Jump to content
SAU Community

Recommended Posts

Wow, which software is that? Sounds like it must be CONSULT2 compatible to hook into the ancillary ECUs - unless its just OBD2?

Nissan Data Scan will enter the airbag in to diagnostic mode and read/clear error codes, at launch you can select between AT/SHICAS/AC/SRS etc then scan the bus for the device and connect, on my 33 I can bring up main and air bag. SHICAS will connect but the sensors between hicas and shicas must be different as I can't get readings.

conZult lists plain old HICAS support but I've only got the trial version and it isn't enabled :)

Also thres one for mac, ConSultan that will let you download fuel maps from your ECU and graphs them out, looks pretty fancy except my usb>serial wont work in osx!.

  • Replies 42
  • Created
  • Last Reply

Top Posters In This Topic

Top Posters In This Topic

Nissan Data Scan will enter the airbag in to diagnostic mode and read/clear error codes, at launch you can select between AT/SHICAS/AC/SRS etc then scan the bus for the device and connect, on my 33 I can bring up main and air bag. SHICAS will connect but the sensors between hicas and shicas must be different as I can't get readings.

conZult lists plain old HICAS support but I've only got the trial version and it isn't enabled :)

DataScan doesnt connect to my SHICAS in the 32 GTR. Apparently the registers for initialization are changed. I was able to manually send commands to the ecu via a hex terminal, aka EF FF F0 and then gotten the OK from it....

Would love to try Conzult Z32 out - the author has confirmed it does work on R32 GTR Hicas but I'm not game to pay $500 just on a whim

-D

I've got a copy of test software (from the developer) of just the HICAS part of the Conzult software so I could test it on my R34 GTT, but it wouldn't work to my dismay... (wouldn't even initialise the SHICAS ECU)

I've got a copy of test software (from the developer) of just the HICAS part of the Conzult software so I could test it on my R34 GTT, but it wouldn't work to my dismay... (wouldn't even initialise the SHICAS ECU)

Any chance you can chuck that HICAS part to me? Would like to try it on the r32, esp since he said it'd work

-D

And I'd like to try it on a 33 plz ^-^

So no one has ever been able to make the HICAS speak? Wonder if chucking some commands to it over a terminal might get something from it instead of relying on other peoples software, need to find and initialize it first tho....

I've written some custom code to try and talk to it, but I don't know what codes I should be sending. The S-HICAS codes that I've found on-line don't seem to work, and because it seems to be on the CONSULT2 vs CONSULT1 protocol, it almost 'feels' (from my testing) that you need to get the timing between commands a little more precise (CONSULT1 stuff on the EF ECU seem a lot more 'loose' in its acceptance of commands).

I'd love to get in touch with people messing about with trying to talk to the ECUs via CONSULT (I'm a sysadmin, netadmin and programmer), but trying to find people is a complete pain - and the people who have put in the effort don't seem to want to share their knowledge about (understandable really - i've spent hours and hours on playing with stuff already - it can be arduous work).

systems and network admin here too :)

Was searching around today and found a couple docs of interest:

http://vacated.net/carstuff/Generic_Nissan...table_Ver_2.pdf

http://www.plmsdevelopments.com/images_ms/...nds_Issue_6.pdf

Could get fairly annoying needing the car on to test all this out..

Perhaps we should take this to a global forum for more input? I believe the creator of Nissan Data Scan hangs around the ACT forums. Problem being a lot of these guys sell their own software and don't want to give away the secrets!

I've written some custom code to try and talk to it, but I don't know what codes I should be sending. The S-HICAS codes that I've found on-line don't seem to work, and because it seems to be on the CONSULT2 vs CONSULT1 protocol, it almost 'feels' (from my testing) that you need to get the timing between commands a little more precise (CONSULT1 stuff on the EF ECU seem a lot more 'loose' in its acceptance of commands).

I'd love to get in touch with people messing about with trying to talk to the ECUs via CONSULT (I'm a sysadmin, netadmin and programmer), but trying to find people is a complete pain - and the people who have put in the effort don't seem to want to share their knowledge about (understandable really - i've spent hours and hours on playing with stuff already - it can be arduous work).

Linux Sysadmin/engineer here, but not a coder

I used a hexterm to send the hex init codes, the only problem is the registers for my particular hicas don't match the ones published on the PLMS site - and thats the hicas codes the dude who made datascan used...

hex codes enabled me to manually initialize the hicas control unit and then initiate data streaming, but I couldn't decipher any of it.

for lukes issue, I used ECUTalk. For some reason, Nissan Datascan wouldnt work and my main laptop with obd scantech and datascan is currently out of action (pending reinstall of os)

His ecu reported no error codes, and I connected to the main ECU (hex EF) so either the airbag light isnt controlled by a control unit, or its been ofloaded into the abs or hicas computers or some other function - no airbag in the r32 gtr so I'm not quite familiar about where this would be

-D

Airbag errors wont show up in the main ECU I've found, I'll give datascan a go as it's successfully been able to read bag codes on my 33 hopefully the 34 isn't too different.

Did you happen to give any of the reset procedures a go? There's a few guides floating around the forums where you turn your key and push the door switch several times which works for some people.

The datascan software states SHICAS which I'm guessing might have a different instruction set or initialisation string to HICAS, would be great to get some real time info displayed.

Airbag errors wont show up in the main ECU I've found, I'll give datascan a go as it's successfully been able to read bag codes on my 33 hopefully the 34 isn't too different.

Did you happen to give any of the reset procedures a go? There's a few guides floating around the forums where you turn your key and push the door switch several times which works for some people.

The datascan software states SHICAS which I'm guessing might have a different instruction set or initialisation string to HICAS, would be great to get some real time info displayed.

yeah but the shit thing is, nissan changed the hicas from hydraulic to electric from the r32 to r33, but they marketed both of them as being 'super hicas'.

'hicas' itself is the first edition found on JDM r31's

-D

Heres my air bag init from NDS, not sure of the read or clear code commands as they're behind the gui.

Send FF FF DC (100ms pause between commands)

Receives 00 00 23

^ Works on my 33

And the SHICAS

SENDING: FF

DELAYING: 100 mS

SENDING: FF

DELAYING: 100 mS

SENDING: E4

DELAYING: 100 mS

RECEIVED: 00 00 1B

INITIALIZE OK ...

After that I believe it starts probing for sensors and fails:

SENDING: 5A

DELAYING: 25 mS

RECEIVED: A5

SENDING: 00

DELAYING: 25 mS

RECEIVED: FE

REGISTER 00 ... INVALID

SENDING: 30 (STOP)

RECEIVED: CF

This goes through 00 to 06.

So assuming E4 is the actual HICAS system we just need to find the correct sensor addresses?

Edit:: looking at the commands pdf linked earlier, "9F stream all sensors" might give an interesting output, ill give it a shot when its not so dark and cold >.>

And when looking for 01 on the hicas ecu it returns valid, this is only the speed sensor though.

Edited by nicr4wks
Heres my air bag init from NDS, not sure of the read or clear code commands as they're behind the gui.

So assuming E4 is the actual HICAS system we just need to find the correct sensor addresses?

Edit:: looking at the commands pdf linked earlier, "9F stream all sensors" might give an interesting output, ill give it a shot when its not so dark and cold >.>

And when looking for 01 on the hicas ecu it returns valid, this is only the speed sensor though.

OK since we're documenting this, I might have to dl a hexterm and give some stuff a go

Ben - R32 GTR 1989

Nick - R33 GTS-T S2 (year?)

Jenna- R34 GT-T (year?)

No doubt we'll get different values in some aspects, but its worth being thorough...

Once I got my laptop sorted I'll chuck OBD scantech on and fudge around with it

Cant recall what hexterm I used, it was suggested to me by the cat that makes the pda nisscan software

Anyone else got a consult cable and feel like doing some snooping?

-D

OK since we're documenting this, I might have to dl a hexterm and give some stuff a go

Ben - R32 GTR 1989

Nick - R33 GTS-T S2 (year?)

Jenna- R34 GT-T (year?)

Mine is a 1998 R34 GT-T sedan in manual.

No doubt we'll get different values in some aspects, but its worth being thorough...

Once I got my laptop sorted I'll chuck OBD scantech on and fudge around with it

Cant recall what hexterm I used, it was suggested to me by the cat that makes the pda nisscan software

I did a tonne of testing recently with my car when I was playing around with writing some code to put on my CarPC, referencing various PLMS documents and trying to figure various timings out. I had no real issues talking to the primary ECU (EF) but subsidiary ECUs did seem to require more accurate timing (I could get results from a simple hexterm with EF, but with others it almost felt like it wanted it more accurate/timed out rather than a steady stream as from a program...). I did get the other ECUs to talk (sometimes I had more than one responding at once, that could get confusing - I guess it must be a central bus type arrangement for all of the ECUs via the CONSULT port). Anyways I gave up after a few hours of messing about because I'd pretty much killed my battery (I was using a notebook, and RDP'd into it via wireless) and I just didn't have the right hex codes to get anything meaningful (and nothing seemed to line up with the PLMS S-HICAS information).

I'd really like to get more into playing with this stuff, but I honestly don't know where to turn or who to talk to (or if they'd even talk to me!)

Nick - R33 GTS-T S2 (year?)

Cant recall what hexterm I used, it was suggested to me by the cat that makes the pda nisscan software

1996

I had a go with a program called hexterm but it wasn't very fun to use.

does anyone have a wiring diagram for the hicas unit consult lines? (or know where in the r32 engine manual it is?

Wouldn't hold my breath on that but it would be nice ;)

Luke managed to clear his error today via one of the processes on the forums, plugged in anyway and managed to connect to his airbag and read all ok.

Found another ECU on my bus tonight, init FF FF E7 not sure what it is, could be a/c :S

Does anyone have a decent term for manually sending commands? I've got 'Free Serial Port Monitor' which is useful for logging what other programs are talking over serial, still stumped getting anything out of HICAS.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



  • Similar Content

  • Latest Posts

    • perhaps i should have mentioned, I plugged the unit in before i handed over to the electronics repair shop to see what damaged had been caused and the unit worked (ac controls, rear demister etc) bar the lights behind the lcd. i would assume that the diode was only to control lighting and didnt harm anything else i got the unit back from the electronics repair shop and all is well (to a point). The lights are back on and ac controls are working. im still paranoid as i beleive the repairer just put in any zener diode he could find and admitted asking chatgpt if its compatible   i do however have another issue... sometimes when i turn the ignition on, the climate control unit now goes through a diagnostics procedure which normally occurs when you disconnect and reconnect but this may be due to the below   to top everything off, and feel free to shoot me as im just about to do it myself anyway, while i was checking the newly repaired board by plugging in the climate control unit bare without the housing, i believe i may have shorted it on the headunit surround. Climate control unit still works but now the keyless entry doesnt work along with the dome light not turning on when you open the door. to add to this tricky situation, when you start the car and remove the key ( i have a turbo timer so car remains on) the keyless entry works. the dome light also works when you switch to the on position. fuses were checked and all ok ive deduced that the short somehow has messed with the smart entry control module as that is what controls the keyless entry and dome light on door opening   you guys wouldnt happen to have any experience with that topic lmao... im only laughing as its all i can do right now my self diagnosed adhd always gets me in a situation as i have no patience and want to get everything done in shortest amount of time as possible often ignoring crucial steps such as disconnecting battery when stuffing around with electronics or even placing a simple rag over the metallic headunit surround when placing a live pcb board on top of it   FML
    • Bit of a pity we don't have good images of the back/front of the PCB ~ that said, I found a YT vid of a teardown to replace dicky clock switches, and got enough of a glimpse to realize this PCB is the front-end to a connected to what I'll call PCBA, and as such this is all digital on this PCB..ergo, battery voltage probably doesn't make an appearance here ; that is, I'd expect them to do something on PCBA wrt power conditioning for the adjustment/display/switch PCB.... ....given what's transpired..ie; some permutation of 12vdc on a 5vdc with or without correct polarity...would explain why the zener said "no" and exploded. The transistor Q5 (M33) is likely to be a digital switching transistor...that is, package has builtin bias resistors to ensure it saturates as soon as base threshold voltage is reached (minimal rise/fall time)....and wrt the question 'what else could've fried?' ....well, I know there's an MCU on this board (display, I/O at a guess), and you hope they isolated it from this scenario...I got my crayons out, it looks a bit like this...   ...not a lot to see, or rather, everything you'd like to see disappears down a via to the other side...base drive for the transistor comes from somewhere else, what this transistor is switching is somewhere else...but the zener circuit is exclusive to all this ~ it's providing a set voltage (current limited by the 1K3 resistor R19)...and disappears somewhere else down the via I marked V out ; if the errant voltage 'jumped' the diode in the millisecond before it exploded, whatever that V out via feeds may have seen a spike... ....I'll just imagine that Q5 was switched off at the time, thus no damage should've been done....but whatever that zener feeds has to be checked... HTH
    • I think Fitmit had some, have a look on there (theyre Australian as well)
    • Hah, fair enough! But if you learn with this one you can drive any other OEM manual. No modern luxury features like auto rev-matching or hillstart assist to give you a false sense of confidence. And a heavy car with not that much torque so it stalls easily. 
×
×
  • Create New...