JEEP HACKING CAN-C / CAN-IHS / UDS ! (Reverse Engineering)

[covidcommander]

Mouser or Digikey
2-2138650-1 white housing key B
5-2138650-1 green housing key E
5-928999-1 female terminal 22-24 awg
5-963715-6 female terminal 18-20 awg
On the star connector the far terminal is can high, can low is closest to edge

I was looking for this info
thanks

Also thought there was 2 different can bus terminals one was a white (low) star connector and the other was a green (high) star connector?

Sponsored

 

[covidcommander]

"My Jeep would be just perfect if only it would..."
This project started because I've said that to myself. Too many times. ?

PROJECT DESCRIPTION:

This project aims to reverse engineer the Wrangler's CAN bus and use that information to addresses numerous quality-of-life issues that can be solved "if only the Jeep's computer acted just a little bit differently" and to make mods that up until now have not been possible.

This thread is a continuation from redracer's original inspiration thread and my own project discussion here. This serves as a place for like minded individuals to reverse engineer CAN bus messages (and UDS functions), to seek guidance on related issues, and to put that knowledge to work.

It's been over four months since we started connecting to our own vehicle's CAN networks using a Raspberry Pi with a Waveshare 2-Channel CAN adapter. (Arduinos are welcome, too!) Since that time, we've found a low-cost source for Jeep's official CAN connectors.

We've decoded quite a number of CAN messages and started to get our feet wet in the world of Unified Diagnostic Services. We've managed to create tools including: a black box data recorder, a remote keyfob WiFi toggle, an automatic climate control for remote start, and more.

image of CAN-C and CAN-IHS bus connections (located behind the glovebox)​

Looking for tips to get started?
If you have questions, ASK! We're friendly!

If you're not yet ready to hook up your vehicle, but you'd like to simulate the real thing, @Drdyer9051 lists the steps necessary to configure a virtual CAN interface on a Raspberry Pi and play back authentic messages from one of our recorded CAN bus log files.

For those who are ready to connect their vehicle to a Raspberry Pi, this message offers tips on how to initialize your 2-channel Waveshare CAN adapter as well as a general introduction to working with the Wrangler's CAN-IHS and CAN-C bus.

We maintain an online spreadsheet with information on all the CAN bus messages that we've decoded, and you're welcome to access it. All that we ask, in return, is that you share anything new you might discover along the way. Sounds fair?

Third party contributions are welcome as long as your vehicle uses the same modern Chrysler/Dodge/Fiat/Jeep ECU with similar messages and message IDs. ?

TO VIEW OR DOWNLOAD THE SPREADSHEET:

2018+ Jeep Wrangler "JL"
CAN-C and CAN-IHS Message ID.xls

TO VIEW OR DOWNLOAD RASPBERRY PI CODE SAMPLES, VISIT OUR GITHUB REPOSITORY:

rstellhorn / jeep-jl-powernet-scripts
with special thanks to redracer, repository maintainer
​

All code samples assume that can0 is connected to the vehicle's CAN-IHS network, and can1 is connected to the vehicle CAN-C network. Use at your own risk, no promises or guarantees are given.

Have a question?
Feel free to jump right in and ask! We'll do our best to help you.

LAST UPDATED: March 20th, 2023

You can connect to both can buses at the same time?

 

[redracer]

You can connect to both can buses at the same time?

Yes... With the dual canbus boards, like the waveshare one mentioned.

We can do data dumps using the available tools from one, the other, or both at the same time for analysis.

Also the libraries can work with both at the same time to process and filter data from both interfaces.

 

[covidcommander]

Yes... With the dual canbus boards, like the waveshare one mentioned.

We can do data dumps using the available tools from one, the other, or both at the same time for analysis.

Also the libraries can work with both at the same time to process and filter data from both interfaces.

I got 2 jhoinrch usb to can adapters. Going to try 2 versions of cansavvy and see what I can find.

finally got an oscilloscope. Little bit of learning to do.

Thanks for all the info

 

[covidcommander]

When you connect to the can bus the 2 wires in the twisted pair are 2 different signals and together they make up one can bus?

Wondering about the ground for each wire in the twisted pair. They would be attached to chassis ground?

And the big green star connector would be the can c bus?

Think my forward facing camera on the windshield and adaptive cruise sensor in the bumper both share a private can.

I was trying to see what traffic is between the two modules. Only the adaptive cruise sensor in the bumper appears to be connected to the can c bus. Thinking that's 500kbps. Not sure about the private can thou

 

[LanceMagnum]

When you connect to the can bus the 2 wires in the twisted pair are 2 different signals and together they make up one can bus?

Yes, it's relies on the difference between the two wires for the signal, neither is a ground

If you have a shielded cable containing the twisted pair you only ground one end of the shield to avoid a ground loop

 

[covidcommander]

Yes, it's relies on the difference between the two wires for the signal, neither is a ground

If you have a shielded cable containing the twisted pair you only ground one end of the shield to avoid a ground loop

I purchased unshielded twisted pair wire. Looks just like the oem stuff.

Worth it to return it and buy shielded twisted pair wire or thibk the like oem stuff is good enough?

Have to run a wire from the front bumper to the star connector inside the car and a wire from the forward facing camera to the star connector and to the adaptive cruise sensor in the bumper.

Thanks for the info appreciate it

 

[LanceMagnum]

Worth it to return it and buy shielded twisted pair wire or thibk the like oem stuff is good enough?

Unshielded should be fine - between the twisted pair and the differential signal it's got good noise immunity as-is

 

[TordFuglstad]

Hi there! Since you seem to know more than most Jeep "technicians" over here, I have a question for you.
My Uconnect died, and I swapped to an aftermarket unit. I checked the 52-pin connector on the back, and the radio is getting stable voltage. However it is still dead. I suspect som CAN-IHS related issue as the radio connects to the security gateway module. Does the radio only power on after getting CAN-IHS signal?

Thank you for any insight!

 

[rforbes]

Hi there! Since you seem to know more than most Jeep "technicians" over here, I have a question for you.
My Uconnect died, and I swapped to an aftermarket unit. I checked the 52-pin connector on the back, and the radio is getting stable voltage. However it is still dead. I suspect som CAN-IHS related issue as the radio connects to the security gateway module. Does the radio only power on after getting CAN-IHS signal?

Thank you for any insight!

year of your wrangler? what aftermarket unit are you using?

 

[Mattkguns]

Thanks for your support, ideas and encouragement guys.

I was out of town this weekend so I couldn't do anymore testing. I will be messing with it over the next few days and will provide some updates.

Hey Tristan or anyone else, did you ever make more progress getting that pump to do what you wanted?

Im gonna start a separate thread as well but figured it wouldnt hurt to ask here.

Im gonna use a JL EHPS unit to replace the mechanical unit in an 05 FordGt that were motor swapping at work.

 

[jaydenhollandGlad]

Hi guys just wondering if anybody could get me a drive log using can FD on the can C bus as when i isolated my pcm and did a capture i get ID=0x7A DLC=12 DATA=00 EE 00 00 04 B0 A1 98 00 02 00 00. I would do a capture on my own vehicle but the engine blew up and i have no way of getting a running FD capture.

Cheers

Sponsored