NOTE Some items on this page are likely GM specific as that is what I am
working on, also I have only been playing with this stuff for a couple
weeks so no guarantee of accuracy, but I do try. I also would recomend
if your intent is to try to mak a program for reading these code that
you contact SAE and get the HS-3000 manual, (I havent yet, but I am
mostly trying to figure out the why the security light comes on on
my wifes monte carlo) This is mostly for people who, like me, just
needed a quick primer on this stuff so they could get the body and
network codes that have been promised, but not available on most
basic scanners.
7 6 5 4 3 2 1 0
p2 p1 p0 H K Y z1 z0
priority 000 higest 111 lowest
H - 0 = 3 byte header, 1 = single byte header
k - in frame response 0 = IFR required
y - addressing mode 0 = functional, 1 = physical
z1, z0 dependant, see bitwise replacements below
functional - operation code or content
physical - address location of source destination
header - xx yy zz
xx = priority, addressing style etc
yy = target
zz = source
intel.com/design/intarch/papers/j1850_wp.pdf
functional
3210
8 1000 function
9 1001 broadcast
a 1010 query
b 1011 read
physical
c 1100 node to node
d 1101 reserved
e 1110 reserved
f 1111 reserved
bits 7 6 5 - priority
bit 4 header style 0 =3 1=1
bit 3 0 required-ford 1=not allowed gm
0110 1100 priority 3, 3 byte header, node to node
6c 10 f1 19 xx ff 00
xx = bitwise added hex number
80 - mil light set
40 - pending
20 - old
10 - history
8 - manufacturer
4 - manufacturer
2 - current
1 - immature
for instance 80 + 40 + 2 = real dtc's 80 + 40 + 10 + 2 = history and real
read back 6c 10 f1 xx 59 yy zz qq where
xx = node id of responding device
yy zz = dtc code (see elm electronics paper for your chip, 322 page 10 for me)
qq = misc checksum
clear MIL
6c fe f1 14
(note on elm based interface you can use AT SH 6c fe f1 to set header and then
use only the codes after the header for sending)
(if you find that you think you are missing info you could set AT ST ff to set
delay time higher)
on gm vpw cars
10 = ecm (main engine brain, under air filter on 03 monte carlo)
28 = abs
40 = bcm (body control module (on mine, under dash above parking brake)
58 = airbag module (for me, under passenger seat)
60 = IPC (instument panel cluster)
62 = hud
80 = radio
c0 = immobilizer
a mabie (I havent tried it yet) to clear the change oil light
6c 10 f1 11 00
to retrieve the VIN
6c 10 f1 3c 01
6c 10 f1 3c 02
6c 10 f1 3c 03
to retrive the PCM #
6c 10 f1 3c 04
some good sites
fast fiero's of dallas (absolutly excelent info) http://www.fastfieros.com/tech/
http://www.canobd2.com/support/DTC_lookup.asp
http://obddiagnostics.com/obdinfo/msg_struct.html
http://service.gm.com/gmspo/mode6/index.html
http://en.wikipedia.org/wiki/OBD-II_PIDs