4 ms·

There’s a BMW factory level diagnostic program called Tool32 that might help when trying to reverse engineer stuff like this. I don’t think there’s a way to leg

There’s a BMW factory level diagnostic program called Tool32 that might help when trying to reverse engineer stuff like this. I don’t think there’s a way to legitimately get ahold of this software though… Anyway, it has a bunch of test operations you can perform. For example, you can set the individual gauges in the gauge cluster to specific values, etc. Perhaps there are some tests for the shifter and you can sniff the bus as they’re performed? These are all done over the OBD port so it shouldn’t be that hard.

t0mas88 4y ago
I think one of the e-sys or related ISTA etc tools can move the gear selector. Because the hardware is able to move itself for example from the M/S mode (tilted left) back to center when it goes into park. And I've seen that done via diagnostics, but I'm not sure it was a function of the selector or whether the selector responds to some kind of "engine shutting off" message that it gets from another module.
- halifaxbeard 4y ago
  Yes. The depth of BMW diagnosis tools is impressive. Even more impressive has been the work of scapy around the debug and diagnosis protocols BMW uses. Check it out: https://github.com/secdev/scapy/blob/master/scapy/contrib/automotive/bmw/definitions.py https://github.com/secdev/scapy/blob/master/scapy/contrib/au...
  - t0mas88 4y ago
    Cool, thanks for sharing!
kiwidrew 4y ago
There's a good chance that all of the components in the car have similar/identical command sets for test/debug operations, even if the individual components have been produced by different OEMs.