 (Engine ECU / ECM / ECMD?) LIDs:
| PID | Name | Captured value |
|---|---|---|
| 80 | 42 42 33 36 41 46 34 42 45 30 36 36 39 52 00 f4 31 0e e6 a1 01 01 01 88 (ascii BB36AF4BE0669R) |
|
| 81 | VIN | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |
| 82 | 95 03 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff |
|
| 84 | 34 42 45 46 31 33 30 32 31 33 35 31 33 30 35 32 31 20 20 20 (ascii 4BEF1302135130521) |
|
| a3 | (Present on some ECUs) Reportedly EGR valve feedback loop setpoint 0.01220703% and mass airflow | |
| a5 | (Present on some ECUs) Reportedly per cylinder fuel flow adjustments | |
| ac | (Present on some ECUs) Reportedly DPF status -- soot content before/after regeneration, distance since last change, odometer snapshot from last regeneration and time since last regeneration | |
| ac | (Present on some ECUs) Reportedly turbo status, pressure differential | |
| ae | (Present on some ECUs) Reportedly diesel fuel water content detection | |
| f0 | Product Number long | 33 36 31 30 52 46 34 42 45 30 36 36 39 52 00 f4 31 00 00 00 01 01 00 88 (ascii 3610RF4BE0669R) |
| f1 | 30 30 30 30 30 46 46 4f 49 58 20 20 20 20 20 00 13 02 13 01 58 5c e5 63 (ascii 00000FFOIX) |
|
| fc | 33 36 31 30 52 46 34 42 45 30 36 36 39 52 00 f4 31 00 00 00 01 01 00 88 (ascii 3610RF4BE0669R) |
|
| fd | 30 30 30 30 30 46 46 4f 49 58 20 20 20 20 20 00 13 02 13 01 58 5c e5 63 (ascii 00000FFOIX) |
|
| fe | Product Number | 42 42 33 36 41 46 34 42 45 30 36 36 39 52 00 f4 31 0e e6 a1 02 01 00 88 (ascii BB36AF4BE0669R) |
| ff | HW Number | 42 42 33 31 41 4e 4d 55 4b 00 45 4f 4c 50 47 01 13 02 26 13 22 5c b8 12 (ascii BB31ANMUK EOLPG) |
Address 74d (IPDM-E/R or BCM?) LIDs:
| PID | Name | Captured value |
|---|---|---|
| 00 | Supported PIDs 01-1f bitmask | c0 01 00 00 |
| 01 | d5 00 00 00 00 |
|
| 02 | f0 40 27 c3 00 bc 05 d8 04 |
|
| 10 | 2f 30 ff 0f 32 00 be 9d 00 cc 01 00 00 00 00 00 00 f0 |
|
| 82 | (Partially matches PID 82 on addresses 745, 742) |
32 4c ff 01 01 ff ff 01 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff |
| 83 | A.8-E.1: The second half of the part number, F.8-1: Diag ID, G.8-I.1: Supplier code?, J.8-N.1: Hardware ID?, O.8-P.1: Software ID?, Q.8-R.1: Edition ID, S.8-T.1: Calibration ID?, Y.8-1: Manufacture date? |
4a 44 30 32 44 0d 44 08 07 00 00 00 00 00 76 35 2e 30 72 31 00 00 00 80 (ascii JD02D v5.0r1) |
| 91 | 0f 0a 14 0a 02 |
|
| 93 | 78 9e 28 03 7c 06 02 13 3b 00 00 00 00 00 00 00 00 00 00 00 |
|
| 95 | 00 |
|
| 97 | 00 |
Address 742 (EPS?) LIDs -- requires diagnostic session 0xc0:
| PID | Name | Captured value |
|---|---|---|
| 00 | Supported PIDs 01-1f bitmask | c4 00 00 00 |
| 01 | 0b f8 03 00 00 00 00 00 00 00 43 64 00 00 80 00 00 44 00 00 00 |
|
| 02 | 01 |
|
| 06 | 94 94 94 94 94 a2 a2 a2 a2 a2 a2 |
|
| 82 | (Partially matches PID 82 on addresses 745, 74d) |
32 4c 01 00 01 00 01 00 ff ff ff ff ff ff ff ff ff ff ff ff ff 00 ff ff ff ff ff ff |
| 83 | A.8-E.1: The second half of the part number, F.8-1: Diag ID, G.8-I.1: Supplier code?, J.8-N.1: Hardware ID?, O.8-P.1: Software ID?, Q.8-R.1: Edition ID, S.8-T.1: Calibration ID?, Y.8-1: Manufacture date? |
42 52 30 31 44 42 41 05 02 39 43 30 31 35 87 00 00 00 01 01 00 00 00 80 (ascii BR01DBA 9C015) |
| 84 | 31 36 33 33 32 31 38 32 34 37 ff ff ff ff ff ff ff ff ff ff (ascii 1633218247) |
Address 743 (Instrument cluster/Odometer) LIDs:
| PID | Name | Captured value |
|---|---|---|
| 00 | Supported PIDs 01-1f bitmask | e0 00 00 00 |
| 01 | Bytes 4-5 and 6-7: speedometer, bytes 8-10: odometer, bytes 11-12: engine RPMs (0.125 RPM unit), byte 13: fuel level in litres?, byte 14: engine coolant temperature - 6d middle of gauge, 5b bottom, bytes 17,18,33: dashboard lights, byte 17 bit 7: ESP/TCS off, bit 5: change oil?, bit 4: any door open, byte 33 bit 8: handbrake, bit 4: driver seatbelt undone, byte 38: outside temperature in °C offset by 40 °C, byte 63: cruise control state - 10 - speed limiter engaged, 20 - setting limit speed, 50 - setting cruise speed, byte 64: cruise control speed setpoint - fe when unset |
00 00 00 00 00 00 00 01 fd ec 00 00 33 45 00 00 10 0c 00 00 40 00 00 00 00 00 00 00 00 00 00 00 98 00 01 1e a0 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe 00 00 41 c8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |
| 02 | fc fb fe 00 20 80 00 10 00 00 00 00 02 9a 07 e0 80 00 00 00 00 00 e4 00 00 00 00 00 |
|
| 03 | 03 03 03 00 ff ff 00 00 27 ff ff ff ff ff ff ff ff ff ff 27 ff ff ff ff ff 00 ff ff ff ff ff ff ff ff ff ff 00 ff ff ff ff ff ff ff ff ff ff ff 27 ff ff ff ff ff |
|
| 82 | 00 00 ff ff 01 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff |
|
| 83 | A.8-E.1: The second half of the part number, F.8-1: Diag ID?, G.8-I.1: Supplier code?, J.8-N.1: Hardware ID?, O.8-P.1: Software ID?, Q.8-R.1: Edition ID, S.8-T.1: Calibration ID?, Y.8-1: Manufacture date? |
42 52 35 30 45 14 46 02 18 01 06 06 08 06 00 01 00 16 00 01 ff ff ff 80 (ascii BR50E) |
| f0 | Product Number long | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |
| f1 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |
|
| fe | Product Number | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |
| ff | HW Number | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |
Apparently the Engine ECU (address 7e0) and the BCM (address 745) implement service 0x23 but I've been unable to get any data out of them so far. SID 0x23 is known as "Read Memory by Address" in some procotols. The message syntax is as described in this blog post, i.e. the command consists of the length byte (07), the Service ID (23), the 32-bit big-endian read start address and the 16-bit big-endian number of bytes to read, e.g. 07 23 00 00 12 34 00 3f to request 63 bytes starting at memory address 0x1234. The command returns error 0x7f if attempted in the normal session mode. In that (370Z-specific) blog post those commands are executed in the 0xfb session (elevatedDiagSession) but that mode is not supported on the J10 Qashqai. However, executing the command in session 0xc0 mode (startDiagSession) resolves the 0x7f error and instead error 0x12 (subFunctionNotSupported-invalidFormat) is then returned. In session 0x85 error 0x11 is returned. More research needed.
Write the DBC file for the periodic messages and the information PID queries perhaps using the free online editor.
Find out a message combination to stop the engine, perhaps by imitating the periodic messages.
Data available on some cars but not available on Nissan Qashqai J10 or yet to be decoded:
- Fuel level
- Outside temperature
- Outside brightness level (bright/dark, from the Light & Rain sensor)
- Seatbelt status and occupancy sensor status other than driver
- Car VIN
- Current time and/or date
- Current GPS lat/lon/number of satellites