wideband logging

[steveo]

ooh, is it possible the hard work i've put into a utility designed to make the ee datastream my bitch may be helpful here? ;)

that's how i stumbled on how to get it into flash mode before i could even stomach looking at the disassembly, i basically just fuzzed the thing.

looking back i guess im lucky i didnt accidently start the prom erase procedure or something.

i have a dump of the result of every mode combination, if i remember which laptop i used to get it. i'll check when i get home

[RobertISaar]

assuming you sent commands to E4 as well, then that could certainly be useful.

[steveo]

i think i did? F4 t-side E4 e-side or some such thing?

[RobertISaar]

that is how it appears to be setup.

[steveo]

i think i just ran all two and three byte combinations all the way from 0x00 to 0xff and logged the results.

unfortunately, this is just a theory, but those results i have on anything other than F4 might be unreliable.

my software is stateful enough now to know how long it's been since a valid reply, and resends F4 a disable comms and confirms silence if it's been too long.

.... but it wasn't back then, those were early days

i think it's only valid requests on F4 that reset the disable comms counter on the ecm (which seems approx 3 seconds long, so i consider 2500ms a good 'nuff threshold). i don't even know for sure that requests to E4 will make it maintain silence.

so i bet they're peppered with random idle chatter by the time it actually counted up to E4, which would have taken a hell of a lot longer than 3 seconds. that explains why i was getting weird short packets from requests that shouldn't have done anything.

i think i'll just do it again.

[steveo]

i found the files i had leftover, but no useful queries from E4. i'll do another run across E4 tonight see if anything comes out.

[steveo]

I tried a fairly large set of requests to e4 and couldn't get it to spit anything out at all; ill have to keep working on it;

Robert, the aldl comms would use the 68hc11 standard serial line register right? I haven't tried to look for them yet