canlogger

Tactrix OpenPort 2.0 interface hardware ONLY!

For your convenience, we’ve compiled the small CAN sniffing source code that comes with EcuFlash, source code untouched.
Look for \Program Files\OpenECU\EcuFlash\samples\canlogger\
You can also use development software like Microsoft Visual Studio (C++), open up project file canlogger.vcproj and compile the Windows code for yourself. Free/trial compiler versions usually are sufficient.

It’s a small Windows EXE, to be run from command line, requires Tactrix J2534 driver which is automatically installed by EcuFlash.

Follow link to download canlogger.zip containing the 76 KiB executable.

SHA1 checksum of our binary:
ac72fb26cb01b9554d1e7a00639a010d50b84266 canlogger.exe

Launching the EXE without arguments prints usage info:

logs (sniffs) CAN data.

canlogger [logfile] {switches}

[outfile] log file to write
/b [baudrate] CAN baud rate to use (500000 is the default)
/p {can,iso15765} protocol to use (can (default) passes all IDs, iso15765 only looks at 0x07E0 and 0x07E8

Run and log/sniff all (raw) CAN traffic to file e.g.:

canlogger.exe canlogger.log

…is sufficient on Subaru as the tool uses proper defaults as if following arguments were given:
canlogger.exe canlogger.log /b 500000 /p can

You can start logging with ignition off (no messages at all) then turn ignition on in order to get everything on the high-speed bus. The tool will capture all messages till pressing a key. Modern vehicles tend to use roughly 1000 messages per second, expect long/big files.

In case of troubles check driver path \windows\system32\op20pt32.dll and matching registry HKEY_LOCAL_MACHINE\SOFTWARE\PassThruSupport.04.04\Tactrix Inc. - OpenPort 2.0 J2534 ISO/CAN/VPW/PWM.

Created file (canlogger.log, text format) looks like this:

[611212235] 00 00 04 10 00 00 00 00 00 00 00 01
[611212477] 00 00 05 14 00 00 70 00 28 8B 0F 80
[611212727] 00 00 06 20 30 00 00 00 00 00 00 00
[611214178] 00 00 00 02 0C 80 62 00 00 00 00 01
[611214423] 00 00 04 11 00 FF BF 00 00 25 00 00

Format is made up by device timestamp [microseconds] followed by message bytes of which first four bytes make up CAN-ID.
Example line:
[611212477] 00 00 05 14 00 00 70 00 28 8B 0F 80

  1. Timestamp (simple counter, no actual date/time): 611212477 µs
  2. CAN-ID: 0x514
  3. Message payload content (always 8 bytes): 00 00 70 00 28 8B 0F 80

Ok now please send us some (zipped) CAN logs!
We’re especially interested in Euro5 Impreza Diesel data, other models including petrol are welcome, too.
AFAIK there’s no sensitive content like VIN or key codes on the (high-speed) bus – nothing to worry about.

Advertisements

4 responses to “canlogger

  1. I have done some test logging using canlogger on my 2010 diesel and it seems to work fine.

    Now is only the question about how to interpret the logs! 🙂

    Like

    • Thanks, see my comment on page “CAN Messages”.
      Btw, interesting log would be like:

      1. start logging before ignition on
      2. wait for a minute or so – without starting engine (post-init standard messages)
      3. do a very short drive
      4. engine off then logging off

      Like

  2. Checksum of download does not match. Has this been updated for latest tactrix libraries?

    //
    // File Checksum Integrity Verifier version 2.05.
    //
    a11d28431ca148ad09fd26c2c8844dc5 f:\canlogger\canlogger\canlogger.exe

    Like

    • No, sorry, this is very old. I should delete that one sooner or later…
      I recommend compiling it from source, i.e. use Visual Studio Community on Windows.

      Edit:
      Btw,
      a11d28431ca148ad09fd26c2c8844dc5 is the md5sum, while
      ac72fb26cb01b9554d1e7a00639a010d50b84266 is sha1sum.

      Download is still ok, don’t know however if EXE still works using current OpenPort firmware, though. Just let me know…

      Like

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s