Reading from HFM when buttons are pressed

[monalos]

Hello, I am trying to do a job by reading the CAN bus of my Clio IV car. I read from the can bus that the buttons of my key remote have been pressed. I cannot read on the can bus that these buttons are pressed when the car starts. Most cars deactivate the control buttons when they start, locking and unlocking do not work. When I control the HFM ecu from ddt4all, there is a BUTTON menu and I can see that the buttons are pressed there. When I check it while the car is running, I can still see that the buttons are pressed in the HFM ECU. HFM tells the can bus that the buttons are pressed before the car starts, but when the car starts, it keeps it only to itself. What I want to ask now is how can I get the part where those buttons are pressed from ddt4all using the C programming language. If I can read the buttons pressed from there, I want to do something with the software I wrote.

[matzel82]

HFM is the keyless entry and mobilphone charger/ ecu

[shrlnm]

It writes logs unconditionally. Just look at ./logs/elm_*

[monalos]

@shrlnm

Car obd2 connected, As you said, I sent the codes to 799, but no information came from 7B9? When I sent the 799a codes, I saw other can IDs, but I did not see button presses in any of them. I connected to ddt4all and immediately opened the rke menu and pressed the buttons and saw that the buttons were pressed as true, as in the previous images I sent you. I quickly pressed the buttons 10-15 times and added the logs. Can you comment the logs?

There are 4 buttons on my remote control, I pressed all 4 buttons one by one.

logshfm.zip

[monalos]

@shrlnm

Ddt4all logs ı found , I think I found it. When I send 799 3 02 21 31 and I press a button, the response comes like this: >[20:07:18.043]022131 <[0.072]022131
105C6131—40—0202E2

If I press another key

[20:07:18.043]022131 <[0.072]022131
105C6131—80—0202E2

3. If I press the button

[20:07:18.043]022131 <[0.072]022131
105C6131—10—0202E2

4. If I press the button

[20:07:18.043]022131 <[0.072]022131
105C6131—20—0202E2

Such an answer comes.
The 10-20-40-80 data in the middle of the incoming data comes when I press one of the 4 keys.
Separate data comes for each key button. I will connect it to the car and try again. I separated the changed data with ----- so that you can see.

I connected to the car via can bus via obd2, I sent the command, but the 7B9 ID does not appear. I have a spare HFM, when I try it on the table at home, it shows 7B9, but it doesn't show up in the car. Should I connect it directly to the can bus cables of the HFM in the car, rather than via OBD2? In your opinion, is it possible?

[shrlnm]

@monalos I do not know how CANhacker works. I prefer to use my own tool bus_monitor included to pyren3. I suppose that the canhacker may just miss 7XX frames as so they have lowest priority on the bus and under real load on a real car it may skip them. Try to use filters.

Also I suggest to read about the CAN protocol, how commands are transmitted thru the CAN bus. You may start with my article https://www.drive2.ru/b/472129194529128744/

[monalos]

I changed the filter to 7B9 and then no information came. "can hacker" had not been able to catch another ID before. I will try with another device.

[matzel82]

You want to make your own SW….okay…im out