Hello, I am working on a project for adding custom controls to my Prius. The first step of this is being able to sniff the body control CAN bus. I have found out the location of the body control module, but I need help in knowing what wires go to the body control bus. I have found a gateway on the main bus at 0x631 that through random fuzzing I found can control the windows, but I need to know what traffic to send to the gateway, which means I need a tap into the body control bus. If anyone has any info on this, please let me know! Thanks.
I'm pretty sure that's Toyota proprietary information you be hunting a site . That would be reverse engineering these systems . I'm sure they few n far between n
There are controls you can do through the obd2 access to the can bus and you could probably sniff those. Many bidirectional scanners do control, read and write things in that manner. Some specialized obd2 tools like Dr Prius have decoded battery fan speed controls. In that case it requires continuous writes to override the hybrid system's speed control. We have heard of one guy who believes he has decoded the battery ecu traffic in an effort to allow the first safe nimh to lithium battery replacement battery controller. That is not yet a thing but may be on the horizon. No one to my knowledge has cracked Toyota ecu coding for "tuning" or any other reason. Toyota keeps their code and most of the logic well locked down. Same goes for their network traffic.
