The Grenadier Forum

Register a free account today to become a member! Once signed in, you'll be able to contribute to the community by adding your own topics, posts, and connect with other members through your own private inbox! INEOS Agents, Dealers or Commercial vendors please use the contact us link at the bottom of the page.

I'm ready start spending some intimate time with the CAN bus...

parb

Grenadier Owner
Lifetime Supporter
Local time
12:50 PM
Joined
Sep 10, 2023
Messages
1,984
Location
Silicon Valley, CA, USA
so did i hear it right on the grenadierworks podcast that ineos went to encrypted can bus messages? So i can't tap into the bus and use candump toolkits to see what actually is going on in the car?

I get that i can see a lot on the ODB2 gateway but i would love to spend more time seeing what actually is happening on CAN. Assuming they use a lot of bosch gear i think its not craxy hard to reverse engineer?

Anyone played around with the canbus yet? Does right to repair act (Massachusetts and Wisconsin) get us access to unencrypted canbus messages to explore what actually is going on in the vehicle?
 
I'll take something basic, like does anyone know of a bundle where its easy to tap into the canbus? Do we even know how many buses they have. i assume we will never quite get to know the details but i would love if i could get my hands on a DBC file and look around the bus a bit...
 
so did i hear it right on the grenadierworks podcast that ineos went to encrypted can bus messages? So i can't tap into the bus and use candump toolkits to see what actually is going on in the car?

I get that i can see a lot on the ODB2 gateway but i would love to spend more time seeing what actually is happening on CAN. Assuming they use a lot of bosch gear i think its not craxy hard to reverse engineer?

Anyone played around with the canbus yet? Does right to repair act (Massachusetts and Wisconsin) get us access to unencrypted canbus messages to explore what actually is going on in the vehicle?
Par - I have multiple OBD tools that I have acquired for this purpose… nothing yet, but you and I are so on the same page- @GrenX is reportedly in the lead with this endeavor…..
 
Last edited:
You Can Do It Cheering GIF
 
I'll take something basic, like does anyone know of a bundle where its easy to tap into the canbus? Do we even know how many buses they have. i assume we will never quite get to know the details but i would love if i could get my hands on a DBC file and look around the bus a bit...
This might answer at least one of your questions.

I've been meaning to have a snoop but haven't found time yet. I suspect it's not encrypted and is pretty simple, vehicle can and lin systems generally are - apart from firmware update functions.

Tristan
 

Attachments

  • PXL_20231012_132327478.jpg
    PXL_20231012_132327478.jpg
    1.7 MB · Views: 43
This might answer at least one of your questions.

I've been meaning to have a snoop but haven't found time yet. I suspect it's not encrypted and is pretty simple, vehicle can and lin systems generally are - apart from firmware update functions.

Tristan
Wow! And thank you!! Got any other interesting images?
 
so did i hear it right on the grenadierworks podcast that ineos went to encrypted can bus messages? So i can't tap into the bus and use candump toolkits to see what actually is going on in the car?

I get that i can see a lot on the ODB2 gateway but i would love to spend more time seeing what actually is happening on CAN. Assuming they use a lot of bosch gear i think its not craxy hard to reverse engineer?

Anyone played around with the canbus yet? Does right to repair act (Massachusetts and Wisconsin) get us access to unencrypted canbus messages to explore what actually is going on in the vehicle?
Better watch out that you don't turn your Grenny into this
1767739459244.jpeg
 
This might answer at least one of your questions.

I've been meaning to have a snoop but haven't found time yet. I suspect it's not encrypted and is pretty simple, vehicle can and lin systems generally are - apart from firmware update functions.

Tristan
This is helpful. i i will start with the ODB port and see how much the gateway is filtering.
the BMW Motor control unit (8.6) is a well known unit so i suspect its messages won't be super hard to decode.

This will take a minute to figure out.. :)
 
CAN injection has likely been worked out in Melbourne. Toyotas are just easier to off load and draw less attention then a young fella in a stolen Grenadier.
Someone has worked some of it out - Ultimate 9 my throttle controller works fine in the Grenny...maybe that's not CANBUS though.
 
Back
Top Bottom