Does that mean that one value is sent more than once in a single data packet? That would explain DTC error. All instances of that repeated byte need to be spoofed.

One checksum can have more than one value of the sum of the previous bytes. That rules out HVC checksum algorythm. I am convinced that figuring out byte meaning ie. voltage reistance and temperature won't help with CRC cracking.
Artificial intelligence told me this
ChatGPT powiedział:
Zakończono ...

I had to go with Leonardo because due dont support 5v TTL. Uno don't support 8o1 serial encoding. What exact transceivers are you using? Mine were somehow faulty and I had to go with 5x more expensive and galvanically isolated ones.

Did you try last 2 bytes as a checksum? Can you physically tamper ...

Weird. Cant edit my previous post. Probably because I deleted most of it as it became useless.
Anyway. Look at attached uart comparison file. Uart data is not coming out properly through Arduino. Transceiver-arduino works flawlessly. But arduino output on TX pin is ommiting some bytes. Now I have to ...

I made it work. But there are still problems. Something about parameters of this signal upsets the car. UART data is proper good. 2 attached pics are a/gnd and b/gnd. Attached .sr is AB output (one acts as GND) from trensceiver. Bridging AB with resistor made signal analyser dead silent/no data at ...

Serial.print("RX: 0x");
if (b < 0x10) Serial.print('0');
Serial.print(b, HEX);
Serial.print(" (");
if (b >= 32 && b <= 126) Serial.write(b); // ASCII drukowalne
else Serial.print('.');
Serial.println(')');

I bet this means only ascii bytes are being forwarded and ChatGPT is playing dumb ...

God damn it all to hell. Another obstacle. Output signal is shorter in time than input signal. Using 120ohmresistor doesn't change nothing. Below is arduino code for Leonardo with two rs485/serial dongles. 45us down to 16us bit time. Although output data seems to be totally wrong. Frame errors and ...

Correct, Can look at coding it back in. You going to build a setup and validate it all works?


I was thinking about buying whole crashed car. Saves 100% time on mechanical work. Plus "Bench testing" battery is already included. Once everything runs on zombie, it can be transplanted to any other ...

https://openinverter.org/wiki/Zombieverter_Parameters_and_Spot_Values
It says here that front inverter support is depreciated. I guess this means it's not working. So how is it? I find it hard to believe since wiki says its a matter of a few CAN messages.

Which parts needs support clarification ...

I have a different question about stock car. Is inverter temperature supposed to spike up and down a second after going full throttle on/off? The way how fast it changes spooks me.

It's not the 3500 torque request that is the problem, this is the max value used in the GS450H, GS300H and I assume the Prius. The power is limited by values in the htm serial data. As far as I can tell the location for the discharge power is at bytes [78] and [79] which are currently set for 21kW ...

So what's the current state of prius gen3 inverter implementation into zombieverter?
Apart from the wiki page stating it's supported and a few CAN commands, i cannot find any info on how well do Zombie work with prius.

Mine has literal phillips screws made out of aluminium clay. Obviously impossible to unscrew to change the bearings. Sorry, but i forgot to take a photo of it. I thought there was supposed to be torx screws. Is anyone else on the same boat as me and have figured out how to unscrew them? Metal is so ...

So is there a dial motor inverter board available or not?
Asking for future reference rather than actual need, given the high price of yaris cars.

Simply by using a BMS with build in balancing capabilities.

Come on guys! I have called a dozen of electronic repair shops and made a few ads on facebook groups but nobody wants to have a look at the car and figure out why RS485/TTL converter isn't working.

I think that this forum is more about making vehicles spin the wheels and charge. Much less about making it look fancy and having infotainment. But nonetheless good luck out there! Perhaps MitM device could spoof the correct fw.

I was thinking about redacting my previous posts to make is as informative as possible but looking at this sort of a diary gives me perspective on the development and progress of my knowledge and understanding of the topic. (And oh boy how wrong I was about about MANY things :D)

Now where i am ...

But how did you do the comparing? Comparing data messages in Excel sheets or is there any automation to it to make it go faster? For now I have to record UART messages with logic analyzer and take a screenshot of dr prius app at the same time. Then copy that data to an Excel column. Repeat ad ...

My currentproject is decoding the HTM data. There is some useful info in there (temperatures, etc). I've written some code which lets me filter the raw data to help see what is going on.

I'm part way through decoding it, here's what I have right now:

//variables
//1 inverter status (0 not ...

Finally some progress. Here are screenshots from osciloscope and new dump from pulseview. It seems I was having loads of signal glitches before. Crappy connections. Although used an option for 1us glitch filter this time. Picture 5 and 6 shows red and green wires. Capture files taken separately ...

Yes. It must be something different than CAN on GS. I edit my findings on the 1st page. Ha! I wish they kept CAN there. Would make all of this hella easier.

Now it came to me that if you already have the battery on the bench, is it possible for you to open up its brain and trace from which chip the signal lines are coming from?

In all honesty it looks like madness. How are you going to get an alarming notification when one of your cells goes under/overvolted? Cant wait to see data log from dr.prius and hybrid assistant app.
Meanwhile here's another log by different kind of a crappy dongle captured by PulseView. 2 sessions ...

I'm suspecting that data speed is faster than 24mhz, given that bit time is 62/42 for 16/24ms/s sampling speed. Also the start pattern makes me think there could be glitches because it's the only place with both channels sending (almost) the same signal at the same time.