Sniff an AEV ProCal

Sniffing Data from an OBDII AEV ProCal programmer (Not Scan Tool)
Look who's eager to talk!

The Arduino SeeedCan Shield is set to communicate @ 500Kb with the AEV ProCal

Communication

CAN-H from the Arduino is connected to Pin 6 on the ProCal.
CAN-L from the Arduino is connected to Pin 14 on the ProCal.





Power

Arduino GND connected to Pin 4 on the ProCal.
Arduino 5v connected to Pin 16 on the ProCal.


Below are some responses from the Procal towards the can-bus shield using the SuperSniffer Tool



And another screenshot using putty.



The Procal sends a message 2, 26, 136 to Can Node 1536.
I bet its waiting for a response from the Jeep, but since this is not connected to the Jeep it keeps sending until the it gets a valid message back.

Previously the ProCals didnt support all Jeeps, but the newer ones supports all models. So its probably trying to get a VIN number or Jeep Model, so it knows which instruction set to send to the Jeep.

Next step is to buy a Male to Female OBD2 Cable which i can butcher a bit so that i can tap into the CAN-L and CAN-H

So when i connect everything up it will record all messages sent back and forth between the  Procal & Jeep to the SuperSniffer.

Somewhere along the line it will show me how to get to the programmable node of the Jeep.
(By the way this is the scary part where you are most likely be able to Brick the Jeep and render it totally useless and turning it into one very big door stopper)

8 comments:

  1. Hey Martin,

    I just ordered an Arduino and Canbus shield to do exactly this. Have you made any progress you would like to shart. My parts haven't arrived yet for me to play but thanks for the head start. You are most likely correct it is requesting the VIN code from the jeep, the Procals are locked to one VIN at a time. I own two jeeps so that's my reason for wanted to play with this thing.

    Rob

    ReplyDelete
  2. Hey, I didnt get any further because i broke the ProCal and havent got round buying a new one yet.

    I did a vin release on the procal can I must have sent a random VIN to the procal afterwards and now i dont know what it is, either that or
    the VIN release doesnt work properly causing the Procal to break it self or something. Ive read many forum threads where people say they released the VIN and then it doesnt work afterwards.

    So If I can give you a heads up, once you have locked it to either of your Jeeps, try not to mess with the VIN release, because you might end up breaking it (as in Soft Broken)
    Please if you find something share with me too, I still want to find a way to disable my TPMS

    ReplyDelete
  3. By the way, You stumbled onto a very old blog post this, was the first time when i tried to communicate with the Procal.
    I'm not using blogger anymore for my projects ive since moved all my findings to my own personal forum.

    You will definitely be interested in the below forum thread which i made regarding the procal, I put as much detail into it as I could.

    http://www.techtinker.co.za/viewtopic.php?f=14&t=11

    You have to unfortunately join to see the pictures, I'm still trying to figure out why :-)

    Enjoy!

    ReplyDelete
  4. Thanks Martin,

    I will check out the forum and let you know if I find anything interesting out about the Procal.

    Have a good one,

    Rob

    ReplyDelete
  5. Did you ever get back around to messing with the Procal?

    ReplyDelete
  6. I haven't no, Back when I bough the Procal it was cheap, Its now very expensive. Not sure If I want to mess with it again it cost me quite a bit the last time.

    ReplyDelete
  7. Yeah I'm not too impressed with this VIN lock feature. I can understand the benefit for their business though.

    ReplyDelete