ELM329LP [ELM]
Fully configurable with AT commands;
| 型号： | ELM329LP |
| 厂家： | 
ELM ELECTRONICS |
| 描述： | Fully configurable with AT commands |
| 文件： | 总87页 (文件大小：428K) |
| 中文： | 中文翻译 | 下载： | 下载PDF数据表文档文件 |
ELM329L
CAN Interpreter
Description
Features
The ELM329L is a low voltage version of our
• Works with a 2.0V to 5.5V supply
• Universal serial (RS232) interface
• Fully configurable with AT commands
• Compatible with the popular ELM327
• Low power CMOS design
popular ELM329 integrated circuit. It supports all of
the features of our current ELM329 IC, and only
differs physically in how pin 6 is used.
The following pages discuss the ELM329L in
detail, how to use it and how to configure it, as well
as providing some background information on the
protocols that are supported. There are also
schematic diagrams and tips to help you to interface
to microprocessors, construct a basic scan tool, and
to use the low power mode. Because of the similarity
with the ELM329, much of this data sheet has been
copied from the ELM329 data sheet.
Connection Diagram
PDIP and SOIC
(top view)
MCLR
Vmeasure
Active LED
Control
Memory
Filter Cap
LFmode
VSS
OBD Tx LED
Throughout this document, we will use the term
‘ELM329’ to refer to either the ELM329 or the
ELM329L. If there is something different between
the two, we will be specific as to which it applies to.
OBD Rx LED
RS232 Tx LED
RS232 Rx LED
CAN Rx
CAN Tx
M0
Applications
M1
• Diagnostic trouble code readers
• Automotive scan tools
• Teaching aids
XT1
VDD
XT2
VSS
CAN Monitor
In1
RS232 Rx
RS232 Tx
PwrCtrl / Busy
IgnMon / RTS
In2
PwrCtrl
Block Diagram
7
5
LFmode
Memory
18
17
24
RS232Rx
RS232Tx
CAN Rx
RS232
Interface
Protocol
Interpreter
CAN
Interface
23
CAN Tx
ISO 15765-4
SAE J1939
ISO 11898
22
M0
4.00 MHz
21
M1
9
10
2
Vmeasure
1
MCLR
11
CAN Monitor
IgnMon / RTS
12
In1
I/O
Module
20
6
14
VDD
Filter Cap
VSS
13
In2
Control
Module
4
Control
16
15
PwrCtrl / Busy
PwrCtrl
8
19
VSS
26
3
25
27 28
status LEDs
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
1 of 87
www.elmelectronics.com
ELM329L
Contents
The Basics
Description................................................................................... 1
Features.......................................................................................1
Applications..................................................................................1
Block Diagram..............................................................................1
Connection Diagram.................................................................... 1
Pin Descriptions........................................................................... 4
Unused Pins.................................................................................6
Absolute Maximum Ratings......................................................... 7
Electrical Characteristics..............................................................7
Using the ELM329
Overview...................................................................................... 9
Communicating with the ELM329................................................ 9
AT Commands........................................................................... 11
AT Command Summary.............................................................11
AT Command Descriptions........................................................ 13
Reading the Battery Voltage...................................................... 27
OBD Commands........................................................................28
Talking to the Vehicle.................................................................29
Interpreting Trouble Codes........................................................ 31
Resetting Trouble Codes........................................................... 32
Quick Guide for Reading Trouble Codes................................... 32
Selecting Protocols.................................................................... 33
OBD Message Formats..............................................................34
Setting the Header / ID Bits........................................................36
ISO 15765-4 Message Types.................................................... 38
Multiline Responses...................................................................39
Multiple PID Requests................................................................40
Receive Filtering - the CRA command.......................................41
Using the Mask and Filter.......................................................... 42
Monitoring the Bus..................................................................... 43
Mixed ID (11 and 29 bit) Sending...............................................44
Restoring Order..........................................................................45
Advanced Features
Using Higher RS232 Baud Rates...............................................46
Setting Timeouts - the AT ST and AT AT Commands............... 48
SAE J1939 Messages................................................................49
Using J1939............................................................................... 51
The FMS Standard.....................................................................55
The NMEA 2000 Standard.........................................................55
Periodic (Wakeup) Messages.................................................... 56
Altering Flow Control Messages................................................ 57
Using CAN Extended Addresses............................................... 58
CAN Input Frequency Matching.................................................59
CAN (Single Wire) Transceiver Modes...................................... 60
2 of 87
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
ELM329L
Contents (continued)
Advanced Features
The CAN Monitor (pin 11).......................................................... 61
(continued)
Control Module Operation..........................................................61
Low Power Mode....................................................................... 62
Programmable Parameters........................................................65
Programmable Parameter Summary......................................... 66
Design Discussions
Maximum CAN Data Rates........................................................71
Microprocessor Interfaces..........................................................73
Upgrading Versions....................................................................74
Example Applications.................................................................75
Figure 9 - A CAN to USB Interpreter................................... 76
Figure 10 - Parts List for Figure 9........................................77
Figure 11 - A Low Speed RS232 Interface..........................77
Figure 12 - A High Speed RS232 Interface......................... 78
Figure 13 - An Alternative USB Interface............................ 78
Figure 14 - Connecting to a 3.3V System............................79
Modifications for Low Power Standby Operation....................... 80
Figure 15 - Low Power Mods Highlighted............................81
Misc. Information
Error Messages and Alerts.........................................................82
Version History...........................................................................84
Ordering Information.................................................................. 84
Outline Diagrams....................................................................... 85
Copyright and Disclaimer...........................................................85
Index.......................................................................................... 86
3 of 87
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
ELM329L
Pin Descriptions
MCLR (pin 1)
or disabled with the AT M1 and AT M0 commands.
A momentary (>2µsec) logic low applied to this input
will reset the ELM329. If unused, this pin should be
connected to a logic high (VDD) level.
Filter Cap (pin 6)
The ELM329L requires that a 10µF filter capacitor be
connected between pin 6 and VSS. The capacitor
should be a low ESR (<5W) ceramic or tantalum
type.
Vmeasure (pin 2)
This analog input is used to measure a 0 to VDD volt
signal that is applied to it. The value measured is
scaled by a factor of 5.7 if VDD is >4V, and by a
factor of 11 if VDD is <4V. The scaling is appropriate
for use with 47KW/10KW and 47KW/4.7KW resistor
dividers, respectively. The measured voltage is
displayed using the AT RV command.
The ELM329 uses pin 6 for setting the initial baud
rate after power on. Since this option is not available
with the ELM329L, it defaults to an initial baud rate
of 38400 bps. If you require 9600 bps, you must set
PP 0C to 00.
Care must be taken to prevent the voltage from
going outside of the supply levels of the ELM329, or
damage may occur. If it is not used, this pin should
be tied to either VDD or VSS.
LFmode (pin 7)
This input is used to select the default linefeed mode
to be used after a power-up or system reset. If it is at
a high level, then by default messages sent by the
ELM329 will be terminated with both a carriage
return and a linefeed character. If it is at a low level,
lines will be terminated by a carriage return only.
This behaviour can always be modified by issuing an
AT L1 or AT L0 command.
Active LED (pin 3)
This output pin is normally at a high level, and is
driven to a low level when the ELM329 has
determined that it has found a valid (active) protocol.
The output is suitable for directly driving efficient
LEDs through a current limiting resistor, or for
interfacing to other logic circuits. If unused, this pin
may be left open-circuited.
VSS (pin 8)
Circuit common must be connected to this pin.
Note that the behaviour of this pin when the ELM329
is in the low power mode may be modified by the
logic level at pin 11, or with PP 0F, bit 4. For the
ELM329L, the total current into or from pin 3 must
not exceed 2 mA.
XT1 (pin 9) and XT2 (pin 10)
A 4.000 MHz oscillator crystal is connected between
these two pins. Loading capacitors as required by
the crystal (typically 27pF each) will also need to be
connected from each of these pins to circuit common
(Vss).
Control (pin 4)
When laying out a printed circuit board, you may
wish to consider placing a guard ring around the
oscillator crystal, pins, and capacitors, to provide a
little isolation between them and the other signals
(particularly the pin 11 CAN input).
The level at this output may be directly controlled
through AT commands. After any reset (powerup,
AT Z, etc.), the output reverts to a low level.
Pin 4 may also be used to provide an output signal
that follows the internal CAN monitor output, by
setting bit 0 of PP 0F to 1. For the ELM329L, the
total current into or from pin 4 must not exceed 2
mA.
Note that this device has not been configured for
operation with an external oscillator, and it expects a
crystal to be connected to these pins. Use of an
external clock source is not recommended. Also,
note that this oscillator is turned off when in the low
power or ‘standby’ mode of operation.
Memory (pin 5)
This input controls the default state of the memory
option. If this pin is at a high level during power-up or
reset, the memory function will be enabled by
default. If it is at a low level, then the default will be
to have it disabled. Memory can always be enabled
CAN Monitor (pin 11)
This input serves two functions. If a CAN signal is
detected at this pin, the ELM329 assumes that you
4 of 87
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
ELM329L
Pin Descriptions (continued)
wish it to monitor that signal, and possibly control the
low power operation based on it.
will always restore normal operation, regardless of
the setting of PP 0E bit 2, or whether pin 15 was the
initial cause for the low power mode. This feature
allows a system to control how and when it switches
to low power standby operation, but still have
automatic wakeup by the ignition voltage, or by a
pushbutton.
If no CAN signal is detected, the ELM329 assumes
that you are using this pin to control the behaviour of
the Active LED output when the IC is in the low
power mode (as it did for v1.0 ICs). In this mode, if
pin 11 is at a high level when low power operation
begins, the Active LED output will flash for about
16 msec every 4 seconds. If the input is at a low
level when low power operation begins, the
Active LED output will be off (high) when in low
power mode. If a CAN signal was detected on pin
11, the operation of the Active LED during low power
is determined by PP 0F, bit 4.
If either bit 7 or bit 2 of PP 0E are ‘0’, this pin will
function as an active low ‘Request To Send’ input.
This can be used to interrupt the OBD processing in
order to send a new command, or if connected to
ignition positive, to highlight the fact that the ignition
has been turned off. Normally kept at a high level,
this input is brought low for attention, and should
remain so until the Busy line (pin 16) indicates that
the ELM329 is no longer busy, or until a prompt
character is received (if pin 16 is being used for
power control).
Monitoring for a CAN signal (ie. transitions at this
input pin) is a continuous background process that
can not be disabled.
In1 and In2 (pins 12 and 13)
This input has Schmitt trigger wave shaping. By
default, pin 15 acts as the RTS interrupt input.
These two inputs may be used for the monitoring of
logic level signals. Simple AT commands may be
used to read the level at either pin. No special
amplification is required, as the inputs have Schmitt
trigger wave shaping.
PwrCtrl / Busy (pin 16)
This output pin can serve one of two functions,
depending on how the Power Control options
(PP 0E) are set.
PwrCtrl (pin 14)
If bit 7 of PP 0E is a ‘1’ (the default), this pin will
function as a Power Control output. The normal state
of the pin will be as set by PP 0E bit 6, and the pin
will remain in that state until the ELM329 switches to
the low power mode of operation. This output is
typically used to control enable inputs, but may also
be used for relay circuits, etc. with suitable buffering.
The discussion on page 80 (‘Modifications for Low
Power Standby Operation’) provides more detail on
how to use this output.
This output provides a level that is the inverse of that
of the PwrCtrl output (pin 16). If the low power mode
is disabled (ie if bit 7 of PP 0E is set to ‘0’), this
output still provides the inverse of the level set by
PP 0E b6. To provide a ‘soft start’ feature, pin 14 will
always change state 50 msec before pin 16.
IgnMon / RTS (pin 15)
This input pin can serve one of two functions,
depending on how the Power Control options
(PP 0E) are set.
If bit 7 of PP 0E is a ‘0’, pin 16 will function as a
‘Busy’ output, showing when the ELM329 is actively
processing a command (the output will be at a high
level), or when it is idle, ready to receive commands
(the output will be low).
If both bit 7 and bit 2 of PP 0E are set to ‘1’, this pin
will act as an Ignition Monitor. This will result in a
switch to the low power mode of operation, if the
input goes to a low level, as would happen if the
vehicle’s ignition were turned off. An internal
‘debounce’ timer is used to ensure that the ELM329
does not shut down for noise at the input.
By default, pin 16 provides the PwrCtrl function.
RS232Tx (pin 17)
This is the RS232 data transmit output. The signal
level is compatible with most interface ICs (the
output is high when idle), and there is sufficient
current drive to allow interfacing using only a PNP
transistor, if desired.
When the voltage at pin 15 is again restored to a
high level, and a time of 1 or 5 seconds (as set by
PP 0E bit 1) passes, the ELM329 will return to
normal operation. A low to high transition at pin 15
5 of 87
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
ELM329L
Pin Descriptions (continued)
RS232Rx (pin 18)
CAN Tx (pin 23) and CAN Rx (pin 24)
This is the RS232 receive data input. The signal
level is compatible with most interface ICs (when at
idle, the level should be high), but can be used with
other interfaces as well, since the input has Schmitt
trigger wave shaping.
These are the two CAN interface signals that must
be connected to a CAN transceiver IC (see the
Example Applications section for more information).
If unused, pin 24 must be connected to a logic high
(VDD) level.
VSS (pin 19)
RS232 Rx LED (pin 25), RS232 Tx LED (pin 26),
OBD Rx LED (pin 27) and OBD Tx LED (pin 28)
Circuit common must be connected to this pin.
These four output pins are normally high, and are
driven to low levels when the ELM329 is transmitting
or receiving data. These outputs are suitable for
directly driving most LEDs through current limiting
resistors, or interfacing to other logic circuits. If
unused, these pins may be left open-circuited.
VDD (pin 20)
This pin is the positive supply pin, and should always
be the most positive point in the circuit. Internal
circuitry connected to this pin is used to provide
power on reset of the microprocessor, so an external
reset signal is not required. Refer to the Electrical
Characteristics section for further information.
Note that pin 28 can also be used to turn off all of the
Programmable Parameters, if you can not do so by
using the normal interface - see page 66 for more
details.
M1 (pin 21) and M0 (pin 22)
These two output pins are provided for use with CAN
transceiver ICs, as are typically used for Single Wire
CAN applications. The ELM329 will set both outputs
to a high level (‘Normal’) after startup, but the level at
these pins may be changed at any time with the
AT TM commands, and the level after powerup may
be set with PP20.
Unused Pins
When people only want to implement a portion of what the ELM329L is capable of, they often ask what to do with
the unused pins. The rule is that unused outputs may be left open-circuited with nothing connected to them, but
unused inputs must always be terminated. The ELM329L is a CMOS integrated circuit that can not have any inputs
left floating (or you might damage the IC). Connect unused inputs as follows:
Pin
1
2
*
5
*
7
*
11
*
12
*
13
*
15
H
18
H
24
H
Level
H
The inputs that are shown with an asterisk (*) may be connected to either a High (VDD) or a Low (VSS) level.
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
6 of 87
www.elmelectronics.com
ELM329L
ELM329L Absolute Maximum Ratings
Storage Temperature....................... -65°C to +150°C
Note:
These values are given as a design guideline only.
The ability to operate to these levels is neither
inferred nor recommended, and stresses beyond
those listed here will likely damage the device.
Ambient Temperature with
Power Applied....................................-40°C to +85°C
Voltage on VDD with respect to VSS..... -0.3V to +7.5V
Voltage on any other pin with
respect to VSS........................... -0.3V to (VDD + 0.3V)
Current through pins 3 or 4
(source or sink)...................................................2 mA
Current through all other output pins
(source or sink).................................................25 mA
ELM329L Electrical Characteristics
All values are for operation at 25°C. For more information, refer to note 1 below.
Characteristic
Minimum Typical Maximum Units
Conditions
Supply voltage, VDD
2.0
0.05
1.7
5.5
V
see note 2
VDD rate of rise
V/msec
V
see note 3
Brown-out reset voltage
A/D conversion time
Pin 18 wake pulse duration
IgnMon debounce time
1.8
7
1.9
AT RV to beginning of response
msec
128
50
µsec to wake from Low Power mode
msec
65
AT LP to PwrCtrl output time
1.0
2.0
sec
sec
LP ALERT to PwrCtrl output time
Measured from the end of the
command to the start of the ID
message (ELM329 v2.1)
Reset time
AT Z
AT WS
1000
2
msec
msec
Notes:
1. This integrated circuit is based on Microchip Technology Inc.’s PIC18F25K80 device. For more detailed
device specifications, and possibly clarification of those given, please refer to the Microchip documentation
(available at www.microchip.com).
2. This spec must be met in order to ensure that a correct power on reset occurs. It is quite easily achieved
using most common types of supplies, but may be violated if one uses a slowly varying supply voltage, as
may be obtained through direct connection to solar cells or some charge pump circuits.
3. While the ELM329L is able to operate at lower voltages, the peripheral circuits may not. The MCP2551 and
MCP2561 CAN transceivers for example must have at least 4.0 volts.
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
7 of 87
www.elmelectronics.com
ELM329L
ELM329L Electrical Characteristics (continued)
The following values are for operation at 25°C, with VDD = 3.3V.
Characteristic
Minimum Typical Maximum Units
Conditions
Average current, IDD
normal
5.0
0.03
1.5
1.3
2.3
8
mA
mA
V
low power
Input logic levels
(Schmitt thresholds)
rising
falling
source
sink
2.6
All input pins use Schmitt trigger
waveshaping - see note 4
0.7
V
VO = 3.05V
see note 5
VO = 0.25V
Output current drive
mA
mA
The following values are for operation at 25°C, with VDD = 5.0V.
Characteristic
Minimum Typical Maximum Units
Conditions
5.5
Average current, IDD
normal
mA
mA
V
low power
0.13
2.1
1.8
3.3
11
Input logic levels
(Schmitt thresholds)
rising
falling
source
sink
4.0
All input pins use Schmitt trigger
waveshaping - see note 4
1.0
V
VO = 4.75V
see note 5
VO = 0.25V
Output current drive
mA
mA
Notes (cont’d):
4. The Microchip 18F25K80 documentation states that all of the inputs used by the ELM329L have Schmitt
waveshaping on them. Sample testing however, has shown that pin 11 may respond as a standard ‘CMOS’
type input (ie not Schmitt) with a threshold voltage approximately equal to the average of the Schmitt
thresholds. For this reason, circuit designs should not present slowly changing waveforms at pin 11.
5. This applies to all output pins, except pins 3 and 4. Although pins 3 and 4 may seem capable of similar
currents, Microchip Technology states in their literature that these pins must not source or sink any more
than 2 mA.
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
8 of 87
www.elmelectronics.com
ELM329L
Overview
The following describes how to use the ELM329 to
this product as well.
obtain information from your vehicle.
Using the ELM329 is not as daunting as it first
seems. Many users will never need to issue an ‘AT’
command, adjust timeouts, or change the headers. For
most, all that is required is a PC or smart device with a
terminal program (such as HyperTerminal or ZTerm),
and a little knowledge of OBD commands, which we
will provide in the following sections…
We begin by discussing just how to ‘talk’ to the IC
using a PC, then explain how to change options using
‘AT’ commands, and finally we show how to use the
ELM329 to obtain trouble codes (and reset them). For
the more advanced experimenters, there are also
sections on how to use some of the other features of
Communicating with the ELM329
The ELM329 expects to communicate with a PC
through an RS232 serial connection. Although modern
computers do not usually provide a serial connection
such as this, there are several ways in which a ‘virtual
serial port’ can be created. The most common devices
are USB to RS232 adapters, but there are several
others such as PC cards, ethernet devices, or
Bluetooth to serial adapters.
No matter how you physically connect to the
ELM329, you will need a way to send and receive
data. The simplest method is to use one of the many
‘terminal’ programs that are available (HyperTerminal,
ZTerm, etc.), to allow typing the characters directly
from your keyboard.
To use a terminal program, you will need to adjust
several settings. First, ensure that your software is set
to use the proper ‘COM’ port, and that you have
chosen the proper data rate - this will be either 9600
baud (if pin 6 = 0V at power up), or 38400 baud (if
pin 6 = 5V and PP 0C has not been changed). If you
select the wrong ‘COM’ port, you will not be able to
send or receive any data. If you select the wrong data
rate, the information that you send and receive will be
all garbled, and unreadable by you or the ELM329.
Don’t forget to also set your connection for 8 data bits,
no parity bits, and 1 stop bit, and to set it for the proper
‘line end’ mode. All of the responses from the ELM329
are terminated with a single carriage return character
and, optionally, a linefeed character (depending on
your settings).
computer connections and terminal software settings
are correct (however, at this point no communications
have taken place with the vehicle, so the state of that
connection is still unknown).
The ‘>’ character that is shown on the second line
is the ELM329’s prompt character. It indicates that the
device is in the idle state, ready to receive characters
on the RS232 port. If you did not see the identification
string, you might try resetting the IC again with the AT
Z (reset) command. Simply type the letters A T and Z
(spaces are optional), then press the return key:
>AT Z
That should cause the LEDs to flash again, and
the identification string to be printed. If you see strange
looking characters, then check your baud rate - you
have likely set it incorrectly.
Characters sent from the computer can either be
intended for the ELM329’s internal use, or for
reformatting and passing on to the vehicle. The
ELM329 can quickly determine where the received
characters are to be directed by monitoring the
contents of the message. Commands that are
intended for the ELM329’s internal use will begin with
the characters ‘AT’, while OBD commands for the
vehicle are only allowed to contain the ASCII codes for
hexadecimal digits (0 to 9 and A to F).
Whether it is an ‘AT’ type internal command or a
hex string for the OBD bus, all messages to the
ELM329 must be terminated with a carriage return
character (hex ‘0D’) before it will be acted upon. The
one exception is when an incomplete string is sent and
no carriage return appears. In this case, an internal
timer will automatically abort the incomplete message
after about 20 seconds, and the ELM329 will print a
single question mark (‘?’) to show that the input was
not understood (and was not acted upon).
Properly connected and powered, the ELM329 will
energize the five LED outputs in sequence (as a lamp
test) and will then send the message:
ELM329 v2.1
>
In addition to identifying the version of this IC,
receiving this string is a good way to confirm that the
Messages that are not understood by the ELM329
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
9 of 87
ELM329L
Communicating with the ELM329 (continued)
(syntax errors) will always be signalled by a single
question mark. These include incomplete messages,
incorrect AT commands, or invalid hexadecimal digit
strings, but are not an indication of whether or not the
message was understood by the vehicle. One must
keep in mind that the ELM329 is a protocol interpreter
that makes no attempt to assess the OBD messages
for validity – it only ensures that hexadecimal digits
were received, combined into bytes, then sent out the
OBD port, and it does not know if a message sent to
the vehicle was in error.
While processing OBD commands, the ELM329
will continually monitor for either an active RTS input
(if enabled), or an RS232 character received. Either
one can interrupt the IC, quickly returning control to
the user, while possibly aborting any initiation, etc. that
was in progress. After generating a signal to interrupt
the ELM329, software should always wait for either the
prompt character (‘>’ or hex 3E), or a low level on the
Busy output before beginning to send the next
command.
‘AtZ’ are all exactly the same to the ELM329. All
commands may be entered as you prefer, as no one
method is faster or better. The ELM329 also ignores
space characters and all control characters (tab, etc.),
so they can be inserted anywhere in the input if that
improves readability.
One other feature of the ELM329 is the ability to
repeat the last command (AT or OBD) when only a
single carriage return character is received. If you
have sent a command (for example, 01 0C to obtain
the rpm), you do not have to resend the entire
command in order to obtain an update from the vehicle
- simply send a carriage return character, and the
ELM329 will repeat the command for you. The
memory buffer only remembers the previous command
- there is no provision in the current ELM329 to
provide storage for any more.
Finally, it should be noted that the ELM329 is not
case-sensitive, so the commands ‘ATZ’, ‘atz’, and
Please Note:
An issue with the EUSART used in a previous version of the ELM329 resulted in the
possibilty of NULL characters (byte value 00) being inserted into the RS232 data. This
was very rare, but we recommended that software filter for NULL characters and remove
them if found. Although there are no known issues with the ELM329L’s EUSART, we still
recommend that all NULL characters be fitered from data that is received from the
ELM329L.
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
10 of 87
www.elmelectronics.com
ELM329L
AT Commands
Several parameters within the ELM329 can be
it was successfully completed.
adjusted in order to modify its behaviour. These do not
normally have to be changed before attempting to talk
to the vehicle, but occasionally the user may wish to
customize these settings – for example by turning the
character echo off, adjusting a timeout value, or
changing the header (ID) bytes. In order to do this,
internal ‘AT’ commands must be used.
Those familiar with PC modems will immediately
recognize AT commands as a standard way in which
modems are internally configured. The ELM329 uses
essentially the same method, always watching the
data sent by the PC, looking for messages that begin
with the character ‘A’ followed by the character ‘T’. If
found, the next characters will be interpreted as an
internal configuration or ‘AT’ command, and will be
executed upon receipt of a terminating carriage return
character. If the command is just a setting change, the
ELM329 will reply with the characters ‘OK’, to say that
Some of the commands require that numbers be
provided as arguments, in order to set the internal
values. These will always be hexadecimal numbers
which must generally be provided in pairs. The
hexadecimal conversion chart in the OBD Commands
section (page 28) may be helpful if you wish to
interpret the values. Also, one should be aware that for
the on/off types of commands, the second character is
the number 1 or the number 0, the universal terms for
on and off.
The remainder of this page, and the next page
following provide a summary of all of the commands
that the current version of the ELM329 recognizes. A
more complete description of each command begins
on page 13.
AT Command Summary
ELM329 Options
Programmable Parameters
<CR>
BRD hh
BRT hh
D
repeat the last command
try Baud Rate Divisor hh
set Baud Rate Timeout
set all to Defaults
PP xx OFF
PP FF OFF
PP xx ON
PP FF ON
disable Prog Parameter xx
all Prog Parameters disabled
enable Prog Parameter xx
all Prog Parameters enabled
E0, E1
I
Echo off, or on*
PP xx SV yy for PP xx, Set the Value to yy
print the version ID
PPS
print a PP Summary
L0, L1
LP
Linefeeds off, or on
Voltage Readings
CV dddd
CV 0000
go to low power mode
Memory off, or on
Calibrate the Voltage to dd.dd volts
restore CV value to factory setting
Read the input Voltage
M0, M1
RD
Read the stored Data
Save Data byte hh
RV
SD hh
WS
Warm Start (quick software reset)
reset all
Other
C0, C1
IGN
Z
Control Output off*, or on
read the IgnMon input level
read INput 1 level
@1
display the device description
display the device identifier
@2
IN1
@3 cccccccccccc store the @2 identifier
IN2
read INput 2 level
Note: Settings shown with an asterisk (*)
are the default values
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
11 of 87
www.elmelectronics.com
ELM329L
AT Command Summary (continued)
General OBD Commands
CAN Specific Commands (protocols 6 to F)
AT0, 1, 2
BD
Adaptive Timing off, auto1*, auto2
. [1 - 8 bytes] send bytes with the 11 bit ID
: [1 - 8 bytes] send bytes with the 29 bit ID
perform a Buffer Dump
Bypass the Initialization sequence
Describe the current Protocol
Describe the Protocol by Number
Headers off*, or on
BI
CA
is there CAN Activity at pin 11?
turn off CAN Extended Addressing
use CAN Extended Address hh
Automatic Formatting off, or on*
set the ID Filter to hhh
DP
CEA
DPN
CEA hh
CAF0, CAF1
CF hhh
H0, H1
MA
Monitor All
PC
Protocol Close
CF hhhhhhhh set the ID Filter to hhhhhhhh
R0, R1
S0, S1
SH xyz
SH xxyyzz
Responses off, or on*
CFC0, CFC1
CM hhh
Flow Controls off, or on*
set the ID Mask to hhh
printing of Spaces off, or on*
Set Header (11 bit ID) to xyz
Set Header (29 bit ID) to xxyyzz
CM hhhhhhhh set the ID Mask to hhhhhhhh
CP hh
CRA
set CAN Priority to hh (29 bit)
reset the Receive Address filters
set CAN Receive Address to hhh
SH wwxxyyzz Set Header (29 bit ID) to wwxxyyzz
SP h
Set Protocol to h and save it
Set Protocol to Auto, h and save it
Set Timeout to hh x 4 msec
set Tester Address to hh
Try Protocol h
CRA hhh
SP Ah
ST hh
TA hh
TP h
CRA hhhhhhhh set the Rx Address to hhhhhhhh
CS show the CAN Status counts
CSM0, CSM1 Silent Monitoring off, or on*
D0, D1 display of the DLC off*, or on
FC SD [1 - 8 bytes] FC, Set Data to [...]
TP Ah
Try Protocol h with Auto search
FC SM h
Flow Control, Set the Mode to h
FC, Set the Header to hhh
J1939 CAN Specific Commands (protocols A to F)
FC SH hhh
DM1
JE
monitor for DM1 messages
use J1939 Elm data format*
FC SH hhhhhhhh “ “ hhhhhhhh
PB xx yy
TM0, 1, 2, 3
RTR
Protocol B options and baud rate
JHF0, JHF1 Header Formatting off, or on*
set Transceiver Mode to 0,1,2, or 3*
send an RTR message
JS
use J1939 SAE data format
set Timer Multiplier to 1*
set Timer Multiplier to 5
Monitor for PGN 0hhhh
JTM1
V0, V1
use of Variable DLC off*, or on
JTM5
Periodic Message Commands
MP hhhh
MP hhhh n
“
“ and get n messages
SW hh
SW 00
Set Wakeup interval to hhx20 msec
turn off Wakeup messages
MP hhhhhh Monitor for PGN hhhhhh
MP hhhhhh n “ “ and get n messages
WD [1 - 8 bytes] set the Wakeup Data
WH hhh
set the Wakeup Header (11 bit)
WH hhhhhhhh set the Wakeup Header (29 bit)
WM [1 - 8 bytes] set the Wakeup Message
WM0, 1, 2
set the Wakeup Mode to 0*, 1 or 2
Note: Settings shown with an asterisk (*)
are the default values
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
12 of 87
www.elmelectronics.com
ELM329L
AT Command Descriptions
The following describes each AT Command that the
current version of the ELM329 supports, in a little more
detail. Many of these commands are also described
further in other sections:
<CR>
[ repeat the last command ]
will cause the ELM329 to send those data bytes along
with the currently defined 29 bit ID. The data will be
sent exactly as provided - no formatting bytes or filler
bytes will be added, and the number of data bytes sent
will be the same as what you provide (so if you need to
send 8 bytes as for ISO 15765, then you must provide
all 8 of them). The default value used for the 29 bit ID
is 18 DB 33 F1, but this may be changed with the
AT SH xxyyzz or AT SH wwxxyyzz commands. See
the ‘Mixed ID (11 and 29 bit) Sending’ section for more
information.
A protocol must be active before you can use this
command, as the ELM329 needs to know the current
baud rate, etc., but it does not have to be an 11 bit
one. That is, you may use this ‘colon’ command with a
29 bit ID protocol, for example, if you needed to send
unformatted data along with ISO 15765 formatted data
(but the current firmware only allows you to define one
29 bit ID/header).
Sending a single carriage return character causes
the ELM329 to repeat the last command that it
performed. This is typically used when you wish to
obtain updates to a value at the fastest possible rate -
for example, if you send 01 0C to obtain the engine
rpm, you need only send a carriage return character
each time you wish to receive an update.
Do not use ‘AT’ before this command.
. [1 - 8 bytes]
[ send bytes with the 11 bit ID ]
If your currently active protocol uses a 29 bit ID,
there may be times when you would like to send a
single message that has an 11 bit ID. This command is
used for that.
A single period (‘.’) followed by 1 to 8 data bytes
will cause the ELM329 to send those data bytes along
with the currently defined 11 bit ID. The data will be
sent exactly as provided - no formatting bytes or filler
bytes will be added, and the number of data bytes sent
will be the same as what you provide (so if you need to
send 8 bytes as for ISO 15765, then you must provide
all 8 of them). The default value used for the 11 bit ID
is 7DF, but this may be changed with the AT SH xyz
command. See the ‘Mixed ID (11 and 29 bit) Sending’
section for more information.
A protocol must be active before you can use this
command, as the ELM329 needs to know the current
baud rate, etc., but it does not have to be a 29 bit one.
That is, you may use this ‘dot’ command with an 11 bit
ID protocol, for example, if you needed to send
unformatted data along with ISO 15765 formatted data
(but the current firmware only allows you to define one
11 bit ID/header).
Do not use ‘AT’ before this command.
AT0, AT1 and AT2
[ Adaptive Timing control ]
After an OBD request has been sent, the ELM329
waits to see if any responses are coming from the
vehicle. The maximum time that it waits is set by the
AT ST hh setting, but this setting is purposely a little
longer than it needs to be, in order to ensure that the
IC will work with a wide variety of vehicles. Although
the setting is adjustable, many people do not have the
equipment or experience that it would take to
determine an optimal value.
The Adaptive Timing feature automatically sets the
timeout value for you, to a value that is based on the
actual response times that your vehicle is responding
in. As conditions such as bus loading, etc. change, the
algorithm learns from them, and makes appropriate
adjustments. Note that it always uses your AT ST hh
setting as the maximum setting, and will never choose
one which is longer.
Do not use ‘AT’ before this command.
: [1 - 8 bytes]
[ send bytes with the 29 bit ID ]
If your currently active protocol uses an 11 bit ID,
there may be times when you would like to send a
single message that has a 29 bit ID. This command is
used for that.
There are three adaptive timing settings that are
available for use. By default, Adaptive Timing option 1
(AT1) is enabled, and is the recommended setting.
AT0 is used to disable Adaptive timing (so the timeout
A single colon (‘:’) followed by 1 to 8 data bytes
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
13 of 87
ELM329L
AT Command Descriptions (continued)
is always as set by AT ST), while AT2 is a more
aggressive version of AT1 (the effect is more
noticeable for very slow connections – you may not
see much difference with faster OBD systems). The
J1939 protocol does not support Adaptive Timing – it
uses fixed timeouts as set in the standard.
operated at high data rates, the BRD command uses a
sequence of sends and receives to test the interface,
with any failure resulting in a fallback to the previous
baud rate. This allows several baud rates to be tested
and a reliable one chosen for the communications.
The entire process is described in detail in the ‘Using
Higher RS232 Baud Rates’ section, on pages 46 and
47.
BD
[ perform an OBD Buffer Dump ]
If successful, the actual baud rate (in kbps) will be
4000 divided by the divisor (hh).
All messages sent and received by the ELM329
are stored temporarily in a set of twelve memory
storage locations called the OBD Buffer. Occasionally,
it may be useful to see the contents of this buffer,
perhaps to see why a request failed, to see the header
bytes in the last message, or just to learn more of the
structure of OBD messages. You can ask at any time
for the contents of this buffer to be ‘dumped’
(ie printed). When you do, the ELM329 sends a length
byte (representing the length of the current message in
the buffer) followed by the contents of all twelve OBD
buffer locations. For example, here’s one ‘dump’:
BRT hh
[ set Baud Rate Timeout to hh ]
This command allows the timeout used for the
Baud Rate handshake (ie. AT BRD) to be varied. The
time delay is given by hh x 5.0 msec, where hh is a
hexadecimal value. The default value for this setting is
0F, providing a 75 msec timeout. Note that a value of
00 does not result in 0 msec - it provides the
maximum time of 256 x 5.0 msec, or 1.28 seconds.
C0 and C1
[ Control output off* or on ]
>AT BD
These commands are used to set the level at the
Control output (pin 4). The AT C0 command sets it to a
low logic level (0V), while AT C1 sets it to a high level
(5V). After a system reset or wakeup from low power
mode (unless PP 0F bit 0 = ‘1’), the Control output will
be reset to a low level.
0C000007E80341054200000000
The 0C is the length byte - it tells us that the
following 12 bytes are valid. The actual bytes that have
been sent or received appear after the length. Note
that wakeup (CAN periodic) messages do not use the
buffer as an intermediate step, so you are not able to
see them with AT BD.
CA
[is there CAN Activity at pin 11?]
This command is used to determine if there is a
BI
[ Bypass the Initialization sequence ]
CAN signal present at pin 11 (the CAN Monitor pin). If
there is, the response will be the letter ‘Y’ (for yes),
while if there is no signal, the response will be the
letter ‘N’, for no. If there has been no signal detected
since the last reset, the output will be a dash (‘-’).
This command should be used with caution. It
allows the currently selected protocol to be made
active without requiring any sort of initiation or
handshaking to occur. The initiation process is
normally used to validate the protocol, and without it,
results may be difficult to predict. It should not be used
for routine OBD use, and has only been provided to
allow the construction of ECU simulators and training
demonstrators.
CAF0 and CAF1
[ CAN Auto Formatting off or on ]
These commands determine whether the ELM329
assists you with the formatting of the CAN data that is
sent and received. With CAN Automatic Formatting
enabled (CAF1), the IC will automatically generate the
formatting (PCI) bytes for you when sending, and will
remove them when receiving. This means that you can
continue to issue OBD requests (01 00, etc.), without
regard to the extra bytes that some CAN systems
require. Also, with formatting on, any extra (unused)
data bytes that are received in the frame will be
removed, and any messages with invalid PCI bytes will
BRD hh
[ try Baud Rate Divisor hh ]
This command is used to change the RS232 baud
rate divisor to the hex value provided by hh, while
under computer control. It is not intended for casual
experimenting - if you wish to change the baud rate
from a terminal program, you should use PP 0C.
Since some interface circuits are not able to be
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
14 of 87
ELM329L
AT Command Descriptions (continued)
be ignored. (When monitoring, however, messages
with invalid PCI bytes will be shown, with a ‘<DATA
ERROR’ message beside them).
Multi-frame responses may be returned by the
vehicle with ISO 15765 and J1939. To make these
more readable, the Auto Formatting mode will extract
the total data length and print it on one line, then show
each line of data with the segment number followed by
a colon (‘:’), and then the data bytes.
You may also see the characters 'FC:' on a line (if
you are experimenting). This identifies a Flow Control
message that has been sent as part of the multi-line
message signalling. Flow Control messages are
automatically generated by the ELM329 in response to
a ‘First Frame’ reply, as long as the CFC setting is on
(it does not matter if auto formatting is on or not).
Another type of message – the RTR (or ‘Remote
Transmission Request’) – will be automatically hidden
for you when in the CAF1 mode, since they contain no
data. When auto formatting is off (CAF0), you will see
the characters 'RTR' printed when one of these frames
has been received.
by using the first of the eight data bytes as a target or
receiver’s address. This type of formatting does not
comply with any OBD standard, but by adding it, we
allow for some experimentation.
Sending the CEA hh command causes the
ELM329 to insert the hh value as the first data byte of
all CAN messages that you send. It also adds one
more filtering step to received messages, only passing
ones that have the Tester Address in the first data byte
position (in addition to requiring that ID bits match the
patterns set by AT CF and CM, or CRA). The AT CEA
hh command can be sent at any time, and changes
are effective immediately, allowing for changes of the
address ‘on-the-fly’. There is
a
more lengthy
discussion of this extended addressing in the ‘Using
CAN Extended Addresses’ section on page 58.
The CEA mode of operation is off by default, and
once on, can be turned off at any time by sending AT
CEA, with no address. Note that the CEA setting has
no effect when J1939 formatting is on.
CF hhh
[ set the CAN ID Filter to hhh ]
Turning the CAN Automatic Formatting off (CAF0),
will cause the ELM329 to print all of the received data
bytes. No bytes will be hidden from you, and none will
be inserted for you. Similarly, when sending a data
request with formatting off, you must provide all of the
required data bytes exactly as they are to be sent –
the ELM329 will not perform any formatting for you
other than to add some trailing 'padding' bytes to
ensure that eight data bytes are sent, if required. This
allows operation in systems that do not use PCI bytes.
Note that turning the display of headers on (with
AT H1) will override some of the CAF1 formatting of
the received data frames, so that the received bytes
will appear much like in the CAF0 mode (ie. as
received). It is only the printing of the received data
that will be affected when both CAF1 and H1 modes
are enabled, though; when sending data, the PCI byte
will still be created for you and padding bytes will still
be added. Auto Formatting on (CAF1) is the default
setting for the ELM329.
The CAN Filter works in conjunction with the CAN
Mask to determine what information is to be accepted
by the receiver. As each message is received, the
incoming CAN ID bits are compared to the CAN Filter
bits (when the mask bit is a ‘1’). If all of the relevant
bits match, the message will be accepted, and
processed by the ELM329, otherwise it will be
discarded. This version of the CAN Filter command is
used to set filters with 11 bit ID CAN systems. Only the
rightmost 11 bits of the provided nibbles are used, and
the most significant bit is ignored.
CF hh hh hh hh [ set the CAN ID Filter to hhhhhhhh ]
This command allows all four bytes (actually 29
bits) of a CAN Filter to be set at once. The 3 most
significant bits will always be ignored, and may be
given any value. This command may be used to create
11 bit ID filters as well, since they are stored in the
same locations internally (entering AT CF 00 00 0h hh
is exactly the same as entering the shorter AT CF hhh
command).
CEA
[ turn off the CAN Extended Address ]
The CEA command is used to turn off the special
features that are set with the CEA hh command.
CFC0 and CFC1
[ CAN Flow Control off or on ]
The ISO 15765-4 CAN protocol expects a ‘Flow
Control’ message to always be sent in response to a
‘First Frame’ message, and the ELM329 automatically
CEA hh
[ set the CAN Extended Address to hh ]
Some CAN protocols extend the addressing fields
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
15 of 87
ELM329L
AT Command Descriptions (continued)
sends these without any intervention by the user. If
experimenting with a non-OBD system, it may be
desirable to turn this automatic response off, and the
AT CFC0 command has been provided for that
purpose. The default setting is CFC1 - Flow Controls
on.
Note that during monitoring (ie AT MA), there are
never any Flow Controls sent no matter what the CFC
option is set to.
CRA
[reset the CAN Rx Addr]
The AT CRA command is used to restore the CAN
receive filters to their default values. Note that it does
not have any arguments (ie no data).
CRA xyz
[set the CAN Rx Addr to xyz]
Setting the CAN masks and filters can be difficult
at times, so if you only want to receive information
from one address (ie. one CAN ID), then this
command may be very welcome. For example, if you
only want to see information from 7E8, simply send AT
CRA 7E8, and the ELM329 will make the necessary
adjustments to both the mask and the filter for you.
If you wish to allow the reception of a range of
values, you can use the letter X to signify a ‘don’t care’
condition. That is, AT CRA 7EX would allow all IDs
that start with 7E to pass (7E0, 7E1, etc.). For a more
specific range of IDs, you may need to assign a mask
and filter.
CM hhh
[ set the CAN ID Mask to hhh ]
There can be a great many messages being
transmitted in a CAN system at any one time. In order
to limit what the ELM329 views, there needs to be a
system of filtering out the relevant ones from all the
others. This is accomplished by the filter, which works
in conjunction with the mask. A mask is a group of bits
that show the ELM329 which bits in the filter are
relevant, and which ones can be ignored. A ‘must
match’ condition is signalled by setting a mask bit to
'1', while a 'don't care' is signalled by setting a bit to '0'.
This three digit variation of the CM command is used
to provide mask values for 11 bit ID systems (the most
significant bit is always ignored).
CRA wwxxyyzz [set the CAN Rx Addr to wwxxyyzz]
This command is identical to the previous one,
except that it is used to set 29 bit CAN IDs, instead of
11. Sending AT CRA will also reverse the changes
made by this command.
Note that a common storage location is used
internally for the 29 bit and 11 bit masks, so an 11 bit
mask could conceivably be assigned with the next
command (CM hh hh hh hh), should you wish to do the
extra typing.
CS
[ show the CAN Status counts ]
The CAN protocol requires that statistics be kept
regarding the number of transmit and receive errors
detected. If there should be a significant number of
errors (due to a hardware or software problem), the
device will go off-line in order to not affect other data
on the bus. The AT CS command lets you see both
the transmitter (Tx) and the receiver (Rx) error counts,
in hexadecimal. If the transmitter should be off (count
>FF), you will see ‘OFF’ rather than a specific count.
CM hh hh hh hh [ set the CAN ID Mask to hhhhhhhh ]
This command is used to assign mask values for
29 bit ID systems. See the discussion under the
CM hhh command as it is essentially identical, except
for the length. Note that the three most significant bits
that you provide in the first digit will be ignored.
CP hh
[ set CAN Priority bits to hh ]
CSM0 and CSM1 [ CAN Silent Monitoring off or on ]
This command is used to modify the five most
significant bits of a 29 bit CAN ID for sending
messages (the other 24 bits are set with one of the AT
SH commands). Many systems use these bits to
assign a priority value to messages, and to determine
the protocol. Any bits provided in excess of the five
required are ignored, and not stored by the ELM329 (it
only uses the five least significant bits of this byte).
The default value for these priority bits is hex 18,
which can be restored at any time with the AT D
command.
The ELM329 was designed to be completely silent
while monitoring a CAN bus so that it can report
exactly what it sees, without colouring the information
in any way. Occasionally (when bench testing, or when
connecting to a dedicated CAN port), it may be
preferred that the ELM329 does not operate silently (ie
you may want it to generate ACK bits, etc.), and this is
what the CSM command is for. CSM1 turns silent
monitoring on (no ACKs are sent), CSM0 turns it off.
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
16 of 87
ELM329L
AT Command Descriptions (continued)
The default value is CSM1, but it may be changed with
PP 21.
all messages have 8 data bytes, so displaying the
number of data bytes (the DLC) is not normally very
useful. When experimenting with other protocols,
however, it may be useful to be able to see what the
data lengths are. The D0 and D1 commands control
the display of the DLC digit (the headers must also be
on in order to see this digit). When displayed, the
single DLC digit will appear between the ID (header)
bytes and the data bytes. The default setting is
determined by PP 29.
CV dddd
[ Calibrate the Voltage to dd.dd volts ]
The voltage reading that the ELM329 shows for an
AT RV request can be calibrated with this command.
The argument (‘dddd’) must always be provided as 4
digits, with no decimal point (it assumes that the
decimal place is between the second and the third
digits).
To use this feature, simply use an accurate meter
to read the actual input voltage, then use the CV
command to change the internal calibration (scaling)
factor. For example, if the ELM329 shows the voltage
as 12.2V while you measure 11.99 volts, then send
AT CV 1199 and the ELM329 will recalibrate itself for
that voltage (it will actually read 12.0V due to digit
roundoff). Note that internally, there are two calibration
constants - one for VDD <4V, and one for VDD >4V.
See page 27 for some more information on how to
read voltages and perform the calibration.
DM1
[ monitor for DM1s ]
The SAE J1939 Protocol broadcasts trouble codes
periodically, by way of the Diagnostic Mode 1 (DM1)
messages. This command sets the ELM329 to
continually monitor for this type of message for you,
even following multi-segment transport protocols if
required. Note that a combination of masks and filters
could be set to provide a similar output, but they would
not allow multiline messages to be detected. The DM1
command adds the extra logic that is needed for
multiline messages.
This command is only available when a protocol
has been selected for J1939 formatting. It returns an
error if attempted under any other conditions.
CV 0000
[ restore the factory Calibration Value ]
If you are experimenting with the AT CV command
but do not have an accurate voltmeter as a reference,
you may soon get into trouble. If this happens, you can
always send AT CV 0000 to restore the ELM329 to the
original (default) calibration value.
DP
[ Describe the current Protocol ]
The ELM329 automatically detects a vehicle’s
The ELM329’s factory calibration setting assumes
that a 1:5.7 ratio resistor divider is being used (this is
what the 47K and 10K resistors provide in Figure 9).
The ELM329L also assumes this same ratio, if VDD is
above 4V. If VDD is 4V or less, the ELM329L assumes
a 1:11 ratio as would be achieved with a 47K and 4.7K
resistor divider.
OBD protocol, but does not normally report what it is.
The DP command is a convenient means of asking
what protocol the IC is currently set to (even if it has
not yet ‘connected’ to the vehicle).
If a protocol is chosen and the automatic option is
also selected, AT DP will show the word 'AUTO' before
the protocol description. Note that the description
shows the actual protocol names, and the data rates, it
does not provide the numbers used by the protocol
setting commands (see DPN for this).
D
[ set all to Defaults ]
This command is used to set the options to their
default (or factory) settings, as when power is first
applied. The last stored protocol will be retrieved from
memory, and will become the current setting (possibly
closing a protocol that was active). Any settings that
the user had made for custom headers, filters, or
masks will be returned to their default values, and all
timer settings will also be restored to their defaults.
DPN
[ Describe the Protocol by Number ]
This command is similar to the DP command, but
it returns a number which represents the current
protocol. If the automatic search function is also
enabled, the number will be preceded with the letter
‘A’. The number is the same one that is used with the
set protocol and test protocol commands (see page 33
for a list of them).
D0 and D1
[ display of DLC off or on ]
Standard CAN (ISO 15765-4) OBD requires that
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
17 of 87
ELM329L
AT Command Descriptions (continued)
E0 and E1
[ Echo off or on ]
Altering Flow Control Messages section (page 57).
These commands control whether or not the
H0 and H1
[ Headers off or on ]
characters received on the RS232 port are echoed
(retransmitted) back to the host computer. Character
echo can be used to confirm that the characters sent
to the ELM329 were received correctly. The default is
E1 (or echo on).
These commands control whether or not the
header (ID and possibly DLC) bytes of information are
shown in the responses from the vehicle. These are
not normally shown by the ELM329, but may be of
interest (especially if you receive multiple responses
and wish to determine what modules they were from).
Turning the headers on (with AT H1) actually
shows more than just the header bytes – you will see
the complete message as transmitted, including the
PCI bytes, and the CAN data length code (DLC) if it
has been enabled. The current version of this IC does
not display the CAN CRC code.
FC SD [1-8 bytes]
[ Flow Control Set Data to… ]
The data bytes that are sent in a CAN Flow
Control message may be defined with this command.
One to eight data bytes may be specified, with the
remainder of the bytes in the message being
automatically set to the default CAN filler byte, if more
bytes are required by the protocol. Note that no
formatting bytes (PCI, etc.) are added by this
command - the data is used exactly as provided,
except for the filler bytes. AT FC SD is used with Flow
Control modes 1 and 2.
I
[ Identify yourself ]
Issuing this command causes the chip to identify
itself, by printing the startup product ID string (currently
‘ELM329 v2.0’). Software can use this to determine
exactly which integrated circuit it is talking to, without
having to reset the IC.
FC SH xyz
[ Flow Control Set Header to… ]
The header (or more properly ‘CAN ID’) bytes
used for CAN Flow Control messages can be set using
this command. Only the right-most 11 bits of those
provided will be used - the most significant bit is
always ignored. This command only affects Flow
Control mode 1.
IGN
[ read the IgnMon input level ]
This command reads the signal level at pin 15. It
assumes that the logic level is related to the ignition
voltage, so if the input is at a high level, the response
will be ‘ON’, and a low level will report ‘OFF’. This
feature is most useful if you wish to perform the power
control functions using your own software. If you
disable the automatic response to a low input on this
pin (by setting bit 2 of PP 0E to 0), then pin 15 will
function as the RTS input. A low level on the input will
not turn the power off, but it will interrupt any OBD
activity that is in progress. All you need to do is detect
the ‘STOPPED’ message that is sent when the
ELM329 is interrupted, and then check the level at pin
15 using AT IGN. If it is found to be OFF, you can
perform an orderly shutdown yourself.
FC SH wwxxyyzz
[ Flow Control Set Header to… ]
This command is used to set the header (or ‘CAN
ID’) bits for Flow Control responses with 29 bit CAN ID
systems. Since the 8 nibbles define 32 bits, only the
right-most 29 bits of those provided will be used - the
most significant three bits are always ignored. This
command only affects Flow Control mode 1.
FC SM h
[ Flow Control Set Mode to h ]
This command sets how the ELM329 responds to
First Frame messages when automatic Flow Control
responses are enabled. The single digit provided can
either be ‘0’ (the default) for fully automatic responses,
‘1’ for completely user defined responses, or ‘2’ for
user defined data bytes in the response. Note that FC
modes 1 and 2 can only be enabled if you have
defined the needed data and possibly ID bytes. If you
have not, you will get an error message. More
complete details and examples can be found in the
IN1
[ read the level at INput 1 ]
This command causes the ELM329 to read the
logic level at pin 12. If it is at a low level, ‘0’ will be
reported, while a high level results in a ‘1’. The level
shown is subject to the hysteresis effects of the
Schmitt trigger wave shaping of the input circuitry.
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
18 of 87
ELM329L
AT Command Descriptions (continued)
IN2
[ read the level at INput 2 ]
This command causes the ELM329 to read the
is also known as little-endian byte ordering).
The JS type of data formatting is off by default.
logic level at pin 13. If it is at a low level, ‘0’ will be
reported, while a high level results in a ‘1’. The level
shown is subject to the hysteresis effects of the
Schmitt trigger wave shaping of the input circuitry.
JTM1
[ J1939 Timer Multiplier to 1 ]
This command sets the J1939 AT ST time
multiplier to 1, reversing any changes made by JTM5.
JTM1 is the default setting. It has no effect for non-
J1939 protocols.
JE
[ enables the J1939 ELM data format ]
The J1939 standard requires that PGN requests
JTM5
[ J1939 Timer Multiplier to 5 ]
be sent with the byte order reversed from the standard
‘left-to-right’ order, which many of us would expect. For
example, to send a request for the engine temperature
(PGN 00FEEE), the data bytes are actually sent in the
reverse order (ie EE FE 00), and the ELM329 would
normally expect you to provide the data in that order
for passing on to the vehicle.
When using a J1939 protocol, it is occasionally
useful to be able to set the AT ST time to values
longer than one second. The JTM5 command will
multiply the AT ST setting by a factor of 5, in order to
provide longer times for the J1939 protocols (only). By
default, this multiplier is off.
When experimenting, this constant need for byte
reversals can be quite confusing, so we have defined
an ELM format that reverses the bytes for you. When
the J1939 ELM (JE) format is enabled, and you have a
J1939 protocol selected, and you provide three data
bytes to the ELM329, it will reverse the order for you
before sending them to the ECU. To request the
engine temperature PGN, you would send 00 FE EE
(and not EE FE 00). The ‘JE’ type of automatic
formatting is enabled by default.
L0 and L1
[ Linefeeds off or on ]
This option controls the sending of linefeed
characters after each carriage return character. For
AT L1, linefeeds will be generated after every carriage
return character, and for AT L0, they will be off. Users
will generally wish to have this option on if using a
terminal program, but off if using a custom computer
interface (as the extra characters transmitted will only
serve to slow the communications down). The default
setting is determined by the voltage at pin 7 during
power on (or reset). If the level is high, then linefeeds
are on by default; otherwise they will be off.
JHF0 and JHF1 [ J1939 Header Formatting off or on ]
When printing responses, the ELM329 normally
formats the J1939 ID (ie Header) bits in such a way as
to isolate the priority bits and group all the PGN
information, while keeping the source address byte
separate. If you prefer to see the ID information as four
separate bytes (which a lot of the J1939 software
seems to do), then simply turn off the formatting with
JHF0. The CAF0 command has the same effect (and
overrides the JHF setting), but also affects other
formatting. The default setting is JHF1.
LP
[ go to the Low Power mode ]
This command causes the ELM329 to shut off all
but ‘essential services’ in order to reduce the power
consumption to a minimum. The ELM329 will respond
with an ‘OK’ (but no carriage return) and then, one
second later, will change the state of the PwrCtrl
outputs (pins 14 & 16) and will enter the low power
(standby) mode. The IC can be brought back to normal
operation with an RS232 input, CAN activity, or a
rising edge at the IgnMon (pin 15) input, in addition to
the usual methods of resetting the IC (power off then
on, a low on pin 1, or a brownout). See the ‘Low Power
Mode’ section (page 62) for more information.
JS
[ enables the J1939 SAE data format ]
The AT JS command disables the automatic byte
reordering that the JE command performs for you. If
you wish to send data bytes to the J1939 vehicle
without any manipulation of the byte order, then select
JS formatting.
Using the above example for engine temperature
(PGN 00FEEE) with the data format set to JS, you
must send the bytes to the ELM329 as EE FE 00 (this
M0 and M1
[ Memory off or on ]
The ELM329 has internal ‘non-volatile’ memory
that is capable of remembering the last protocol used,
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
19 of 87
ELM329L
AT Command Descriptions (continued)
even after the power is turned off. This can be
convenient if the IC is often used for one particular
protocol, as that will be the first one attempted when
next powered on. To enable this memory function, it is
necessary to either use an AT command to select the
M1 option, or to have chosen ‘memory on’ as the
default power on mode (by connecting pin 5 of the
ELM329 to a high logic level).
When the memory function is enabled, each time
that the ELM329 finds a valid OBD protocol, that
protocol will be memorized (stored) and will become
the new default. If the memory function is not enabled,
issuing the prompt character. If it were simply waiting
for input, it would return immediately. Note that the
character which stops the monitoring will always be
discarded, and will not affect subsequent commands.
All messages that are received by the ELM329 will
be printed as found, even if the CAN auto formatting is
on. Normally, the automatic formatting will clean up
what is displayed, hiding errors, improperly formatted
messages, etc. but when monitoring, you will see all
messages that pass through the receive filter, and the
error messages.
If the filter and/or mask are set (with the CF, CM or
CRA commands) before sending AT MA, then the data
displayed will be restricted to only those messages
that meet the criteria. This is normally desired, but
occasionally brings unexpected results when users are
not aware. If you truly want to see all data, then you
may want to be sure there is no filtering of data (send
AT CRA before the AT MA).
The MA monitoring command operates by closing
the current protocol (an AT PC is executed internally),
then configuring the IC for silent monitoring of the data
(no wakeup messages, or acknowledges are sent by
the ELM329). When the next OBD command is to be
transmitted, the protocol will again be initialized, and
you may see messages stating this. ‘SEARCHING...’
may also be seen, depending on what changes were
made while monitoring.
protocols found during
a
session will not be
memorized, and the ELM329 will always start at power
up using the same (last saved) protocol.
If the ELM329 is to be used in an environment
where the protocol is constantly changing, it would
likely be best to turn the memory function off, and
issue an AT SP 0 command once. The SP 0 command
tells the ELM329 to start in an 'Automatic' protocol
search mode, which is the most useful for an unknown
environment. ICs come from the factory set to this
mode. If, however, you have only one vehicle that you
regularly connect to, storing that vehicle’s protocol as
the default would make the most sense.
The default setting for the memory function is
determined by the voltage level at pin 5 during power
up (or system reset). If it is connected to a high level
(VDD), then the memory function will be on by default.
If pin 5 is connected to a low level, the memory saving
will be off by default.
MP hhhh
[ Monitor for PGN hhhh ]
The AT MA command is quite useful for when you
wish to monitor for a specific byte in the header of an
OBD message. For the SAE J1939 Protocol, however,
it is often desirable to monitor for the multi-byte
Parameter Group Numbers (or PGNs), which can
appear in either the header, or the data bytes. The MP
command is a special J1939 only command that is
used to look for responses to a particular PGN
request.
Note that this MP command lets you set four of the
six PGN digits, but provides no means to set the first
two digits, so they are always assumed to be 00. For
example, the DM2 PGN has an assigned value of
00FECB (see SAE J1939-73). To monitor for DM2
messages, you would issue AT MP FECB, eliminating
the 00, since the MP hhhh command always assumes
that the PGN is preceded by two zeros.
MA
[ Monitor All messages ]
This command places the ELM329 into a bus
monitoring mode, in which it continually monitors for
(and displays) all messages that it sees on the OBD
bus. It is a quiet monitor, not sending Acknowledge
bits or Wakeup (CAN periodic) messages. Monitoring
will continue until it is stopped by activity on the RS232
input, or the RTS pin.
To stop the monitoring, simply send any single
character to the ELM329, then wait for it to respond
with a prompt character (‘>’), or a low level output on
the Busy pin. (Setting the RTS input to a low level will
interrupt the device as well.) Waiting for the prompt is
necessary as the response time varies depending on
what the IC was doing when it was interrupted. If for
instance it is in the middle of printing a line, it will first
complete that line then return to the command state,
This command is only available when a protocol
has been selected for SAE J1939 formatting. It returns
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
20 of 87
ELM329L
AT Command Descriptions (continued)
an error if attempted under any other conditions. Note
also that this version of the ELM329 only displays
responses that match the criteria, not the requests that
are asking for the PGN information.
this means a value of 11000000 (C0 hex) for PP 2C,
while 33.3 is 500/15 so 15 decimal or 0F hex is
needed for PP 2D. Send these values to the ELM329
in one command:
>AT PB C0 0F
then monitor:
>AT MA
MP hhhh n
[ Monitor for PGN, get n messages ]
This is very similar to the previous command, but
adds the ability to set the number of messages that
should be fetched before the ELM329 automatically
stops monitoring and prints a prompt character. The
value ‘n’ may be any single hex digit.
If you want to try another protocol (for example,
500 kbps J1939) then simply close the current protocol
and send another AT PB command:
MP hhhhhh
[ Monitor for PGN hhhhhh ]
>AT PC
OK
This command is very similar to the MP hhhh
command, but it extends the number of bytes provided
by one, so that there is complete control over the PGN
definition (it does not make the assumption that the
Data Page bit is 0, as the MP hhhh command does).
This allows for future expansion, should additional
PGNs be defined with the Data Page bit set. Note that
internally, the filter and mask are set using the values
provided, but only the Data Page bit is relevant in the
mask - the other bits are ignored. If you need more
precise matching of the priority and EDP bits, you
might consider the AT CM and AT CF commands to
set the filter and mask, then use AT MA.
>AT PB 42 01
OK
>AT MA
Values passed in this way do not affect those that
are stored in the 2C and 2D Programmable
Parameters, and are lost if the ELM329 is reset. If you
want to make your settings persist over power cycles,
then you must store them in the Programmable
Parameter memory for one of the five USER protocols
(ie protocols B to F).
MP hhhhhh n
[ Monitor for PGN, get n messages ]
PC
[ Protocol Close ]
This is very similar to the previous command, but it
adds the ability to set the number of messages that
should be fetched before the ELM329 automatically
stops monitoring and prints a prompt character. The
value ‘n’ may be any single hex digit.
There may be occasions where it is desirable to
stop (deactivate) a protocol. Perhaps you are not using
the automatic protocol finding, and wish to manually
activate and deactivate protocols. Perhaps you wish to
stop the sending of idle (wakeup) messages, or have
another reason. The PC command is used in these
cases to force a protocol to close.
PB xx yy
[ set Protocol B parameters ]
This command allows you to change the protocol
B (USER1) options and baud rate without having to
change the associated Programmable Parameters.
This allows for quicker testing, and program control.
To use this feature, simply set xx to the value for
PP 2C (the formatting options), and yy to the value for
PP 2D (the baud rate divisor), and send this
command. The next time that the protocol is initialized
it will use these values.
PP hh OFF
[ turn Prog Parameter hh OFF ]
This command disables Programmable Parameter
number hh. Any value assigned using the PP hh SV
command will no longer be used, and the factory
default setting will once again be in effect. The actual
time when the new value for this parameter becomes
effective is determined by its type. Refer to the
Programmable Parameter Summary section (page 66)
for more information on the types.
For example, assume that you wish to try
monitoring a system that uses 11 bit CAN at
33.3 kbps. If you do not want any special formatting,
Note that ‘PP FF OFF’ is a special command that
disables all of the Programmable Parameters, as if you
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
21 of 87
ELM329L
AT Command Descriptions (continued)
had entered PP OFF for every possible one.
R0 and R1
[ Responses off or on ]
It is possible to alter some of the Programmable
Parameters so that it may become difficult, or even
impossible, to communicate with the ELM329. If this
occurs, there is a hardware means of resetting all of
the Programmable Parameters at once. Connect a
jumper from circuit common to pin 28, holding it there
while powering up the ELM329 circuit. Hold it in
position until you see the RS232 Receive LED begin to
flash (which indicates that all of the PPs have been
turned off). At this point, remove the jumper to allow
the IC to perform a normal startup. Note that a reset of
the PPs occurs quite quickly – if you are holding the
jumper on for more than a few seconds and do not see
the RS232 receive light flashing, remove the jumper
and try again, as there may be a problem with your
connection.
These commands control the ELM329’s automatic
receive (and display) of the messages returned by the
vehicle. If responses have been turned off, the IC will
not wait for a reply from the vehicle after sending a
request, and will return immediately to wait for the next
RS232 command (the ELM329 does not print anything
to say that the send was successful, but you will see a
message if it was not).
R0 may be useful to send commands blindly when
using the IC for a non-OBD network application, or
when simulating an ECU in a learning environment. It
is not very useful for normal OBD communications,
however, as the purpose of making request is to obtain
replies.
An R0 setting will always override any ‘number of
responses digit’ that is provided with an OBD request.
The default setting is R1, or responses on.
PP hh ON
[ turn Prog Parameter hh ON ]
This command enables Programmable Parameter
number hh. Once enabled, any value assigned using
the PP hh SV command will be used instead of the
factory default value. (All of the programmable
parameter values are set to their default values at the
factory, so enabling a programmable parameter before
assigning a value to it will not cause problems.) The
actual time when the value for this parameter becomes
effective is determined by its type. Refer to the
Programmable Parameters section (page 66) for more
information on the types.
RD
[ Read the Data in the user memory ]
The byte value stored in the non-volatile user
memory (with the SD command) is retrieved with this
command. There is only one memory location, so no
address is required.
RTR
[ send an RTR message ]
This command causes a special ‘Remote Frame’
CAN message to be sent. This type of message has
no data bytes, and has its Remote Transmission
Request (RTR) bit set. The headers and filters will
remain as previously set (ie the ELM329 does not
make any assumptions as to what format a response
may have), so adjustments may need to be made to
the mask and filter before sending an RTR. This
command must be used with an active CAN protocol
(one that has been sending and receiving messages),
as it can not initiate a protocol search. Note that the
CAF1 setting normally eliminates the display of all
RTRs, so if you are monitoring messages and want to
see the RTRs, you will have to turn off formatting, or
else turn the headers on.
Note that ‘PP FF ON’ is a special command that
enables all of the Programmable Parameters at the
same time.
PP hh SV yy [ Prog Parameter hh, Set Value to yy ]
A value is assigned to a Programmable Parameter
using this command. The system will not be able to
use this new value until the Programmable Parameter
has been enabled, with the PP hh ON command.
PPS
[ Programmable Parameter Summary ]
The ELM329 treats an RTR just like any other
message sent, and will wait for a response from the
vehicle (unless AT R0 has been chosen).
The complete range of Programmable Parameters
are displayed with this command (even those not yet
implemented). Each is shown as a PP number
followed by a colon and the value that is assigned to it.
This is followed by a single digit – either ‘N’ or ‘F’ to
show that it is ON (enabled), or OFF (disabled),
respectively. See the Programmable Parameters
section for a more complete discussion.
RV
[ Read the input Voltage ]
This initiates the reading of the voltage present at
pin 2, and the display of it as a decimal voltage. If VDD
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist 22 of 87
www.elmelectronics.com
ELM329L
AT Command Descriptions (continued)
is more than 4V, the calculations assume that it is
5.0V, and that the resistor divider ratio 1 5.7:1. If VDD is
less than 4V, the calculations assume that it is 3.3V,
and that the resistor divider ratio is 11:1. The
uncalibrated accuracy is typically about 2%.
three byte/six digit command often provides a slightly
faster way to change an extended ID. In addition, it
provides compatibility with the large ELM327 software
base.
The header bytes (ID bits) in a message are
normally assigned values for you (and depending on
your application, may never require adjusting), but
there may be occasions when it is desirable to change
them (particularly if experimenting with physical
addressing). If experimenting, it is not necessary but
may be better to set the headers after a protocol is
active. That way, you can be sure of your starting point
before changing the default values.
S0 and S1
[ printing of Spaces off or on ]
These commands control whether or not space
characters are inserted in the ECU response.
The ELM329 normally reports ECU responses as
a series of hex characters that are separated by space
characters (to improve readability), but messages can
be transferred much more quickly if every third byte
(the space) is removed. While this makes the message
less readable for humans, it can provide significant
improvements for computer processing of the data,
and reduce the amount of data in the send buffer. By
default, spaces are on (S1), and space characters are
inserted in every response.
The header bytes are defined with hexadecimal
digits. These remain in effect until set again, or until
restored to their default values with the D, WS, or Z
commands.
If new values for header bytes are set before the
vehicle protocol has been determined, and if the
search is not set for fully automatic (ie other than
protocol 0), these new values will be used for the
header bytes of the first request to the vehicle. If that
first request should fail to obtain a response, and if the
automatic search is enabled, the ELM329 will then
continue to search for a protocol using default values
for the header bytes. Once a valid protocol is found,
the header bytes will revert to the values assigned with
the AT SH command.
SD hh
[ Save Data byte hh ]
The ELM329 is able to save one byte of
information for you in a special nonvolatile memory
location, which is able to retain its contents even if the
power is turned off. Simply provide the byte to be
stored, then retrieve it later with the read data (AT RD)
command. This location is ideal for storing user
preferences, unit ids, occurrence counts, or other
information.
SH wwxxyyzz
[ Set the Header to wwxxyyzz ]
All 29 bits of an extended ID (header) may be set
at once with this command. Only 29 bits are used - the
three most significant bits of the first digit are ignored.
SH xyz
[ Set the Header to 00 0x yz ]
Each message that is sent by the ELM329 is a
combination of a header (ID bits) and data bytes.
Since the ID bits need to be changed far less often
than the data byes, it makes sense to change them
only when needed.
The AT SH xyz command accepts a three digit
argument, takes only the right-most 11 bits from that,
and uses that for the 11 bit ID when sending standard
length ID messages.
SP h
[ Set Protocol to h ]
This command is used to set the ELM329 for
operation using the protocol specified by 'h', and to
also save it as the new default. Note that the protocol
will be saved no matter what the AT M0/M1 setting is.
The ELM329 supports many different protocols, as
listed here (but it’s a little misleading, as there is only
very minimal support for protocols 1 to 5):
SH xxyyzz
[ Set the Header to xxyyzz ]
0 - Automatic
This command provides a means to set three
bytes of the 29 bit extended ID. The values passed are
used to populate the 24 least significant bits (and the
remaining 5 bits are set using the AT CP command).
Since the CAN Priority bits do not often change, this
1 - SAE J1850 PWM (41.6 kbaud)
2 - SAE J1850 VPW (10.4 kbaud)
3 - ISO 9141-2 (5 baud init, 10.4 kbaud)
4 - ISO 14230-4 KWP (5 baud init, 10.4 kbaud)
5 - ISO 14230-4 KWP (fast init, 10.4 kbaud)
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
23 of 87
ELM329L
AT Command Descriptions (continued)
6 - ISO 15765-4 CAN (11 bit ID, 500 kbaud)
7 - ISO 15765-4 CAN (29 bit ID, 500 kbaud)
8 - ISO 15765-4 CAN (11 bit ID, 250 kbaud)
9 - ISO 15765-4 CAN (29 bit ID, 250 kbaud)
A - SAE J1939 CAN (29 bit ID, 250* kbaud)
B - USER1 CAN (11* bit ID, 125* kbaud)
C - USER2 CAN (11* bit ID, 50* kbaud)
D - SAE J1939* CAN (29* bit ID, 500* kbaud)
E - USER4 CAN (11* bit ID, 95.2* kbaud)
F - USER5 CAN (11* bit ID, 33.3* kbaud)
* default settings (user adjustable)
your vehicle is ISO 15765-4, 11 bit ID and 250 kbaud,
you may send the AT SP A8 command to tell the
ELM329 to try protocol 8 first, then automatically
search for another if that fails.
There is one problem with using this command -
the message that you provide is sent using the
protocol that you specify, without regard to what baud
rate the bus is actually operating at. If you are
mistaken about the baud rate, you will cause errors
on the bus, resulting in a momentary disruption, which
is not desirable. The much preferred method with
CAN protocols is to use the AT SP 0 command.
The first protocol shown (0) is a convenient way of
telling the ELM329 that the vehicle’s protocol is not
known, and that it should perform a search for you. It
causes the ELM329 to try all protocols if necessary,
looking for one that can be initiated correctly. When a
valid protocol is found, and the memory function is
enabled, that protocol will then be remembered, and
will become the new default setting. When saved like
this, the automatic mode searching will still be
enabled, and the next time the ELM329 fails to
connect to the saved protocol, it will again search all
protocols for another valid one. Note that some
vehicles respond to more than one protocol - during a
search, you may see more than one type of response.
The AT SP 0 command is a useful way to reset
the search logic when attempting to connect to a
vehicle. The ELM329 SP 0 command works like the
ELM327 SP 0 command - it is the only one that does
not cause an immediate write to EEPROM (which is an
unnecessary step if the IC is only to begin searching
for another protocol immediately after). If you feel for
some reason that you must store a ‘0’ for the protocol,
you may send AT SP 00, but it is not necessary.
ST hh [ Set Timeout to hh ]
After sending a request, the ELM329 waits a
preset time for a response before it can declare that
there was ‘NO DATA’ received from the vehicle. The
same timer setting is also used after a response has
been received, while waiting to see if more are
coming. The AT ST command allows this timer to be
adjusted, in increments of 4 msec (or 20 msec if in
the J1939 protocol, with JTM5 selected).
When Adaptive Timing is enabled, the AT ST
time sets the maximum time that is to be allowed,
even if the adaptive algorithm determines that the
setting should be longer. In most circumstances, it is
best to simply leave the AT ST time at the default
setting, and let the adaptive timing algorithm
determine what to use for the timeout.
The ST timer is set to 19 (25 decimal) by default
which gives a time of approximately 100 msec (this
value can be adjusted by changing PP 03). Note that
a value of 00 does not result in a time of 0 msec – it
will restore the timer to the default value.
SW hh [ Set Wakeup to hh ]
Protocols 1 to 5 in the above list are only included
for compatibility with ELM327 software, and have only
very limited functionality. If you use them to try to send
a request, nothing is sent, and the ELM329 will return
reporting ‘NO DATA’. Similarly, if trying to monitor with
protocols 1 to 5 (using AT MA), they report no data.
Once a data connection has been established,
some protocols require that there be data flow every
few seconds, just so that the ECU knows to maintain
the communications path open. If the messages do
not appear, the ECU will assume that you are
finished, and will close the channel. If this happens,
the connection will need to be initialized again in
order to reestablish communications. The ELM329 is
able to automatically generate wakeup (periodic CAN)
messages, in order to maintain a connection.
SP Ah
[ Set Protocol to Auto, h ]
This variation of the SP command allows you to
choose a starting (default) protocol, while still retaining
the ability to automatically search for a valid protocol
on a failure to connect. For example, if you think that
The time interval between these periodic
‘wakeup’ messages can be adjusted in 20 msec
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
24 of 87
ELM329L
AT Command Descriptions (continued)
increments using the AT SW hh command, where hh
is any hexadecimal value from 00 to FF. The
maximum possible time delay of just over 5 seconds
results when a value of FF (decimal 255) is used. The
default setting provides a nominal delay of 2 seconds
between messages. The replies to these messages
are always ignored, and are not visible to the user.
Note that the value 00 (zero) is treated as a very
special case, and must be used with caution, as it will
stop all periodic messages. This way of stopping the
messages while keeping the rest of the protocol
functioning normally, is for experimenters, and is not
intended to be used regularly. Issuing AT SW 00 will
not change a prior setting for the time between
wakeup messages, if the protocol is reinitialised.
from low power operation, the level at M0 and M1 will
be set according to PP 20. For more details on how to
use these commands, see page 60.
TP h
[ Try Protocol h ]
This command is identical to the SP command,
except that the protocol that you select is not
immediately saved in internal memory, so does not
change the default setting. Note that if the memory
function is enabled (AT M1), and this new protocol that
you are trying is found to be valid, that protocol will
then be stored in memory as the new default.
TP Ah
[ Try Protocol h with Auto ]
This command is very similar to the AT TP
command above, except that if the protocol that is tried
should fail to initialize, the ELM329 will then
automatically sequence through the other protocols,
attempting to connect to one of them.
TA hh
[ set the Tester Address to hh ]
This command is used to change the current
tester (ie. scan tool) address that is used in the
headers, periodic messages, filters, etc. The ELM329
normally uses the value that is stored in PP 06 for this,
but the TA command allows you to temporarily
override that value.
Sending AT TA will affect all protocols, including
J1939. This provides a convenient means to change
the J1939 address from the default value of F9,
without affecting other settings.
V0 and V1
[ Variable data lengths off or on ]
These commands modify the current CAN protocol
settings to allow the sending of variable data length
messages (just as setting bit 6 of the CAN Options PP
does for protocols B to F). This allows experimenting
with variable data length messages for any of the CAN
protocols, without having to change the Programmable
Parameter. The V1 command will always override any
protocol setting, and force a variable data length
message. The default setting is V0, providing data
lengths as determined by the protocol.
Although this command may appear to work ‘on
the fly’, it is not recommended that you try to change
this address after a protocol is active, as the results
may be unpredictable.
TM0, TM1, TM2, TM3 [ set the Transceiver Mode… ]
WD [1 to 8 bytes]
[ set Wakeup Data to… ]
This command is used to control the voltage levels
at pins 21 (M1) and 22 (M0), and are typically used
with single wire CAN transceivers. The four modes
are:
This command allows you to define the data bytes
that will be sent in the wakeup (CAN periodic)
message. Any number of bytes from 1 to 8 may be
defined, and will be sent exactly as provided. That is,
no formatting will be applied, no filler bytes will be
added, and the data length code will be set to the
number of data bytes provided (even if the protocol
expects 8 bytes). If you do need to send 8 bytes, you
will need to provide 8 bytes. The default setting for WD
is 01 3E 00 00 00 00 00 00.
0: sleep (M1=0, M0=0)
1: high speed (M1=0, M0=1)
2: high voltage wakeup (M1=1, M0=0)
3: normal (M1=1, M0=1)
Note that during low power operation, the M0 and
M1 pins will maintain the setting that they had prior to
going to low power mode. The previous version of this
IC (v1.0) automatically set both pins to a low level,
which is a ‘sleep’ output. As the ELM329 ‘wakes up’
WH xyz
[ set Wakeup Header to… ]
The AT WH xyz command accepts a three digit
argument, takes only the right-most 11 bits from that,
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
25 of 87
ELM329L
AT Command Descriptions (continued)
and uses that for the 11 bit Wakeup Header. You may
define a wakeup message to use an 11 bit ID even if
the current protocol uses 29 bit IDs. The last assigned
wakeup header (11 or 29 bit) determines whether the
wakeup message will use standard 11 bit, or extended
29 bit IDs. The default setting for WH is 7DF.
Z
[ reset all ]
This command causes the chip to perform a
complete reset as if power were cycled off and then on
again. All settings are returned to their default values,
and the chip will be put into the idle state, waiting for
characters on the RS232 bus. Any baud rate that was
set with the AT BRD command will be lost, and the
ELM329 will return to the default baud rate setting.
WH wwxxyyzz
[ set Wakeup Header to… ]
This AT WH command accepts a four byte (eight
digit) argument, takes only the right-most 29 bits from
it, and uses that for the 29 bit Wakeup Header. You
may define a wakeup message to use a 29 bit ID even
if the current protocol uses 11 bit IDs. The last
assigned wakeup header (11 or 29 bit) determines
whether the wakeup message will use standard 11 bit,
or extended 29 bit IDs. By default, the wakeup header
is initially 11 bit, and so nothing is defined for a 29 bit
ID until you assign a value.
@1
[ display the device description ]
This command displays the device description
string. The default text is ‘CAN Interpreter’.
@2
[ display the device identifier ]
A device identifier string that was recorded with
the @3 command is displayed with the @2 command.
All 12 characters and a terminating carriage return will
be sent in response, if they have been defined. If no
identifier has been set, the @2 command returns an
error response (‘?’). The identifier may be useful for
storing product codes, production dates, serial
numbers, or other such codes.
WM [1 to 8 bytes]
[ set Wakeup Message to… ]
This command is exactly the same as the AT WD
command. It is provided in order to be compatible with
the ELM327 instruction set. The default setting for WM
is 01 3E 00 00 00 00 00 00.
@3 cccccccccccc
[ store the device identifier ]
This command is used to set the device identifier
code. Exactly 12 characters must be sent, and once
written to memory, they can not be changed (ie you
may only use the @3 command one time). The
characters sent must be printable (ascii character
values 00x21 to 0x5F inclusive).
WM0, WM1, WM2
[ set the Wakeup Mode… ]
This command is used to set the Wakeup Mode.
The modes are defined as:
0: wakeups are off (disabled)
1: wakeups are sent at a constant rate
2: wakeups are sent if no other message has been
sent in the AT SW time.
The default value for this option is 0 (off). If you
wish to change this, you will need to change PP 23.
WS
[ Warm Start ]
This command causes the ELM329 to perform a
complete reset which is very similar to the AT Z
command, but does not include the power on LED
test. Users may find this a convenient way to quickly
‘start over’ without having the extra delay of the AT Z
command.
If using variable RS232 baud rates (ie AT BRD
commands), it is preferred that you reset the IC using
this command rather than AT Z, as AT WS will not
affect the chosen RS232 baud rate, and AT Z will.
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
26 of 87
ELM329L
Reading the Battery Voltage
Before learning the OBD Commands, we will show
an example of how to use an AT Command. We will
assume that you have built (or purchased) a circuit
which is similar to that of Figure 9 in the Example
Applications section (page 76). This circuit provides a
connection to read the vehicle’s battery voltage, which
many will find very useful.
the CV value, as the ELM329 knows that it should be
between the second and the third digits.
At this point, the internal calibration values have
been changed (ie. written to EEPROM), and the
ELM329 now knows that the voltage at the input is
actually 12.47V. To verify that the changes have taken
place, simply read the voltage again:
If you look in the AT Command list, you will see
there is one command that is listed as RV [Read the
input Voltage]. This is the command which you will
need to use. First, be sure that the prompt character is
shown (that is the ‘>’ character), then simply enter ‘AT’
followed by RV, and press return (or enter):
>AT RV
12.5V
The ELM329 always rounds off the measurement
to one decimal place, so the 12.47V actually appears
as 12.5V (but the second decimal place is maintained
internally for accuracy and is used in the calculations).
The ELM329 may be calibrated with any reference
voltage that you have available, but note that the CV
command always expects to receive four characters
representing the voltage at the input. If you had used a
9V battery for your reference, and it is actually 9.32V,
then you must add a leading zero to the actual voltage
when calibrating the IC:
>AT RV
Note that we used upper case characters for this
request, but it was not required, as the ELM329 will
accept upper case (AT RV) as well as lower case
(at rv) or any combination of these (At rV). It does not
matter if you insert space characters (‘ ’) within the
message either, as they are ignored by the ELM329.
A typical response to this command will show a
voltage reading, followed by another prompt character:
>AT CV 0932
OK
12.6V
>
If you should get into trouble with this command
(for example, if you set calibration values to something
arbitrary and do not have a voltmeter on hand to
provide accurate values), you can restore the settings
to the original (factory) values with the CV 0000
command. Simply send:
The accuracy of this reading depends on several
factors. As shipped from the factory, the ELM329
voltage reading circuitry will typically be accurate to
about 2%. For many, this is all that is needed. Some
people may want to calibrate the circuitry for more
accurate readings, however, so we have provided a
special ‘Calibrate Voltage’ command for this.
>AT CV 0000
OK
To change the internal calibration constants, you
will need to know the actual battery voltage to more
accuracy than the ELM329 shows. Many quality digital
multimeters can do this, but you should verify the
accuracy before making a change.
Let us assume that you have connected your
accurate multimeter, and you find that it reads 12.47V.
The ELM329 is a little high at 12.6V, and you would
like it to read the same as your meter. Simply calibrate
the ELM329 to the measured voltage using the CV
command:
The other AT Commands are used in the same
manner. Simply type the letters A and T, then follow
with the command you want to send and any
arguments that are required. Then press return (or
enter, depending on your keyboard). Remember - you
can always insert space characters as often as you
wish if it improves the readability for you, as they are
ignored by the ELM329.
>AT CV 1247
OK
Note that you should not provide a decimal point in
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
27 of 87
www.elmelectronics.com
ELM329L
OBD Commands
If the bytes that you send to the ELM329 do not
character is only a signal to the ELM329, and is never
sent to the vehicle.
begin with the letters ‘A’ and ‘T’, they are assumed to
be OBD commands for the vehicle. Each pair of ASCII
bytes will be tested to ensure that they are valid
hexadecimal digits, and will then be combined into
data bytes for transmitting to the vehicle.
Commands to the vehicle are actually sent
embedded in a data packet. The packet consists of
header bytes (ie CAN ID bits), as well as checksum
and other bits as defined by the ISO standards. The
ELM329 adds these extra bits and bytes to your
message as required - you do not normally have to
even consider them. If you do want to change the ID
bits or data lengths at some point, there is a
mechanism to do so (see the ‘Setting the Header / ID
Bits’ section).
Most OBD commands are only one or two bytes in
length, but some can be longer. The current version of
the ELM329 will accept up to eight data bytes to be
sent (there is no way to send any more bytes with this
version). Attempts to send more than eight bytes will
result in an error – the entire command is then ignored
and a single question mark printed.
Hexadecimal digits are used for all of the data
exchange with the ELM329 because it is the data
format used most often in the OBD standards. Most
mode request listings use hexadecimal notation, and it
is the format most frequently used when results are
shown. With a little practice, it should not be very
difficult to deal in hex numbers, but some people may
want to use a table such as Figure 1, or keep a
calculator nearby. Dealing with the hex digits can not
be avoided - eventually all users need to manipulate
the results in some way (combining bytes and dividing
by 4 to obtain rpm, dividing by 2 to obtain degrees of
advance, converting temperatures, etc.).
After sending the command, the ELM329 listens
on the OBD bus for replies, looking for ones that are
directed to it. If a message address matches, the
received bytes will be converted to ascii characters
and sent on the RS232 port to the user, while
messages received that do not have matching
addresses will be ignored.
The ELM329 will continue to wait for messages
addressed to it until there are none found in the time
that was set by the AT ST command. As long as
messages continue to be received, the ELM329 will
continue to reset this timer, and look for more. Note
that the IC will always respond to a request with some
reply, even if it is to say ‘NO DATA’ (meaning that
there were no messages found, or that some were
found but they did not match the receive criteria).
Hexadecimal
Number
Decimal
Equivalent
0
1
2
3
4
5
6
7
8
9
A
B
C
D
E
F
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
As an example of sending a command to the
vehicle, assume that A6 (or decimal 166) is the
command that is required to be sent. In this case, the
user would type the letter A, then the number 6, then
would press the return key. These three characters
would be sent to the ELM329 by way of the RS232
port. The ELM329 would store the characters as they
are received, and when the third character (the
carriage return) was received, would begin to assess
the other two. It would see that they are both valid hex
digits, and would convert them to a one byte value (the
decimal value is 166). The header/ID bytes would then
be added, and the complete message would then be
sent to the vehicle. Note that the carriage return
Figure 1. Hex to Decimal Conversion
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
28 of 87
ELM329L
Talking to the Vehicle
The standards require that each OBD command or
request that is sent to the vehicle must adhere to a set
format. The first byte sent (known as the ‘mode’)
describes the type of data being requested, while the
second byte (and possibly a third or more) specifies
the actual information that is required. The bytes which
follow after the mode byte are known as the
‘parameter identification’ or PID number bytes. The
modes and PIDs are described in detail in documents
such as the SAE J1979 (ISO 15031-5) standard, and
may also be defined by the vehicle manufacturers.
The SAE J1979 standard currently defines ten
possible diagnostic test modes, which are:
>AT SP 0
That’s all that you need to do to prepare the
ELM329 for communicating with a vehicle, and often
you do not even need to do that - most times you can
simply jump ahead to the next step. You do not need
to know anything about the protocol that your vehicle
uses - the ELM329 will determine that for you.
At the prompt, issue the mode 01 PID 00
command:
>01 00
The ELM329 should say that it is ‘SEARCHING...’
for a protocol, then it should print a series of numbers,
similar to these:
01 - show current data
02 - show freeze frame data
03 - show diagnostic trouble codes
04 - clear trouble codes and stored values
05 - test results, oxygen sensors
06 - test results, non-continuously monitored
07 - show ‘pending’ trouble codes
08 - special control mode
41 00 BE 1F B8 10
The 41 in the above signifies a response from a
mode 01 request (01 + 40 = 41), while the second
number (00) repeats the PID number requested. A
mode 02, request is answered with a 42, a mode 03
with a 43, etc. The next four bytes (BE, 1F, B8, and
10) represent the requested data, in this case a bit
pattern showing the PIDs that are supported by this
mode (1=supported, 0=not). Although this information
is not very useful for the casual user, it does prove that
the connection is working.
09 - request vehicle information
0A - request permanent trouble codes
Vehicles are not required to support all of the
modes, and within modes, they are not required to
support all possible PIDs (some of the first OBDII
vehicles only supported a very small number of them).
Within each mode, PID 00 is reserved to show which
PIDs are supported by that mode. Mode 01, PID 00
must be supported by all vehicles, and can be
accessed as follows…
Another example requests the current engine
coolant temperature (ECT). Coolant temperature is
PID 05 of mode 01, and can be requested as follows:
>01 05
Ensure that your ELM329 interface is properly
connected to the vehicle, and powered. Most vehicles
will not respond without the ignition key in the ON
position, so turn the ignition to on, but do not start the
engine. If you have been experimenting, the state of
your interface may be unknown, and you may wish to
reset it by sending:
The response will be of the form:
41 05 7B
The 41 05 shows that this is a response to a
mode 1 request for PID 05, while the 7B is the desired
data. Converting the hexadecimal 7B to decimal, one
gets 7 x 16 + 11 = 123. This represents the current
temperature in degrees Celsius, but with the zero
offset to allow for subzero temperatures. To convert to
the actual coolant temperature, you need to subtract
40 from the value obtained. In this case, then, the
coolant temperature is 123 - 40 or 83°C.
>AT Z
If you have just powered up the ELM329 circuit,
you do not need to do this (as it happens automatically
with every power on). You will see the interface LEDs
flash, and then the IC should respond with ‘ELM329
v2.1’, followed by a prompt character. At this point, you
may choose a protocol that the ELM329 should
connect with, but it is usually best to simply select
protocol ‘0’ which tells the IC to search for one:
A final example shows a request for the engine
rpm. This is PID 0C of mode 01, so at the prompt type:
>01 0C
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
29 of 87
ELM329L
Talking to the Vehicle (continued)
If the engine is running, the response might be:
sending the request, but that is only in case the single
response does not arrive.)
41 0C 1A F8
For protocols other than J1939, make sure that
you know how many lines of data to expect when
using this method, not how many responses (J1939 is
able to use the count for the number of messages).
For example, consider a request for the vehicle
identification number (VIN). This number is 17 digits
long, and typically takes 5 lines of data to be
represented. It is obtained with mode 09, PID 02, and
should be requested with:
The returned value (1A F8) is actually a two byte
hex number that must be converted to a decimal value
to be useful. Converting it, we get a value of 6904,
which seems like a very high value for engine rpm.
That is because rpm is sent in increments of 1/4 rpm!
To convert to the actual engine speed, we need to
divide the 6904 by 4. A value of 1726 rpm is much
more reasonable.
Note that these examples asked the vehicle for
information without regard for the type of OBD protocol
that the vehicle uses. This is because the ELM329
takes care of all of the data formatting and translation
for you. Unless you are going to do more advanced
functions, there is really no need to know what the
protocol is.
The above examples showed only a single line of
response for each request, but the replies often
consist of several separate messages, either from
multiple ECUs responding, or from one ECU providing
messages that need to be combined to form one
response (see ‘Multiline Responses’ on page 39). In
order to be adaptable to this variable number of
responses, the ELM329 normally waits to see if any
more are coming. If no response arrives within a
certain time, it assumes that the ECU is finished. This
same timer is also used when waiting for the first
response, and if that never arrives, causes ‘NO DATA’
to be printed.
If you know how many responses to expect from a
request, it is possible to speed up the retrieval of
information a little. That is, if the ELM329 knows how
many lines of data to receive, it knows when it is
finished, so does not have to go through the final
timeout, waiting for data that is not coming. Simply add
a single hex digit after the OBD request bytes - the
value of the digit providing the maximum number of
responses to obtain, and the ELM329 does the rest.
For example, if you know that there is only one
response coming for the engine temperature request
that was previously discussed, you can now send:
>09 02
or with:
>09 02 5
if you know that there are five lines of data coming. If
you should mistakenly send 09 02 1, you will only
receive the first few bytes of the VIN.
This ability to specify the number of responses
was really added with the programmer in mind. An
interface routine can determine how many responses
to expect for a specific request, and then store that
information for use with subsequent requests. That
number can then be added to the requests and the
response time can be optimized. For an individual
trying to obtain a few trouble codes, the savings are
not really worth the trouble, and it’s easiest to use the
old way to make a request (ie do not put the single
digit after the request).
Hopefully this has shown how typical requests are
made using the ELM329. If you are looking for more
information on modes and PIDs, it is available from
the SAE (www.sae.org), from ISO (www.iso.org), or
from various other sources on the web.
>01 05 1
and the ELM329 will return immediately after obtaining
only one response. This may save a considerable
amount of time, as the default time for the AT ST timer
is 100 msec. (The ELM329 still sets the timer after
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
30 of 87
ELM329L
Interpreting Trouble Codes
Likely the most common use that the ELM329 will
be put to is in obtaining the current Diagnostic Trouble
Codes (or DTCs). Minimally, this requires that a mode
03 request be made, but first one might determine how
many trouble codes are presently stored. This is done
with a mode 01 PID 01 request as follows:
the remaining two bytes provide the actual trouble
code (0302).
As was the case when requesting the number of
stored codes, the most significant bits of each trouble
code also contain additional information. It is easiest to
use the following table to interpret the extra bits in the
first digit as follows:
>01 01
If the first hex digit received is this,
Replace it with these two characters
To which a typical response might be:
41 01 81 07 65 04
0
1
2
3
4
5
6
7
8
9
A
B
C
D
E
F
P0
P1
P2
P3
C0
C1
C2
C3
B0
B1
B2
B3
U0
U1
U2
U3
Powertrain Codes - SAE defined
“
“
“
“ - manufacturer defined
“ - SAE defined
The 41 01 signifies a response to the request, and
the next data byte (81) is the number of current trouble
codes. Clearly there would not be 81 (hex) or 129
(decimal) trouble codes present if the vehicle is at all
operational. In fact, this byte does double duty, with
the most significant bit being used to indicate that the
malfunction indicator lamp (MIL, or ‘Check Engine
Light’) has been turned on by one of this module’s
codes (if there are more than one), while the other 7
bits of this byte provide the actual number of stored
trouble codes. In order to calculate the number of
stored codes when the MIL is on, simply subtract 128
(or 80 hex) from the number.
The above response then indicates that there is
one stored code, and it was the one that set the Check
Engine Lamp or MIL on. The remaining bytes in the
response provide information on the tests that are
supported by that particular module (see the J1979
document for further information).
In this instance, there was only one line to the
response, but if there were codes stored in other
modules, they would each provide a line of response.
To determine which module is reporting, you need to
turn the ‘headers’ on (with AT H1) which then shows
the ID bits associated with the message.
Having determined the number of codes stored,
the next step is to request the actual trouble codes
with a mode 03 request (there is no PID needed):
“ - jointly defined
Chassis Codes - SAE defined
“
“ - manufacturer defined
“ - manufacturer defined
“ - reserved for future
“
“
Body Codes - SAE defined
“
“
“
“ - manufacturer defined
“ - manufacturer defined
“ - reserved for future
Network Codes - SAE defined
“
“
“
“ - manufacturer defined
“ - manufacturer defined
“ - reserved for future
Taking the example trouble code (0302), the first
digit (0) would then be replaced with P0, and the 0302
reported would become P0302 (which is the code for
an ‘cylinder #2 misfire detected’).
If there had been no trouble codes in the above
example, the ECU would have told you so. The
response would typically look like:
>03
43 00
>03
For ISO 1576504 (CAN), the response might look
like this:
That’s about all there is to reading trouble codes.
With a little practice, you will find it to be quite straight-
forward.
43 01 03 02
The ‘43’ in the above response simply indicates
that this is a response to a mode 03 request. The next
byte (the ‘01’) says that 1 trouble code follows, while
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
31 of 87
ELM329L
Resetting Trouble Codes
The ELM329 is quite capable of resetting
diagnostic trouble codes, as this only requires issuing
a mode 04 command. The consequences should
always be considered before sending it, however, as
more than the MIL (or ‘Check Engine Light’) will be
reset. In fact, issuing a mode 04 will (among other
things):
data is that your vehicle may run poorly for a short
time, while it performs a recalibration.
To avoid inadvertently erasing stored information,
the SAE specifies that scan tools must verify that a
mode 04 is intended (‘Are you sure?’) before actually
sending it to the vehicle, as all trouble code
information is immediately lost when the mode is sent.
Remember that the ELM329 does not monitor the
content of the messages, so it will not know to ask for
confirmation of the mode request – this would have to
be the duty of a software interface, if one is written.
As stated, to actually erase diagnostic trouble
codes, one need only issue a mode 04 command. A
response of 44 from the vehicle indicates that the
mode request has been carried out, the information
erased, and the MIL turned off. Some vehicles may
require a special condition to occur (eg. the ignition on
but the engine must not be running) before they will
respond to a mode 04 command.
- reset the number of trouble codes
- erase any diagnostic trouble codes
- erase any stored freeze frame data
- erase the DTC that initiated the freeze frame
- clear the status of the system monitoring tests
- delete on-board test results
- but will not erase permanent (mode 0A) trouble
codes (these are reset by the ECU only)
Clearing of all of this data is not unique to the
ELM329 – it occurs whenever any scan tool is used to
reset the codes. The biggest problem with losing this
That is all there is to clearing trouble codes. Once
again, do not accidentally send the 04 code!
Quick Guide for Reading Trouble Codes
If you do not use your ELM329 for some time, this
entire data sheet may seem like quite a bit to review
when your ‘Check Engine’ light eventually comes on,
and you just want to know why. We offer this section
as a quick guide to the basics that you will need.
To get started, connect the ELM329 circuit to your
PC or smart device and communicate with it using a
terminal program such as HyperTerminal, ZTerm,
ptelnet, or a similar program. It should usually be set to
38400 baud, with 8 data bits, and no parity or
handshaking.
Ignition Key to ON,
but vehicle not running
>0101
to see how many codes
(2nd digit of the 3rd byte)
The chart at the right provides a quick procedure
on what to do next:
>03
to see the codes
(43 + # codes +
the codes in pairs)
FIX THE VEHICLE !
>04
to reset the codes
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
32 of 87
ELM329L
Selecting Protocols
The ELM329 supports several different OBD
Protocol Description
Automatic
protocols (see Figure 2, at right). This is a little
misleading however, as the ELM329 only provides
very minimal support for protocols 1 to 5 - they are
only included so that most ELM327 software will still
work with the ELM329.
The ELM329 really only provides support for CAN
protocols 6 to F. You may never need to actually
select one of these, since the factory settings cause
an automatic search to be performed for you, and the
protocol is activated if it seems appropriate. If
experimenting, you may wish to be able to select a
protocol, however.
For example, if you know that your vehicle uses
the CAN (ISO 15765-4) standard, with an 11 bit ID and
a rate of 500kbps (i.e. protocol 6), then you may want
the ELM329 to use only that one, and no others. If that
is what you want, simply use the ‘Set Protocol’ AT
Command as follows:
0
1
2
3
4
5
6
7
8
9
A
B
C
D
E
F
SAE J1850 PWM (41.6 kbaud)
SAE J1850 VPW (10.4 kbaud)
ISO 9141-2 (5 baud init)
ISO 14230-4 KWP (5 baud init)
ISO 14230-4 KWP (fast init)
ISO 15765-4 CAN (11 bit ID, 500 kbaud)
ISO 15765-4 CAN (29 bit ID, 500 kbaud)
ISO 15765-4 CAN (11 bit ID, 250 kbaud)
ISO 15765-4 CAN (29 bit ID, 250 kbaud)
SAE J1939 CAN (29 bit ID, 250* kbaud)
User1 CAN (11* bit ID, 125* kbaud)
User2 CAN (11* bit ID, 50* kbaud)
SAE J1939* CAN (29* bit ID, 500* kbaud)
User4 CAN (11* bit ID, 95.2* kbaud)
>AT SP 6
OK
From that point on, the default protocol (used after
every power-up or AT D command) will be protocol 6
(or whichever one that you have chosen). Verify this
by asking the ELM329 to describe the protocol:
User5 CAN (11* bit ID, 33.3* kbaud)
*user adjustable
>AT DP
ISO 15765-4 (CAN 11/500)
Figure 2. ELM329 Protocol Numbers
Now what happens if your friend has a vehicle that
uses a different baud rate? How do you now use the
ELM329 interface for that vehicle, if it is set for your
car?
One possibility is to change your protocol selection
to allow for the automatic searching for another
protocol, on failure of the current one. This is done by
putting an ‘A’ before the protocol number, as follows:
affects the setting for the next powerup, and may not
actually be appropriate, if the protocol selected is not
correct for the vehicle. To allow a test before a write
occurs, the ELM329 offers one other command - the
Try Protocol (TP) command.
Try Protocol is very similar to Set Protocol. It is
used in exactly the same way as the AT SP command,
the only difference being that a write to internal
memory will only occur after a valid protocol is found,
and only if the memory function is enabled (see AT
M0/M1). For the previous example, all that needs to be
sent is:
>AT SP A6
OK
>AT DP
AUTO, ISO 15765-4 (CAN 11/500)
>AT TP A6
OK
Now, the ELM329 will try protocol 6, but will then
automatically begin searching for another protocol
should the attempt to connect with protocol 6 fail (as
might happen when you try to connect to your friend’s
vehicle).
The Set Protocol commands cause an immediate
write to the internal EEPROM, before even attempting
to connect to the vehicle. This write is time-consuming,
Many times, it is very difficult to even guess at a
protocol to try first. In these cases, it is best to simply
let the ELM329 decide what to use. This is done by
telling it to use protocol 0 (with either the SP or the TP
commands).
To have the ELM329 automatically search for a
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
33 of 87
ELM329L
Selecting Protocols (continued)
protocol to use, simply send:
It will also use standard requests (ie 01 00) during the
searches. If this is not what you want, the results may
be a little frustrating.
>AT SP 0
OK
To use your own header (and data) values when
attempting to connect to an ECU, do not tell the
ELM329 to use protocol 0. Instead, tell it to either use
only your target protocol (ie. AT SP n), or else tell it to
use yours with automatic searches allowed on failure
(ie AT SP An). Then send your request, with headers
assigned as required. The ELM329 will then attempt to
connect using your headers and your data, and only if
that fails (and you have chosen the protocol with AT
SP An) will it search using the standard OBD default
values.
and when the next OBD command is to be sent, the
ELM329 will automatically look for one that responds.
You will see a ‘SEARCHING...’ message, followed by
a response, after which you can ask the ELM329 what
protocol it found (by sending AT DP).
The ELM329 always searches in the order set by
the protocol numbers (ie 6, 7, 8, etc.). Note that the IC
only appears to provide some support for protocols 1
to 5, but it never actually sends messages using them
- all searches start with protocol 6.
The automatic search works well with OBDII
systems, but may not be what you need if you are
experimenting. During an automatic search, the
In general, 99% of all users find that enabling the
memory (setting pin 5 to 5V) and using the ‘Auto’
option when searching (you may need to send AT
SP 0) works very well. After the initial search, the
protocol used by your vehicle becomes the new
default, but it is still able to search for another, without
your having to say AT SP 0 again.
ELM329 ignores
any headers that you have
previously defined (since there is always a chance that
your headers may not result in a response), and it
uses the default OBD header values for each protocol.
OBD Message Formats
On Board Diagnostics systems are designed to be
very flexible, providing a means for several devices to
communicate with one another. In order for messages
to be sent between devices, it is necessary to add
information describing the type of information being
sent, the device that it is being sent to, and perhaps
which device is doing the sending. Additionally, the
importance of the message becomes a concern as
well – crankshaft position information is certainly of
considerably more importance to a running engine
than a request for the number of trouble codes stored,
or the vehicle serial number. So to convey importance,
messages are also assigned a priority.
The information describing the priority, the
intended recipient, and the transmitter are usually
needed by the recipient even before they know the
type of request that the message contains. To ensure
that this information is obtained first, OBD systems
transmit it at the start (or head) of the message. Since
these bytes are at the head, they are usually referred
to as header bytes. Figure 3 below shows a typical
OBD message structure that is used by the older OBD
TA
SA
priority
receiver transmitter
3 header bytes
up to 7 data bytes
checksum
Figure 3. An OBD Message - Initial Protocols
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
34 of 87
www.elmelectronics.com
ELM329L
OBD Message Formats (continued)
standards. It uses 3 header bytes as shown, to provide
details concerning the priority, the receiver, and the
transmitter. Note that many texts refer to the receiver
as the ‘Target Address’ (TA), and the transmitter as
the ‘Source Address’ (SA).
‘header’ almost exclusively.
The initial CAN standard stated that there will be
11 ID bits for every message, but that has been
expanded and the latest CAN standards now allow for
either 11 or 29 bit IDs.
A concern when sending any message is that
errors might occur in the transmission, and the
received data may be falsely interpreted. To detect
errors, all of the protocols provide some form of check
on the received data. This may be as simple as a sum
calculation (ie a ‘running total’ of byte values) that is
sent at the end of a message. If the receiver also
calculates a sum as bytes are received, then the two
values can be compared and if they do not agree, the
receiver will know that an error has occurred. CAN
systems use a special kind of checksum called a
Cyclic Redundancy Check (or ‘CRC’).
The ELM329 does not normally show anything
more than the relevant data bytes unless you turn that
feature on with the Headers On command (AT H1).
Issuing it allows you to see the header bytes (ID bits),
and other items which are normally hidden such as the
PCI byte or possibly the data length code. The current
version of the ELM329 does not display the checksum
(CRC) information.
It is not necessary to ever have to set the header
bytes, or to perform a checksum calculation, as the
ELM329 will always do this for you. The header bytes
(ID bits) are adjustable however, should you wish to
experiment with advanced messages such as those
for physical addressing.
The OBD data bytes are thus normally
encapsulated within a message, with ‘header’ bytes at
the beginning, and a ‘checksum’ at the end.
The ISO 15765-4 (CAN) protocol uses a message
structure that is very similar to that of Figure 3 - see
Figure 4, below. The main difference between the two
is really only the structure of the header, as CAN does
not have distinct bytes, but rather has groups of bits.
For this reason, CAN headers are generally known as
‘ID bits’ and not headers. We use the terms
interchangeably, however, as so many people are
familiar with our other OBD chips (the ELM320,
ELM322, ELM323 and ELM327) which use the term
‘header’ bytes
data bytes (8 in total)
7 data bytes
ID bits (11 or 29)
PCI
checksum
Figure 4. A CAN OBD Message
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
35 of 87
www.elmelectronics.com
ELM329L
Setting the Header / ID Bits
The emissions related diagnostic trouble codes
that most people are familiar with are described in the
SAE J1979 standard (ISO15031-5). They represent
only a portion of the data that a vehicle may have
available – much more can be obtained if you are able
to be more specific with your requests.
the CAN Priority and Set Header commands:
>AT CP ww >AT SH xx yy zz
ww
xx
yy
zz
Accessing most OBDII diagnostics information
requires that requests be made to what is known as a
a ‘functional address.’ Any processor that supports the
function will respond to the request and, theoretically,
many different processors can respond to a single
functional request. In addition, every processor (or
ECU) will also respond to what is known as their
physical address. It is this physical address that
uniquely identifies each module in a vehicle, and
permits you to direct more specific queries to only one
particular module. To direct the queries to a specific
address requires changing the values that the ELM329
uses for the header (ID bits).
The ID bits in an ISO 15765-4 header may follow
one of two different formats - an 11 bit one, and a 29
bit one. First, consider the 29 bit standard, which has a
structure that is very similar to the header structure of
older OBD protocols (J1850, etc.).
There are two ways that you may use to define the
value that the ELM329 uses for a 29 bit header. The
first is to simply provide all of the bits as 4 bytes, or 8
hex digits, using the Set Header command:
5 bits only
ww
xx
yy
29 bit ID
Setting a 29 bit (extended) CAN ID
zz
The ISO 15765-4 CAN standard defines each of
the above ‘byte’ values for diagnostics. The priority
byte (‘ww’ in the diagrams) will always be 18 (this is
the default value used by the ELM329). The next byte
(‘xx’) describes the type of message that this is, and is
set to hex DB for functional addressing, and to DA if
using physical addressing. The final two bytes are
used in a way that is very similar to other standards –
‘yy’ is the receiver (or Target Address), and ‘zz’ is the
transmitter (or Source Address). For the functional
requests, the receiver is always 33, and the transmitter
is F1 (which is very similar to ISO 14230-4).
The other header structure that the CAN standard
defines uses an 11 bit ID (and is likely the most
common system in use today). The ELM329 uses a
special 3 digit version of the Set Header command in
order to set these bits:
>AT SH ww xx yy zz
5 bits
only
>AT SH xyz
ww
xx
yy
zz
29 bit ID
x
y
z
Setting a 29 bit (extended) CAN ID
The ELM329 will ignore the first three bits, leaving
29 that are then used for the messages.
11 bit ID
The second way (which is how the ELM327 does
it) is to change the values in two steps. In this method,
the ELM329 splits the 29 bits into a CAN Priority byte
and three header bytes. This makes it a little quicker to
change only one portion of the header (usually, it is the
priority bits that do not change). The two are then
combined by the ELM329 into a 29 bit value that it is
able to use. To set the header in this way, simply use
Setting an 11 bit (standard) CAN ID
In this case, the ELM329 uses the 11 least
significant (‘right-most’) bits of the provided header
bytes, and ignores the most significant bit.
The 11 bit ISO 15765-4 CAN standard typically
makes functional requests (ID/header = 7DF), but
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
36 of 87
ELM329L
Setting the Header / ID Bits (continued)
receives physical replies (the header/ID is of the form
7En). With headers turned on, it is a simple matter to
see the ID, and so learn the address of the module
that is replying. That information can then be used to
make physical requests if desired. For example, if the
headers are on, and you send 01 00, you might see:
>01 00
7E8 06 41 00 BE 3F B8 13 00
From the ISO 15765-4 standard, you then know
that ECU#1 (ID = 7E8) was the one responding. In
order to talk directly to that ECU, all you need do is to
set the header to the appropriate value (it is 7E0 to talk
to the 7E8 device – see ISO 15765-4 for more
information). From that point on, you can ‘talk’ directly
to the ECU using its physical address, as shown here:
>AT SH 7E0
OK
>01 00
7E8 06 41 00 BE 3F B8 13 00
>01 05
7E8 03 41 05 46 00 00 00 00
When experimenting with different headers, you
should be aware that the ELM329 only ‘sees’ replies
that pass through the receive filter. Since the above
replies were of the 7En form (which is used by the
standard functional OBDII replies), the responses
matched the default criteria, and were visible. If the
vehicle had replied with something else, then the
replies might very well not be visible if you did not take
an extra step to define what is to be received. The
easiest way to do that is to use the AT CRA (CAN
Receive Address) command. In this case, you would
only need to say AT CRA 7EX (see the Receive
Filtering section on page 41 for more information).
Hopefully this has helped to get you started. As we
often tell those that write for help – there is a lot to this,
so if you are going to do some serious experimenting
with OBD, you should buy the relevant standards.
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
37 of 87
ELM329L
ISO 15765-4 Message Types
If you are going to be adjusting the header values,
you will likely be experimenting with the data bytes as
well, so should have some knowledge of the message
structures. The ISO 15765-4 standard defines several
message types that may be used with diagnostic
systems. Currently, there are four of them:
Frame’. The length (014) was actually extracted from
that line by the ELM329 and printed on the first line as
shown. Following the First Frame line are two
Consecutive Frames (that begin with 1: and 2:). To
learn more details of the exact formatting, you may
want to send a request such as the one above, then
repeat the same request with the headers enabled (AT
H1). This will show the PCI bytes that are actually
used to send these components of the total message.
The Flow Control frame is one that you do not
normally have to deal with. When a First Frame
message is sent as part of a reply, the ELM329 must
tell the sender some technical things (such as how
long to delay between Consecutive Frames, etc.) and
does so by replying immediately with a Flow Control
message. These are predefined by the ISO 15765-4
standard, so can be automatically inserted for you. If
you wish to generate custom Flow Control messages,
then refer to the ‘Altering Flow Control Messages’
section, on page 57.
SF - the Single Frame
FF - the First Frame (of a multiframe message)
CF - the Consecutive Frame ( “ “ )
FC - the Flow Control frame
The Single Frame message contains storage for
up to seven data bytes in addition to what is known as
a PCI (Protocol Control Information) byte. The PCI
byte is always the first of the data bytes, and tells how
many data bytes are to follow. If the CAN Auto
Formatting option is on (CAF1) then the ELM329 will
create this byte for you when sending, and remove it
for you when receiving. (If the headers are enabled,
you will see it in the responses.)
If you turn the Auto Formatting off (with CAF0), it
is expected that you will provide all of the data bytes to
be sent. For diagnostics systems, this means the PCI
byte and the data bytes. The ELM329 will not modify
your data in any way, except to add extra padding
bytes for you, to ensure that you always send as many
data bytes as are required (eight for ISO 15765).
A First Frame message is used to say that a multi-
frame message is about to be sent, and tells the
receiver just how many data bytes to expect. The
length descriptor is limited to 12 bits, so a maximum of
4095 bytes can be received at once using this method.
Consecutive Frame messages are sent after the
First Frame message to provide the remainder of the
data. Each Consecutive Frame message includes a
single hex digit ‘sequence number’ that is used to
determine the order when reassembling the data. It is
expected that if a message were corrupted and resent,
it could be out of order by a few packets, but not by
more than 16, so the single digit is normally more than
adequate. As an example, the serial number for a
vehicle is a multiframe response:
While you will not generally see Flow Control
frames while querying a vehicle, you may see them if
you are monitoring data requests. If detected, the
ELM329 will display such a line with ‘FC: ’ before the
data, to help you with decoding the information.
There is a final type of message that is
occasionally reported, but is not supported by the OBD
diagnostics standard. The (Bosch) CAN standard
allows for the transmission of a data request without
sending any data in the requesting message. To
ensure that the message is seen as such, the sender
also sets a special flag in the message (the RTR bit),
which is seen at each receiver. The ELM329 always
looks for this flag, or for zero data bytes, and may
report to you that a Remote Transmission Request
was detected while monitoring. This is shown by the
characters RTR where data would normally appear,
but only if the CAN Auto Formatting is off, or headers
are enabled. Often, when monitoring a CAN system
with an incorrect baud rate chosen, RTRs may be
seen.
>0902
014
0: 49 02 01 31 44 34
1: 47 50 30 30 52 35 35
2: 42 31 32 33 34 35 36
The line that begins with 0: is called the ‘First
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
38 of 87
www.elmelectronics.com
ELM329L
Multiline Responses
There are occasions when a vehicle must respond
following VIN for the vehicle:
with more information than is able to fit in a single
‘message’. In these cases, it responds with several
data frames which the receiver must assemble into
one complete response. The following shows how this
is done with the ISO 15765-4 protocol.
Consider a request for the vehicle identification
number, or VIN. This is available from newer vehicles
using a mode 09, PID 02 request (but was not initially
an OBD requirement, so may not be supported by your
vehicle). Here is a typical response that the ELM329
might show:
1 D 4 G P 0 0 R 5 5 B 1 2 3 4 5 6
From this example, you can see that the format of
the data received may not always be obvious. For this
reason, a copy of the SAE J1979 (ISO 15031-5)
standard would be essential if you are planning to do a
lot of work with this, for example if you were writing
software to display the received data.
The next example shows how similar messages
might occasionally be ‘mixed up’ in a CAN system. We
ask the vehicle for Calibration ID #1 with an 09 04
request and receive the following response:
>0902
014
>09 04
013
0: 49 02 01 31 44 34
1: 47 50 30 30 52 35 35
2: 42 31 32 33 34 35 36
0: 49 04 01 35 36 30
1: 32 38 39 34 39 41 43
013
0: 49 04 01 35 36 30
2: 00 00 00 00 00 00 31
1: 32 38 39 35 34 41 43
2: 00 00 00 00 00 00 00
The CAN Formatting has been left on (the default),
making the reading of the data easier. With formatting
on, the lines begin with a sequence number and then a
colon (‘:’) to separate it from the data bytes. CAN
systems add this single hex digit (it goes from 0 to F
then repeats), to provide an aid for reassembling the
data.
The first line of this response says that there are
014 bytes of information in total. That is 14 in hex, or
20 in decimal, which agrees with the 6 + 7 + 7 bytes
shown on the three lines. The VIN numbers are
generally 17 digits long, however, so how do we
assemble the VIN from 20 digits?
Looking at the first three bytes of the response,
you can see that the first two are the familiar 49 02, as
this is a response to an 09 02 request. They can be
ignored. The third byte (the ‘01’), tells the number of
data items that are to follow (the vehicle can only have
one VIN), and it is not part of the VIN. Eliminating the
first three bytes then leaves 17 data bytes which may
be used to form the vehicle identification (serial)
number. To do this requires first assembling the 17
data bytes in order:
which is quite confusing. The first group (the 013, 0:, 1:
group) seems to make some sense (but the number of
data bytes do not agree with the response), and the
remaining data is also very confusing, as it has two
segment twos. It seems that two ECUs are responding
and the information is getting mixed up. Which ECU do
the responses belong to? The only way to know is to
turn on the headers, and repeat your request. Turning
the headers on, is simply a matter of sending H1:
>AT H1
OK
Then you can repeat the request:
>09 04
7E8 10 13 49 04 01 35 36 30
7E8 21 32 38 39 34 39 41 43
7E9 10 13 49 04 01 35 36 30
7E8 22 00 00 00 00 00 00 31
7E9 21 32 38 39 35 34 41 43
7E9 22 00 00 00 00 00 00 00
31 44 34 47 50 30 30 52 35 35 42 31
32 33 34 35 36
The above data values actually represent the
ASCII codes for all the characters of the VIN, so the
final step is to convert those codes into the actual
characters that they represent. ASCII tables are freely
available on the web, and may be used to yield the
This time, the order appears to be the same, but
be aware that it may not be – that is why the standard
requires that sequence codes be transmitted with
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
39 of 87
ELM329L
Multiline Responses (continued)
multiline responses.
is used to tell what type of data follows. In this case,
the PCI byte begins with either a 1 (for a ‘First Frame’
message), or a 2 (for the ‘Consecutive Frames’). The
second half of the PCI byte shows the order in which
the information is to be assembled (ie. the segment
number). In this case, the segment numbers are
already in order, but if they had not been, it would
have been necessary to rearrange the messages to
place them in order. The actual data can then be
extracted from the remaining bytes in each line.
The information presented here was only meant to
provide an overview of how long messages are
handled by the ISO 15765 standard. If you do wish to
learn more about the actual mechanism, we urge you
to purchase a copy of the standard, and study it.
Looking at the first digits of these responses, you
can see that some begin with 7E8, and some begin
with 7E9, which are the CAN IDs representing ECU#1
and ECU#2, respectively. Grouping the responses by
ECU gives:
7E8 10 13 49 04 01 35 36 30
7E8 21 32 38 39 34 39 41 43
7E8 22 00 00 00 00 00 00 31
and
7E9 10 13 49 04 01 35 36 30
7E9 21 32 38 39 35 34 41 43
7E9 22 00 00 00 00 00 00 00
From these, the messages can be assembled in
their proper order. To do this, look at the byte following
the CAN ID - it is what is known as the PCI byte, and
Multiple PID Requests
The SAE J1979 (ISO 15031-5) standard allows
requesting multiple PIDs with one message, but only if
you connect to the vehicle with CAN (ISO 15765-4).
Up to six parameters may be requested at once, and
the reply is one message that contains all the
responses.
For example, let us say that you need to know
engine load (04), engine coolant temperature (05),
manifold pressure (0B), and engine rpm (0C) on a
regular basis. You could send four separate requests
for them (01 04, then 01 05, then 01 0B, etc.) or you
could put them all into one message like this:
Following the 41 is the actual information, with the
PID numbers followed by their data bytes. You will
need to know how many data bytes to expect in order
to make sense of it in most cases.
The order in which you ask for the PIDs should not
matter. For example, the previous request might have
been sent as:
>01 0B 04 0C 05
00A
0: 41 0B 21 04 3F 0C
1: 17 B8 05 44 00 00 00
in which case, the responses might be as shown
above (but the order in which the PIDs appear in the
response does not have to match the order in which
they were requested).
>01 04 05 0B 0C
The reply is a multiline one, as just discussed in
the previous section:
Using this technique, you can make more efficient
use of the data bus. The cost is the extra work that you
must do in creating the requests, and in parsing the
response. If you are writing software to do this, the
time initially taken may well be worth it, but if you are
typing requests at a terminal screen, it is very unlikely
that this will be of benefit to you.
00A
0: 41 04 3F 05 44 0B
1: 21 0C 17 B8 00 00 00
Looking at the reply, the first line tells us that it is
00A (decimal 10) bytes long, so we only pay attention
to the first ten bytes of the following lines and ignore
the final three 00’s on the last line. The first byte is 41,
which tells us that the message is a response to an 01
request.
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
40 of 87
ELM329L
Receive Filtering - the CRA command
The ELM329 is always monitoring the CAN data. It
retrieves every message from the CAN bus, and then
decides whether or not to keep it based on criteria that
is established by the ELM329 firmware. This criteria is
always initially set to allow OBDII data to pass, but you
may change it at any time.
the information, but you want all messages that start
with 18 DA and are being sent to the scan tool. For
this, use the character ‘X’ to tell the ELM329 that you
do not care what value a digit has:
>AT CRA 18 DA F1 XX
Adjusting the criteria normally takes two steps
(see the next section), but there is one AT command
that you can use to make life a little easier. It allows
setting the address (CAN ID) of messages that you
wish to receive, in one simple step.
This command is the ‘CAN Receive Address’ or
CRA command. With it, you can specify a specific
address, or a range of addresses that the ELM329
should accept. For example, if the only messages that
you wish to see are those that have the CAN ID 7E9,
then simply send:
and the ELM329 takes care of the details for you.
When working with J1939 data, the ELM329
normally formats the data for you, in order to separate
the priority from the PGN information. This is usually
not a concern when using the CRA command, except
when you are trying to filter for a specific priority. For
example, you might typically see:
>AT MA
3 0FE6C 00 FF FF FF FF FF FF 40 B5
6 0FEEE 00 15 50 FF FF FF FF FF FF
6 0FEF5 00 FE FF FF FF 19 00 23...
>AT CRA 7E9
The single priority digit out front (the 3 or 6 above)
as well as the leading 0 with the PGN information are
actually part of the first two digits (5 bits) of the ID, and
need to be interpreted as such, in order to use the
CRA command. It may be easier if you turn off the
J1939 header formatting in order to see this:
and the ELM329 will set the necessary values so that
the only messages that are accepted are the ones with
ID 7E9.
If you do not want an exact address, but would
prefer to see a range of values, for example all the
OBD addresses (those that begin with 7E), then simply
use an ‘X’ for the digit that you do not want the
ELM329 to be specific about. That is, to see all
messages with CAN IDs that start with 7E (7E0, 7E1,
7E2,..., 7EE, and 7EF), then send:
>AT JHF0
OK
>AT MA
0C FE 6C 00 FF FF FF FF FF FF 40 B5
18 FE EE 00 15 50 FF FF FF FF FF FF
18 FE F5 00 FE FF FF FF 19 00 23...
>AT CRA 7EX
and the ELM329 will set the necessary values for you.
This command works exactly the same way for the
29 bit IDs. For example, if you wish to see all
messages that are being sent from the engine (ECU
address 10) to the scan tool (address F1), then you
can send:
This more clearly shows the four bytes that need
to be defined for the CRA command to be set. For
example, to search for all 6 0FEF5’s you would
actually send the command:
>AT CRA 18 FE F5 XX
>AT CRA XX XX F1 10
In summary then, the CRA command allows you
to tell the ELM329 what ID codes to look for, and the
letter ‘X’ may be used in it to represent any single digit
that you do not want the ELM329 to be specific about.
This is usually selective enough for most applications,
but occasionally, there is a need to be specific down to
the bit level, rather than to the nibble. For those
applications, you will need to program a separate
mask and filter, as we show in the next section.
and all the settings will be taken care of for you.
If you wish to be more specific and see only the
OBD replies sent by the engine to the scan tool, you
would say:
>AT CRA 18 DA F1 10
and again, the ELM329 makes the necessary changes
for you.
Perhaps you do not care which device is sending
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
41 of 87
ELM329L
Using the Mask and Filter
Filtering of messages (deciding which to keep and
which to reject), is usually handled most easily with the
CRA command. The CRA command only allows for
definition to the nibble level, however - if you need
more selectivity (to the bit level), you must program the
mask and filter.
Putting this together, the filter will have a value:
111 1110 1000 = 7E8
and the mask will have a value:
111 1111 1000 = 7F8
Internally, the ELM329 configures an ‘acceptance
filter’ with 1’s and 0’s based on the type of message
that it wishes to receive (OBD, J1939, etc.). This
pattern is then compared to the ID bits of all incoming
messages. If the two patterns match, then the entire
message is accepted, and if they do not, the message
is rejected.
In order to make these active, you will need to
issue both a CAN Filter and a CAN Mask command:
>AT CF 7E8
OK
>AT CM 7F8
OK
Having to match all 11 or 29 bits of the ID may be
very restrictive in some cases (and would require a
very large number of filters for some applications). To
allow a little more flexibility in what to accept, and what
to reject, a mask is also defined, in addition to the
filter. This mask acts just like the type worn on your
face - some features are exposed and some are
hidden. If the mask has a ‘1’ in a bit position, that bit in
the filter must match with the bit in the ID, or the
message will be rejected. If the mask bit is a ‘0’, then
the ELM329 does not care if that filter bit matches with
the message ID bit or not.
From that point on, only the IDs from 7E8 to 7EF
will be accepted by the chip.
The 29 bit IDs work in exactly the same way. For
example, assume that you wish to receive only
messages of the form:
18 DA F1 XX
where XX is the address of the ECU that is sending
the message, but you do not care what the value is
(this is the standard OBD response format). Putting 0’s
in for don’t care bits, then the mask needs to be set as
follows:
As an example, consider the standard response to
an 11 bit OBD request. ISO15765-4 states that all
responses will use IDs in the range from 7E8 to 7EF.
That is:
>AT CM 1F FF FF 00
OK
(as every bit except those in the last byte are relevant)
while the filter may be set to:
1. There must always be a ‘7 ‘ (binary 111) as the
first nibble (so the filter should have the value 111
or 7). All 3 bits are relevant (so the mask should
be binary 111 or 7). Note that this first nibble is
only 3 bits wide for the 11 bit CAN ID.
>AT CF 18 DA F1 00
OK
Note that if a filter has been set, it will be used for
all CAN messages, so setting filters and masks may
cause standard OBD requests to be ignored, and you
may begin seeing ‘NO DATA’ replies. If this happens,
and you are unsure of why, you may want to reset
everything to the default values (with AT CRA, AT D,
or possibly AT WS) and start over.
Quite likely, you will never have to use these
commands. If you do, then creating your own masks
and filters can be difficult. You may find it helpful to
draw the bit patterns first, and think about which ones
matter, and which ones do not. It may also help to
connect to a vehicle, apply test settings, and send
AT MA to see how the settings affect the displayed
data.
2. There must always be an ‘E’ (binary 1110) in
the second position, so the filter needs to be of
value 1110 or E. Since all 4 bits are relevant, the
mask needs to be of value 1111 or F.
3. If you analyze the patterns for the binary
numbers from 8 to F, you will see that the only
thing in common is that the most significant bit is
always set. That is, the mask will have a value of
1000 since only that one bit is relevant, and you
do not care what the other bits are. The filter
needs to be assigned a value that has a 1 in the
first position, but we do not care what is in the
other three positions. We will use 0’s in these
positions, but it doesn’t really matter.
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
42 of 87
ELM329L
Monitoring the Bus
Some vehicles use the OBD bus for information
you are looking at a J1939 network, simply tell the
ELM329 to set the protocol to A (AT SP A), or if you
have an 11bit, 500kbps ISO15765 system, tell it
AT SP 6. The SP command description (page 23)
gives a list of all the protocols and their numbers.
If the ‘Monitor All’ command provides too much
information (it does for most CAN systems), then you
should restrict the range of data that is to be displayed.
The best way to do this is with the CAN Receive
Address command (AT CRA).
transfer during normal vehicle operation, passing a
great deal of information over it. A lot can be learned if
you have the good fortune to connect to one of these
vehicles, and are able to decipher the contents of the
messages.
To see how your vehicle uses the OBD bus, you
can enter the ELM329’s ‘Monitor All’ mode, by sending
the command AT MA from your terminal program. This
will cause the IC to display any information that it sees
on the OBD bus, regardless of transmitter or receiver
addresses (it will show all). Note that the ELM329
remains silent while monitoring, so periodic ‘wakeup’
messages are not sent, and the CAN module does not
acknowledge messages (unless CAN Silent Monitoring
has been turned off).
The monitoring mode can be stopped at any time
by putting a logic low level on the RTS pin, or by
sending a single RS232 character to the ELM329. Any
convenient character can be used to interrupt the IC
as there are no restrictions on whether it is printable,
etc. Note that any character that you send will be
discarded, and will have no effect on any subsequent
commands. The time it takes to respond to such an
interrupt will depend on what the ELM329 is doing at
the time. The IC will always finish a task that is in
progress (printing a line, for example) before printing
‘STOPPED’ and returning to wait for your input, so it is
best to wait for the prompt character (‘>’) to be sent, or
the Busy line to go low, before beginning to send a
new command.
Unexpected results occasionally occur if you have
the automatic protocol search feature enabled, and
you tell the ELM329 to begin monitoring. If the bus is
quiet, the ELM329 will begin searching for an active
protocol, but it may find something that you were not
expecting. The ELM329 may stop searching at one
protocol if the baud rate matches, or it might stop at
multiples of the actual baud rate (and then report
receive errors). If you are testing ‘on the bench’, the IC
might not even find any protocol if the silent mode is
enabled (it is by default). Be aware however, that we
do not advise setting the silent mode off (AT CSM0)
while searching for a protocol to monitor, as the
ELM329 may incorrectly interact with the CAN
network, and cause problems. In the extreme case,
the ELM329 might even have internal problems and
report an ERR94.
Perhaps you have an 11 bit system, and only want
to see messages that begin with 7. To do that, simply
type:
>AT CRA 7XX
and follow it with an AT MA command. From that point
on, all messages that begin with 7 will be displayed
(the X’s say that you do not care what those other
digits are).
Similarly, you might be working with a 29 bit CAN
system, and want to see all messages from the
engine. If the engine uses address 10, then simply
type:
>AT CRA XX XX XX 10
and follow it with an AT MA command. From that point
on, only messages with IDs that end in ‘10’ will be
displayed.
Note that the CRA filter (as well as the CF and CM
one) will reduce the amount of information seen with
the AT MA command, but there may still be times
when the rate that the information is generated by the
vehicle far exceeds that which can be handled by the
PC connection. In these cases, the internal memory
(or ‘buffer’) fills up more quickly than it is being
emptied, and you will see a BUFFER FULL error
message. If this is happening, you may wish to
consider increasing the baud rate of your connection
(see page 46).
Another way to reduce ‘BUFFER FULL’ errors is
by reducing the number of characters that are put into
the buffer. You can use AT S0 to eliminate space
characters, turn off formatting (AT CAF0) to eliminate
‘DATA ERROR’ reports, or possibly turn off the
headers (AT H0) to eliminate those bytes.
As a final note, the ELM329 can be set to begin
‘monitoring all’ automatically after power on, if PP 00 is
set to the value 00 and is enabled. This only causes
an AT MA to be sent, however - there is no facility to
automatically provide filtering of the information.
When monitoring, it is always best if you can
select the protocol for the ELM329. If you know that
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
43 of 87
ELM329L
Mixed ID (11 and 29 bit) Sending
Users often ask if the ELM329 can send CAN data
other than that used for OBD. It is certainly able to do
that - all it takes is an understanding of the way that
messages are formed and sent by the chip. The
ELM329 also has two special instructions that make it
even easier to send any CAN message at any time.
When you provide a mode and PID for sending,
the ELM329 puts that request within a message
structure just like that shown in Figure 5. For this
example, we’ve assumed an ISO 15765-4 protocol
with an 11 bit ID, and an 01 05 (coolant temperature)
request. Notice that the two data bytes remain intact -
they are not altered in any way.
protocol, using the Programmable Parameters for the
User protocols. Actually, protocol B provides a quick
way to do this:
>AT PB C0 02
OK
is all that is needed to set up a 250 kbaud protocol
that has an 11 bit ID, variable data length send, and no
formatting.
The above discussion showed how to set options
to modify existing protocols, or to create a new one
that is able to send any data for you. The ELM329 also
provides two special commands that add this flexibility
at any time, to any protocol.
If you were in the original situation (Figure 5), and
wished to send the four data bytes ‘11 22 33 44’ with
no formatting (ie no PCI byte) or filler bytes, then all
you need do with the ELM329 is send:
>01 05
PCI byte
dlc
filler bytes
>.11 22 33 44
7DF
8 02 01 05 00 00 00 00 00
Notice the single dot (‘.’) out front, which tells the
ELM329 to use the 11 bit ID. If you had used two dots
(‘:’) as follows:
8 data bytes
header
(ID bits)
>:11 22 33 44
Figure 5. ISO 15765-4 Request
then the ELM329 would have sent the message using
the 29 bit ID (you can set the value with the AT SH
command).
Note that messages with 11 or 29 bit IDs can be
sent at any time using these two commands, no matter
what the current protocol uses. The only restriction is
that the current protocol must be active - that is, you
must have been sending requests and receiving
replies (so the ELM329 knows what the baud rate and
other settings should be).
The ‘.’ and ‘:’ commands always use the currently
defined headers for sending. If you wish to send with
something different, then the standard AT SH
command should be used to set either the 11 bit, or
the 29 bit header. (One of these headers will also
affect the current protocol though, as there is no facility
to define more than one 11 bit, or one 29 bit header.)
Note that the ‘.’ and ‘:’ commands also never
modify your data in any way - they do not add any
formatting bytes, and they do not add filler bytes. If you
want a message that has 8 data bytes, then you must
provide all 8 data bytes.
Every ISO 15765 message requires that there be
a special data byte (called a PCI byte) in the first
position. The ELM329 automatically adds this byte for
you, if automatic formatting is turned on (it is by
default). If you do not want this byte added, simply turn
the formatting off, with the AT CAF0 command.
This protocol also requires that all messages have
8 data bytes (the CAN protocol allows 0 to 8). If, as
above, the message is less than 8 bytes long, the
ELM329 will add extra ‘filler’ bytes for you in order to
make the length 8 bytes. If you do not want to send 8
bytes, use the AT V1 command to allow the messages
to be variable in length.
When you turn the formatting off, and allow
variable data lengths, it’s not as easy to send standard
ISO 15765 requests (but not impossible). If you had
done as above and sent AT CAF0, followed by AT V1,
then wanted to request the coolant temperature, all
you need to do is provide the 8 data bytes yourself:
>02 01 05 00 00 00 00 00
You do not always have to use the CAF0 and V1
commands in order to send arbitrary data using the
ELM329, however. An alternative is to define your own
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
44 of 87
ELM329L
Restoring Order
There may be times when it seems the ELM329 is
may be necessary to do something more drastic - like
resetting the entire IC. There are a few ways that this
can be performed with the ELM329. One way is to
simply remove the power and then reapply it. Another
way that acts exactly the same way as a power off and
then on is to send the full reset command:
out of control, and you will need to know how to
restore order. Before we continue to discuss modifying
too many parameters, this seems to be a good point to
discuss how to ‘get back to the start’. Perhaps you
have told the ELM329 to monitor all data, and there
are screens and screens of data flying by. Perhaps the
IC is now responding with ‘NO DATA’ when it did work
previously. This is when a few tips may help.
The ELM329 can always be interrupted from a
task by a single keystroke from the keyboard. As part
of its normal operation, checks are made for received
characters and if found, the IC will stop what it is doing
at the next opportunity. Often this means that it will
continue to send the information for the current line,
then stop, print a prompt character, and wait for your
input. The stopping may not always seem immediate if
the RS232 send buffer is almost full, though – you will
not actually see the prompt character until the buffer
has emptied, and your terminal program has finished
printing what it has received.
There are times when the problems seem more
serious and you don’t remember just what you did to
make them so bad. Perhaps you have ‘adjusted’ some
of the timers, then experimented with the CAN filter, or
perhaps tried to see what happens if the header bytes
are changed. If you have been experimenting with
CAN filters and are suddenly seeing ‘NO DATA’
responses, this can usually be fixed by resetting the
filters. Simply send:
>AT Z
It takes approximately one second for the IC to
perform this reset, initialize everything and then test
the four status LEDs in sequence. A much quicker
option is available with the ELM329, however, if the
led test is not required – the ‘Warm Start’ command:
>AT WS
The AT WS command performs a software reset,
restoring exactly the same items as the AT Z does, but
it omits the LED test, making it considerably faster.
Also, it does not affect any baud rates that have been
set with the AT BRD command (which AT Z does), so
is essential if you are modifying the RS232 baud rates
with software.
Any of the above methods should be effective in
restoring order while experimenting. There is always
the chance that you may have changed
a
Programmable Parameter, however, and are still
having problems with your system. In this case, you
may want to simply turn off all of the Programmable
Parameters (which forces them to their default values).
To do so, send the command:
>AT CRA
OK
>AT PP FF OFF
and the filter and mask will be reset to the default
values.
If you problem is more involved than this, then all
of the settings can be reset by sending the ‘set to
Defaults’ command:
which should disable all of the changes that you have
made. Since some of the Programmable Parameters
are only read during a system reset, you may have to
follow this command with a system reset:
>AT Z
>AT D
OK
after which, you can start over with what is essentially
a device with ‘factory settings’. There may be times
when even this command is not recognized, however.
If that is the case, you will need to use the hardware
method of turning the PPs off. See the section on
‘Programmable Parameters’ (pages 65 and 66) for
more details.
This will often be sufficient to restore order, but it
can occasionally bring unexpected results. One such
surprise will occur if you are connected to a vehicle
using one protocol, but the saved (default) protocol is
a different one. In this case, the ELM329 will close the
current session and then change the protocol to the
default one, exactly as instructed.
If the AT D does not bring the expected results, it
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
45 of 87
ELM329L
Using Higher RS232 Baud Rates
The RS232 serial interface has been maintained
throughout the ELM OBD products, largely due to its
versatility. Older computers, microprocessors and
PDAs can use it directly, as can USB, Bluetooth,
ethernet and wifi devices. It is simply one of the most
versatile interfaces available. Depending on the type of
interface that you use, you may wish to adjust the
ELM329 baud rate in order to take full advantage of
the speed available.
RS232 interfaces are demonstrated later in this
data sheet (Figures 11 and 12). Note that while a
MAX3222E is shown in Figure 12, there are many
other single IC solutions that are available. For
example, the popular MAX232 series of ICs is also
power up or reset. While the 9600 baud rate is not
adjustable, the 38400 one is. There are two ways that
the rate can be changed – either permanently with a
Programmable Parameter, or temporarily with an AT
command.
Programmable Parameter ‘0C’ is the memory
location that allows you to permanently store a new
baud rate which replaces the 38.4 kbps high speed
rate. The value is stored in EEPROM and is not
affected by power cycles or resets (but changing this
value may affect the operation of some software
packages, so be careful how you use it).
If you store a new value in PP 0C, then enable it,
and if pin 6 is at a high level during the next powerup,
then your stored rate will become the new data rate.
As an example, perhaps you would like to have the
ELM329 use a baud rate of 57.6 kbps, rather than the
factory setting of 38.4 kbps. To do this, determine the
required value for PP 0C, store this value in PP 0C,
and then enable the PP.
The value stored in PP 0C is actually an internal
divisor that is used to determine the baud rate (it will
be 4000 kbps divided by the value of PP 0C). To
obtain a setting of 57.6, a baud rate divisor of 69 is
required (4000/69 is approximately 57.6). Since 69 in
decimal is 45 in hexadecimal, you need to tell the
ELM329 to set the value of PP 0C to 45, with this
command:
available
from
Maxim
Integrated
Products
(http://www.maxim-ic.com/) and there are devices
such as the ADM232A from Analog Devices
(http://www.analog.com/) which are popular. These are
all excellent circuits that can be used for higher speed
connections. We do caution that many of these
devices are only rated for operation up to 120 kbps,
however, so may not be suitable for very high data
rates - be sure to check the manufacturers data sheet
before committing to a design.
An RS232 interface needs relatively large voltage
swings, which are difficult to maintain at high data
rates when there are large cable capacitances to
contend with. (A typical interface is often limited to
about 230.4 kbps under ideal conditions.) If you need
to operate the ELM329 at these speeds or higher, it is
recommended that you consider alternatives.
One popular alternative is a USB data connection.
The USB interface is capable of very high data transfer
rates, certainly much higher than the ELM329 is
capable of. Several manufacturers offer special
‘bridge’ circuits that simplify connecting an RS232
device (such as the ELM329) directly to the USB bus.
Examples are the CP2102 from Silicon Labs
(http://www.silabs.com/) and the FT232R or DB9-USB
module from Future Technology Devices (see their
web site at http://www.ftdichip.com/). If planning to use
the higher baud rates, USB interfaces are essential.
We are often asked if it is possible to use a direct
connection to a microprocessor. That is certainly an
option, and one that allows a full speed connection at
essentially zero cost. If you are developing such an
interface, refer to page 73 for more information.
>AT PP 0C SV 45
then enable the new value for use:
>AT PP 0C ON
from that point on, the default data rate will be 57.6K,
and not 38.4K. Note that the value that you write does
not become effective until the next full reset (a power
off/on, AT Z, or MCLR pulse).
If you are designing your own circuitry, you will
know what your circuit is capable of, and can assign a
value to PP 0C. Software developers will not usually
know what hardware is to be connected, however, so
will not know what the limitations are. For these users,
we have provided the BRD command.
This command allows a new baud rate divisor to
be tested, and then accepted or rejected depending on
the results of the test. See the chart at the right, which
shows how the command works.
As can be seen, the software (PC) first makes a
request for a new baud rate divisor, using this AT
The default configuration for the ELM329 provides
an RS232 data rate of either 9600 baud, or 38400
baud, depending on the voltage level at pin 6 during
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
46 of 87
ELM329L
Using Higher RS232 Baud Rates (continued)
command. For example, to try the 57.6K rate that was
previously discussed, the controlling PC would send:
PC
ELM329
AT BRD 45
and the ELM329 would respond with ‘OK’. After it sees
the ‘OK’, the PC should switch to the new data rate of
57.6 kbaud. Note that no prompt character follows the
ELM329’s ‘OK’ reply - it is followed only by a carriage
return character (and optionally, a linefeed character).
Having sent an ‘OK’, the ELM329 also switches to
the new (proposed) baud rate, and then simply waits a
predetermined time (nominally 75 msec). This period
is to allow the PC sufficient time to change its baud
rate. When the time is up, the ELM329 then sends the
ID string (currently ‘ELM329 v2.0’) to the PC at the
new baud rate, followed by a carriage return and a
linefeed (if enabled). It then waits for a response.
Knowing that it should receive the ELM329 ID
string, the PC software compares what was actually
received to what was expected. If they match, the PC
responds with a carriage return character, but if there
is a problem, the PC sends nothing. The ELM329 is
meanwhile waiting for a valid carriage return character
to arrive. If it does (within 75 msec), the proposed
baud rate is retained, and the ELM329 says ‘OK’ at
this new rate. If it does not see the carriage return, the
baud rate reverts back to the old rate. Note that the PC
might correctly output the carriage return at this new
rate, but the interface circuitry could corrupt the
character, and the ELM329 might not see a valid
response, so your software must check for an ‘OK’
response before assuming that the new rate has been
accepted.
Request for a new
baud rate divisor:
AT BRD hh
ELM329 responds
with ‘OK’
Program switches to
the new baud rate,
and waits for input
ELM329 switches to
new baud rate and
waits for 75 msec*
ELM329 sends the
AT I string
(ELM329 v2.0)
If the Rx is good,
Program sends a
carriage return
ELM329 waits
up to 75 msec*
for a carriage return
CR
received
?
yes
no
Using this method, a program can quickly try
several baud rates, and determine the most suitable
one for the connected hardware. The new baud rate
will stay in effect until reset by an AT Z, a Power
Off/On, or a MCLR input. It is not affected by the AT D
(set Defaults), or AT WS (Warm Start) commands.
Baud rate reverts
to the previous
baud rate
ELM329 says ‘OK’
(and remains at the
new baud setting)
Print a prompt,
and wait for the
next command
* the 75 msec time is adjustable
with the AT BRT hh command
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
47 of 87
ELM329L
Setting Timeouts - the AT ST and AT AT Commands
Users often ask about how to obtain faster OBD
scanning rates. There is no definite answer for all
vehicles, but the following information may help with
your understanding of how the AT ST and AT AT
settings are used by the ELM329.
times for you, averages several readings, and then
adjusts the AT ST time to a value that should work for
most situations. It is enabled by default, but can be
disabled with the AT0 command should you not agree
with what it is doing (there is also an AT2 setting that
is a little more aggressive, should you wish to
experiment). For 99% of all vehicles, we recommend
that you simply leave the settings at their default
values, and let the ELM329 make the adjustments for
you.
OK - the ELM329 is able to measure times, and
suggest a setting for the AT ST time, but the IC still
has to wait after receiving a reply to see if any more
are coming. Surely there has to be a way to eliminate
that final timeout, if you know how many responses to
expect? There is a way - by telling the ELM329 how
many messages to receive.
A typical vehicle request and response is shown in
the diagram below:
request is sent
ELM329
response
Vehicle
ELM waits up
to 100 msec
ELM waits 100 msec
for more responses
If you wish to make a request, and know how
many responses there should be, simply add that
response count as a single digit after your request. For
example, if you know that two ECUs will respond to an
01 00 request, then send:
The ELM329 sends a request then waits up to
100 msec for a reply (the standard requires 50 msec).
If no reply arrives in that time, an internal timer stops
the waiting, and the ELM329 prints ‘NO DATA’. If a
reply has been received, the ELM329 must wait to see
if any more replies are coming (and it uses the same
internal timer to stop the waiting if no more replies
arrive). While all replies should be received within 50
msec, the 100 msec setting ensures that a response is
not missed.
As an example, consider a vehicle that responds
to a query in 10 msec. With the ST timeout set to
100 msec, the fastest scan rate possible would only be
about 9 queries per second (it’s 10 + 100 msec per
response). Changing the ST time to about 40 msec
would more than double that rate, giving about 20
queries per second. Clearly, if you were to know how
long it takes for your vehicle to reply, you would be
able to improve on the scan rate, by adjusting the ST
time.
>01 00 2
The ELM329 will send the 01 00 request, and will
return to the prompt state immediately after the second
response is received (or after the ST timer times out if
the response does not arrive). In this way, every
response is shortened by that ST time. This can
increase the polling rate considerably for most vehicles
(many users report achieving 50 or more samples per
second).
In general, you do not know how many ECUs will
respond to a request, so this feature is best used by
software that can query the vehicle to determine the
number of responses that will be coming, store that
value, and then use it to set the responses digit for
subsequent requests.
It is not easy to tell how fast a vehicle replies to
requests. For one thing, requests all have priorities
assigned, so responses may be fast at some times,
and slower at others. Even when a response begins,
different frames within a multi-frame response can
have very different delays. The physical measurement
of the time is not easy either - it requires expensive
test equipment just to make one measurement. To
help with this, the ELM329 includes a feature called
‘Adaptive Timing’.
Adaptive Timing actually measures the response
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
48 of 87
ELM329L
SAE J1939 Messages
The SAE J1939 CAN standard is being used by
many types of heavy machinery – trucks, buses, and
agricultural equipment, to name a few. It uses the
familiar CAN (ISO 11898) physical interface, and
defines its own format for data transfer (which is very
similar to the ISO 15765 standard that is used for
automobiles).
define their own proprietary PGNs.
The ID portion of a J1939 CAN frame is always 29
bits in length. It provides information as to the type of
message that is being sent, the priority of the
message, the device address that is sending it, and
the intended recipient. Information within the ID bits is
divided roughly into byte size pieces as follows:
The following will discuss a little of how data is
transferred using the J1939 standard. Considerably
more information is provided in the Society of
Automotive Engineers (SAE) standards documents, so
if you are going to be doing a lot of work with J1939, it
may be wise to purchase copies of them. At minimum,
the J1939-73 diagnostics, the J1939-21 data transfer,
and the J1939-71 vehicle application documents
should be purchased. Another great reference for this
work is the HS-J1939 two book set, also available from
the SAE.
The current version of the J1939 standard allows
only one data rate (250 kbps), but work is underway to
amend the standard so that an alternate rate of
500 kbps will also be allowed. For the purpose of this
discussion, the data rate is not important - it is the
format of the information that we will discuss.
All CAN messages are sent in ‘frames’, which are
data structures that have ID bits and data bytes, as
well as checksums and other items. Many of the J1939
frames are sent with eight data bytes, although there is
no requirement to do so (unlike ISO 15765, which
must always send eight data bytes in each frame). If a
J1939 message is eight bytes or less, it will be sent in
one frame, while longer messages are sent using
multiple frames, just like ISO 15765. When sending
multiple frames, a single data byte is used to assign a
‘sequence number’, which helps in determining if a
frame is missing, as well as in the reassembly of the
received message. Sequence numbers always start
with 01, so there is a maximum of 255 frames in a
message, or 1785 bytes.
3 bits 2 bits
Priority
8 bits
8 bits
8 bits
PDU
Format
Destination
Address
Source
Address
PDU1 Format
The data structure formed by the 29 bit ID, and the
associated data bytes is called a Protocol Data Unit, or
PDU. When the ID bits have a destination address
specified, as is shown above, it is said to be a PDU1
Format message.
The two bits shown between the Priority and the
PDU Format are known as the Extended Data Page
(EDP), and the Data Page (DP) bits. For J1939, EDP
must always be set to ‘0’, while the DP bit is used to
extend the range of values that the PDU Format may
have. While the DP bit is typically ‘0’ now, that may not
be true in the future.
Not all J1939 information is sent to a specific
address. In fact, one of the unique features of this
standard is that there is a large amount of information
that is being continually broadcast over the network,
with receivers using it as they see fit. In this way,
multiple devices requiring the same information do not
have to make multiple requests to obtain it, information
is provided at regular time intervals, and bus loading is
reduced.
If information is being broadcast over the network
to no particular address, then the Destination Address
field is not required. The eight bits can be put to better
use, possibly by extending the PDU Format field. This
is what is done for a PDU2 Format frame, as shown
here:
One major feature of the J1939 standard is its very
orderly, well defined data structures. Related data is
defined and specified in what are called ‘parameter
3 bits 2 bits
Priority
8 bits
8 bits
8 bits
groups’. Each parameter group is assigned
a
PDU
Format
Group
Extension
Source
Address
‘parameter group number’, or PGN, that uniquely
defines that packet of information. Often, the
parameter groups consist of eight bytes of data (which
is convenient for CAN messages), but they are not
restricted to this. Many of the PGNs, and the data
within them (the SPNs) are defined in the J1939-71
document, and manufacturers also have the ability to
PDU2 Format
So how does one know if they are looking at a
PDU1 Format frame that contains an address, or a
PDU2 Format frame that does not? The secret lies in
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
49 of 87
ELM329L
SAEJ1939Messages(continued)
the values assigned to the PDU Format field. If the
PDU Format value begins with ‘F’ (when expressed as
a hexadecimal number), it is PDU2. Any other value
for the first digit means that it is a PDU1 Format frame,
which contains an address.
once, as shown below, or they may be set in two steps
(using the AT CP and AT SH commands). The two
step process may be useful if you only want to change
some of the ID bits rather than all of them (the priority
values only rarely change, so it’s often quicker to use
the three byte AT SH command, and leave the priority
bits unchanged). Note that whether you use the
AT CP, or the four byte AT SH command, the three
most significant bits are ignored by the ELM329.
This has tried to cover the basics of the J1939
message structure, but if you want more information,
look at the standards mentioned previously. One other
one that gives good examples of actual data is J1939-
84 which describes the compliance tests and shows
the expected responses.
Even at 250 kbps, J1939 data is transferred at a
rate that is more than ten times faster than the
previous heavy duty vehicle standard (SAE J1708),
and several of the light duty standards. As designers
build more into each system, the amount of
information required continues to grow, however, so
the 500 kbps version of J1939 will be a welcome
addition.
To summarize, PDU1 format frames are sent to a
specific address, and PDU2 frames are sent to all
addresses. To further complicate matters, however,
PDU1 frames may be sent to all addresses. This is
done by sending the message to a special ‘global
address’ which has the value FF. That is, if you see a
PDU1 message (where the first digit of the PDU
Format byte is not an F), and the Destination Address
is FF, then that message is being sent to all devices.
The J1939 recommended practices document
provides a list of addresses that should be used by
devices. It is particularly important to adhere to this list
with the ELM329, as the IC uses a fixed address
method and is not able to negotiate a different one, per
J1939-81. OBD Service Tools should use either F9 or
FA as their address (the ELM329 uses F9). If you wish
to change this, you can use the AT TA (tester address)
command, or simply define it with the header.
Headers (ID bits) are assigned using the Set
Headers command. All 29 bits may be assigned at
>AT SH ww xx yy zz
5 bits
only
PDU
Format
Destination
Address
Source
Address
Priority
5 bits
only
>AT CP vv
>AT SH xx yy zz
Setting the J1939 CAN ID
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
50 of 87
www.elmelectronics.com
ELM329L
Using J1939
This section provides a few examples which show
is called a DM1 or ‘diagnostic message 1’, which
provides the currently active diagnostic trouble codes.
DM1 is one of more than 50 predefined diagnostic
messages, and is special in that it is the only one that
is broadcast continually over the bus at regular
intervals. The ELM329 has an AT command that can
be used to obtain the DM1 trouble codes:
how to monitor an SAE J1939 data bus, and how to
make requests of devices that are connected to it.
To begin, you will need to configure the ELM329
for J1939 operation, at the correct baud rate. Protocol
A is predefined for J1939 at 250 kbps, which is what
most applications require. To use protocol A, send:
>AT SP A
>AT DM1
Protocols B to F may also be used with J1939, if
you wish to experiment with other baud rates. To use
them for J1939, the CAN options (PP 2C, 2E, etc.)
must be set to 42, and the baud rate divisor (PP 2D,
2F, etc.) must be set to the appropriate value. Perhaps
the simplest way to provide an alternate rate is to use
the AT PB command, as it allows you to set both the
options byte (which is always 42), and the baud rate
divisor (which is 500k ÷ the desired baud rate) at the
same time. For example, to set protocol B for J1939
operation at 500 kbps, simply send:
If you are connected to a vehicle, you should now
see messages printed at one second intervals. If you
are only connected to a single device (for example,
with a simulator on the bench, or to a device with a
single CAN data port), you may see data with
<RX ERROR printed beside it. This is because the
receipt of the data is not being acknowledged by any
device on the bus (certainly not the ELM329, as it is by
default a completely silent monitor). See our ‘AN05 -
Bench Testing OBD Interfaces' application note for
more information on this, and some advice on what to
do. If you are not connected to a vehicle, and are
having trouble receiving data, try sending:
>AT PB 42 01
then send:
>AT CSM 0
>AT SP B
and there should be no more RX ERRORs. Once you
have this sorted out, repeat the request. If all goes
well, you should see several replies, similar to this:
to select it. Note that this setting will not be maintained
if the IC is reset, so if you want a more permanent
setting, you should store the values in PP 2C and 2D.
Once the protocol is set, then you are ready to go.
There is no need to adjust anything else (timing, etc.)
as that is all done for you.
00 FF 00 00 00 00 FF FF
00 FF 00 00 00 00 FF FF
You will likely need to stop the flow of data by
pressing any key on the keyboard. This is because the
DM1 command is actually a special form of a
monitoring command, and all monitoring needs to be
stopped by the user. The response means that there
are currently no active trouble codes, by the way.
To see the exact same response, you can also
Monitor for PGN 00FECA (which is the code for DM1):
If you do wish to adjust the timing, you should be
aware that the ELM329 provides the ability to extend
the AT ST time by switching a x5 timer multiplier on
and off (see the JTM5 command). This may be useful
when requesting data that will have a multiline
response while similar data is already flowing. Since
there can be only one message like this at a time on
the bus, the response to your request would have to
wait while the initial response completes (and this
could take more than the normal ST time since
broadcast responses must be spaced at least 50 msec
apart). If you know that a reply should be coming, and
you are seeing ‘NO DATA’ responses, then send
AT JTM5 and try it again, as that may be the problem.
Restore the timer multiplier to normal with AT JTM1.
Once the J1939 protocol is selected, the ELM329
is ready for a command. The first one that we will use
>AT MP 00FECA
Note that the ELM329 requires that you send hex
digits for all data, as shown above (and as used by all
other protocols). Many of the PGN numbers are listed
in the J1939 standard as both a decimal and a hex
number, so be careful to choose the hex version.
You will likely find in your testing that the PGNs
you encounter often begin with a 00 byte as above. To
simplify matters for you, the ELM329 has a special
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
51 of 87
ELM329L
Using J1939 (continued)
version of the MP command that will accept a four digit
PGN, and assumes that the missing byte should be
00. An equivalent way to ask for 00FECA is then:
formatted output as shown above. Beginning with v2.0,
the ELM329 now displays both the EDP and the DP
bits (the EDP should always be 0 for J1939, but other
protocols do use this bit).
If you prefer to see the ID bits separated into bytes
instead, simply turn off the J1939 header formatting
with:
>AT MP FECA
which is a little more convenient. Please note that the
MP command is very similar to the MA command,
except that it is able to process multiline responses. If
you are simply interested in receiving single line
broadcast messages, then using the CRA and MA
commands may be an option.
>AT JHF0
Repeating the above request would then result in
a response of this type:
Just as the ELM329 allows the number of
ISO 15765 responses to be specified when a request
is made, it also allows you to specify the number of
messages to retrieve when monitoring for PGNs. It is
done in the same way - for example, to specify only
two responses for the MP FECA command, send:
>AT MP FECA 1
18 FE CA 00 00 FF 00 00 00 00 FF FF
The differences are clearly seen. If displaying the
information in this manner, remember that the first
‘byte’ shown actually represents five bits, and of them,
the leftmost three are the priority bits.
>AT MP FECA 2
The MP command is very useful for getting
information in a J1939 system, but not all information
is broadcast. Some information must be obtained by
making a query for it. Just like the other OBD requests
where you specify the information that you need (with
a mode and a PID), to make a query in a J1939
system, you provide the PGN number and the system
responds with the required data.
For example, to request the current value of the
engine coolant temperature (which is part of PGN
00FEEE), you would send a request for PGN 00FEEE,
and extract the data. To do this, send:
This saves having to send a character to stop the
flow of data, and also is very convenient when dealing
with multiline messages. While the standard OBD
requests allow you to define how many frames (ie
lines) of information are to be printed with a similar
single digit, the single digit with the MP command
actually defines how many complete messages to
obtain. For example, if the DM1 message is 33 lines
long, then sending AT MP FECA 1 will cause the
ELM329 to show all 33 lines, then stop monitoring and
print a prompt character.
By default, all J1939 messages have the ‘header’
information hidden from view. In order to see this
information (actually the ID bits), you will need to turn
the header display on:
>00FEEE
to which you might receive:
6 0FEEE 00 8C FF FF FF FF FF FF FF
>AT H1
if the headers were on. Note that if you request a PGN
that is already being broadcast, you may very well
receive many replies, as the ELM329 configures itself
to receive anything that is related to the PGN
requested.
A single response to FECA might then look like:
>AT MP FECA 1
6 0FECA 00 00 FF 00 00 00 00 FF FF
Notice that the ELM329 separates the priority bits
from the PGN information. The ELM329 also uses only
one digit to represent the two extra PGN bits, both of
which may seem unusual if you are used to different
software. We find this a convenient way to show the
actual J1939 information in the header. Note that
version 1.0 of the ELM329 always assumed that the
Extended Data Page (EDP) bit was 0 when printing
If you are familiar with the J1939 standard, you will
be aware that it actually specifies a reverse order for
the sending of the data bytes of a PGN request. That
is, the data bytes for the above request are actually
sent as EE FE 00, and not as 00 FE EE. Since it can
be very confusing to have to reverse some numbers
and not others, the ELM329 automatically handles this
for you, reversing the bytes provided. In this way, you
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
52 of 87
ELM329L
Using J1939 (continued)
can directly request PGNs using numbers as they are
written on the page (if they are written as hex digits),
and the ELM329 will make it work for you. If you do not
want the ELM329 to alter the byte order, the feature
can be disabled (by sending an AT JS command).
The ELM329 always assumes that when you start
making requests of this type, you do not know what
devices are connected to the J1939 bus. That is, by
default the ELM329 sends all requests to the 'global
address' (ie all devices), and then looks for replies.
Often, this works well, but J1939 devices are not
required to respond to such general inquiries, and may
not if they are busy. For this reason, it is usually better
to direct your queries to a specific address, once it is
known.
In order to determine the address to send to, you
may have to monitor the information on the bus for a
while. Make sure that the headers (ID bits) are being
displayed, and note what is shown in the Source
Address position, which is immediately before the data
bytes. In the previous example, this would be 00
(which J1939 defines as the address for engine #1).
As an example, let us assume that it is engine #1 that
you wish to direct your queries to. To do this, you will
want to change the Destination Address from FF (the
global address) to 00 (engine #1).
address for you.
Once the ELM329 has been configured to send all
messages to address 00, repeat the request:
>00FEEE
6 0E8FF 00 01 FF FF FF FF EE FE 00
This response is of the ‘acknowledgement’ type
(E8), which is being broadcast to all (FF) by the device
with address 00. The last three data bytes show the
PGN requested, in reverse byte order, so we know this
is a response to our request. Looking at the other data
bytes, the first is not 00 (which we would expect for a
positive acknowledgement), it is 01 which means
negative acknowledgement. Since all requests to a
specific address must be responded to, the device at
address 00 is responding by saying that it is not able
to respond. That is, retrieve the information using the
MP command.
If the ECU had been able to reply to the request,
the format of the response would have been slightly
different. For example, if a request for engine run time
(PGN 00FEE5) had been made, the response might
have been like this:
>00FEE5
6 0FEE5 00 80 84 1E 00 FF FF FF FF
By default, the ELM329 uses 6 0EAFF F9 for the
ID bits of all requests (or 18 EA FF F9 if you prefer).
That is, it uses a priority of 6, to make a request (EA)
to the global address (FF) by the device at F9 (the
scan tool). Since you only wish to alter the EAFF F9
portion of the ID bits and not the priority, you may do
this with the three byte set header command:
Notice that the PGN appears in the header for
these types of replies, and the data bytes are those
defined for the SPNs in the PGN.
All responses to a request are printed by the
ELM329, whether they are a single CAN message, or
a multisegment transmission as defined by the
transport protocol (J1939-21). If the responses are
multisegment, the ELM329 handles all of the
negotiation for you. As an example, a multisegment
response to a DM2 request might look like this:
>AT SH EA 00 F9
As an aside, note that hexadecimal EA00 is the
same as decimal 59904. For this reason, messages
with EA for the PDU Format value are often referred to
as PGN 59904 requests.
>00FECB
012
After making the above change, all data requests
will be directed to the engine, so don’t forget to change
the headers if you wish to again make global requests.
Note that the AT SH command allows you to change
the source (or tester) address at will, so be careful with
this as addresses should really be negotiated using
the method described in J1939-81 and you might
conceivably choose an address that is already in use.
The current version of the ELM329 does not support
J1939-81 address negotiation, so can not obtain an
7 0EBF9 00 01 04 FF 50 00 04 0B 54
7 0EBF9 00 02 00 00 01 5F 05 02 31
7 0EBF9 00 03 6D 05 03 03 FF FF FF
if the headers are on, and would appear as:
>00FECB
012
01: 04 FF 50 00 04 0B 54
02: 00 00 01 5F 05 02 31
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
53 of 87
ELM329L
Using J1939 (continued)
03: 6D 05 03 03 FF FF FF
if the headers are off. Note that multiframe messages
always send eight bytes of data, and fill in unused byte
positions with FFs.
With the headers off, the multiline response looks
very similar to the multiline responses for ISO15765-4.
The first line shows the total number of bytes in the
message, and the other lines show the segment
number, then a colon, and the data bytes following.
Note that the byte count is a hexadecimal value (ie the
‘012’ shown means that there are 18 bytes of data).
The one line that shows the total number of data
bytes is actually called a ‘Connection Management’ or
‘TP.CM’ message. It has a specific format, but the only
bytes that are typically relevant are those that provide
the total message size in bytes. In order to see the
other bytes, you must turn CAN Auto Formatting off
(AT CAF0), and then repeat the request.
This has been a brief description of how to use
the ELM329 in a typical J1939 environment. If you can
monitor for information, make global requests as well
as specific ones, and receive single or multiframe
responses, then you have the tools necessary to at
least diagnose most vehicle problems.
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
54 of 87
ELM329L
The FMS Standard
Several European heavy duty truck and bus
appropriate PGN number. We should caution that
some information (VIN, software version, etc.) is only
transmitted every 10 seconds, so some patience is
required when waiting for the data.
The FMS standard is completely open, and still
evolving (as of this writing, the latest update was
version 2.00, dated November 11, 2010). For more
information, visit the web sites:
manufacturers have joined to form an organization for
standardizing the way in which information is retrieved
from these large vehicles. The result of their work is
the FMS (or Fleet Management Systems) Standard,
and the Bus-FMS Standard.
The FMS standard is based on a subset of the
250 kbps J1939 protocol, which uses only broadcast
messages for the information. In order to not
compromise the integrity of the vehicle’s CAN bus, the
standard also specifies a gateway device to provide
separation between (potentially unskilled) users and
the critical control information on the vehicle.
FMS Standard
http://www.fms-standard.com
The information contained in the FMS messages
is defined by PGNs, using the same PGN numbers as
for J1939. The difference is that they only define a
small subset of those specified by J1939.
Bus FMS Standard
http://bus-fms-standard.com
To monitor the information provided by an FMS
gateway, simply use the AT MP command with the
The NMEA 2000 Standard
We are occasionally asked about support for the
NMEA 2000 marine standard. Elm Electronics does
not provide specific support for this protocol, but our
ELM329 integrated circuit is very capable of working
with the protocol.
While the physical connectors may look quite a bit
different than those used for J1939, the CAN interface
and the data format is almost identical to that of the
J1939 standard. NMEA 2000 uses a 250 kbps data
rate, so the easiest way to get started is to select the
ELM329’s predefined protocol A. This is done with the
set protocol to A command:
PGN 1F20, and get 0 replies. To monitor for PGN
1F200, you must send:
>AT MP 01F200
If you keep the above in mind, the ELM329 will
prove to be a handy tool to use while experimenting
with NMEA 2000. It does have a couple of limitations
that must be kept in mind, though. As mentioned with
J1939, it is not capable of address negotiation. Also,
the ELM329 does not currently support the Fast
Packet protocol, which may be an issue for some
users.
For more information on the NMEA 2000 standard,
visit the NMEA web site:
>AT SP A
When you are finished and want to use the
ELM329 for standard OBDII protocols, don’t forget to
send the AT SP 0 command to reset it.
www.nmea.org
Many of the PGNs used for NMEA 2000 have
values that are greater than 65535, so the DP bit is
usually set. To monitor for most PGNs then, you can
not use the short version of the MP command. For
example, to monitor for the Engine Parameters PGN
(127488 or hex 1F200), you can not use:
>AT MP 1F200
as the ELM329 actually interprets that as a request for
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
55 of 87
ELM329L
Periodic (Wakeup) Messages
Some applications require that there be periodic
messages sent by the test equipment (scan tool) in
order to maintain a connection. If these messages do
not arrive in a timely fashion, the ECU will close the
connection and go into a low power ‘sleep’ mode. In
order to stop the ECU from going to sleep, you may
need to send what we term as ‘wakeup’ messages.
Some texts also refer to these as CAN periodic
messages.
The ELM329 does not send wakeup messages by
default - you must enable the sending of them (and
you may also need to define what you wish to have
sent).
There are a few conditions that need to be met
before the ELM329 will send periodic messages. First,
you must be selected for a defined CAN protocol (ie
not set to protocol 0), and the protocol must be in the
‘normal’ mode of operation. That is, it must be in the
mode where you send and receive messages, not in
one of the ‘monitoring’ modes (as entered with AT MA,
DM1, or MP). In addition, either Wakeup Mode 1 or 2
must be chosen, either by command (see below) or by
PP 23.
>AT WD 01 3E
OK
with the 11 bit example from above, will result in the
following being sent by the ELM329:
7DF 01 3E
The difference here is that the data length is no
longer 8 bytes - it has been set to two, as that is the
number of data bytes that you provided (so if you want
the message to use 8 bytes, you need to provide 8
bytes).
Once you have the wakeup header and data set
as you want them, you are ready to begin sending the
messages. To do this, simply set the Wakeup Mode:
>AT WM 1
OK
Enabling Wakeup Mode 1 results in the wakeup
messages being sent at a constant rate, no matter
what information is going back and forth on the CAN
bus. Wakeup Mode 2 is the other option - it causes the
wakeup timer to be reset after every message is sent
by the ELM329, and will only insert a wakeup
message if the normal data messages are not being
sent often enough.
Once enabled, the ELM329 will send the following
message by default:
7DF 01 3E 00 00 00 00 00 00
The time interval between the wakeup messages
can be adjusted in 20.48 msec increments using the
AT SW command. Simply provide the setting that you
require as two hex digits - for example, a setting of:
Note that this default wakeup message uses an 11
bit ID, and sends 8 data bytes. This message will be
sent, even if the current protocol uses a 29 bit ID. If
you wish to send a 29 bit ID, then you will need to
define one with the Wakeup Header command:
>AT SW 92
OK
>AT WH 18 DB 33 F1
OK
will result in a timer setting of about 3 seconds (92 hex
is 146 decimal, giving 2.99 seconds). The default timer
setting is 62 (98 decimal) or 2.0 seconds.
To turn off the wakeup messages at any time,
select Wakeup Mode 0:
and from that point on, the wakeup message will be
sent with the 29 bit header (the ELM329 always uses
the last ID that was defined using AT WH). Of course,
the above header is only an example - you may define
any values that you wish for the ID bits.
Setting the actual content of the Wakeup Message
is accomplished with either the Wakeup Data (AT WD)
or the Wakeup Message (AT WM) commands. They
are exactly the same (we’ve kept the WM that the
ELM327 used, and the WD is new). The ELM329 does
not format the data provided in any way, and it does
not pad it out to 8 bytes. Whatever you provide will be
used exactly as you present it. For example, sending:
>AT WM 0
OK
The sending of wakeup messages will also be
cancelled if you enter into one of the monitoring modes
by using the AT MA, DM1 or MP commands.
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
56 of 87
ELM329L
Altering Flow Control Messages
A CAN message provides for only eight data bytes
per frame of data. Of course, there are many cases
where the data which needs to be sent is longer than 8
bytes, and ISO 15765 has made provision for this by
allowing data to be separated into segments, then
recombined at the receiver.
To send one of these multi-line messages, the
transmitter in a CAN system will send a ‘First Frame’
message, and then wait for a reply from the receiver.
This reply, called a ‘Flow Control’ message contains
information concerning acceptable message timing,
etc., and is required to be sent before the transmitter
will send any more data. For ISO 15765-4, the type of
response is well defined, and never changes. The
ELM329 will automatically send this ISO 15765-4 Flow
Control response for you as long as the CAN Flow
Control option is enabled (CFC1), which it is by
default.
and then you can set the mode:
>AT FC SM 1
OK
From this point on, every First Frame message
received will be responded to with the custom
message that you have defined (7E8 00 11 22 in this
example). Note that the number of bits in the flow
control header does not have to match the number in
the active protocol (you may define a 29 bit header for
11 bit systems, etc.)
The third mode currently supported allows the
user to set the data bytes which are to be sent. The ID
bits (header bytes) in this mode are set to those which
were received in the First Frame message, without
change. To use this mode, first define your data bytes,
then activate the mode:
The ELM329 allows you to customize how it
responds when it needs to send a Flow Control
message, by changing the Flow Control ‘modes’. You
can leave it as a fully automatic response (mode 0),
can provide only the data bytes that you want sent
(mode 2) or can define both the header (ID bits) and
the data bytes (mode 1).
The default Flow Control mode is number ‘0’. At
any time while you are experimenting, if you should
wish to restore the automatic Flow Control responses
(for ISO 15765-4), simply change the mode to 0:
>AT FC SD 30 00 00
OK
>AT FC SM 2
OK
For most people, there will be little need to
manipulate these ‘Flow Control’ messages, as the
defaults are designed to work with the CAN OBD
standards. If you wish to experiment, these special AT
commands offer that control for you.
The following chart summarizes the currently
supported flow control modes:
>AT FC SM 0
OK
FC
Mode
ELM329
Provides
User
Provides
This will immediately restore the responses to their
default settings.
ID Bits &
Data Bytes
Mode 1 has been provided for those that need
complete control over their Flow Control messages. To
use it, simply define the CAN ID (header) and data
bytes that you require to be sent in response to a First
Frame message. Note that if you try to set the mode
before defining these values, you will get an error:
0
1
2
no values
ID Bits &
Data Bytes
no values
ID Bits
Data Bytes
>AT FC SM 1
?
Flow Control Modes
You must set the headers and data first:
Note that the ELM329 will only send Flow Control
messages if the current data format is ISO 15765-4.
>AT FC SH 7E8
OK
>AT FC SD 30 00 00
OK
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
57 of 87
ELM329L
Using CAN Extended Addresses
Some vehicles with CAN interfaces use a data
format that is slightly different from what we have
described so far. The data packets look very similar,
except that the first byte is used for the receiver’s (ie
target’s) address. The remaining seven bytes are used
as described previously.
We refer to this type of addressing as ‘CAN
Extended Addressing’, and provide support for it with
the AT CEA commands. Perhaps an example would
better describe how to use them.
>AT SH 7B0
OK
Notice that there was a flow control message that
was sent in this group, but it’s not quite the same as
the one for OBD systems. For this reason, you’ll need
to define your own flow control with the following three
statements (we won’t show the OK’s any more, to
save space):
>AT FC SH 7B0
Here is a portion of a data transfer that was taken
from a vehicle. For the moment, ignore the first data
bytes on each line and only look at the remaining data
bytes (that are outlined in grey):
>AT FC SD 04 30 FF 00
>AT FC SM1
The final setup statement that you will need is to
tell the ELM329 to send to CAN Extended Address 04:
7B0 04 02 10 81 00 00 00 00
7C0 F1 02 50 81 00 00 00 00
7B0 04 02 21 A2 00 00 00 00
7C0 F1 10 16 61 A2 01 02 05
7B0 04 30 FF 00 00 00 00 00
7C0 F1 20 DF 01 00 04 09 01
7C0 F1 21 02 05 DF 01 00 04
7C0 F1 22 09 01 00 04 01 00
>AT CEA 04
Now everything is configured. Next, tell the IC to
use this protocol, and to bypass any initiation (as it is
not standard OBD, and would likely fail):
>AT SP B
>AT BI
If you are familiar with the ISO 15765 data format,
you will be able to recognize that the data bytes shown
inside the box seem to conform to the standard. The
rows that begin with 02 are Single Frames, the one
that starts with 10 is a First Frame, while the one with
30 is a Flow Control, and the others are Consecutive
Frames.
The remaining bytes, shown outside the box, are
the standard 11 bit CAN ID, and an extra address
byte. The lines with F1 for the extra address are
directed to the scan tool (all scan tools generally use
F1 as the default address), and the other lines are
being sent to the vehicle’s module (at address 04).
The ELM329 is able to handle these types of
messages, but does require some setup. For example,
if the messages use 11 bit IDs with ISO 15765
formatting, and the baud rate is 50 kbps, then the PB
command to configure protocol B is:
That’s all. To exactly reproduce the flow of data
shown, you only need to send the relevant data bytes
and the ELM329 will add the rest:
>10 81
50 81
>21 A2
016
0: 61 A2 01 02 05
0: DF 01 00 04 09 01
1: 02 05 DF 01 00 04
2: 09 01 00 04 01 00
Notice that for some reason, this vehicle has sent
two segment 0’s, but that just means that it doesn’t
exactly follow the ISO 15765 protocol. The above
shows what the responses would look like with
formatting on, and headers off. If you change either,
the data exchange would look more like what we
initially showed.
>AT PB 81 0A
OK
Next, we’ll want to receive all messages with an ID
of 7C0, and send with an ID (header) of 7B0:
>AT CRA 7C0
OK
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
58 of 87
ELM329L
CAN Input Frequency Matching
Most modern vehicles have a CAN network
connected to pins 6 and 14 of the OBD connector. At
one time, however, the use of these pins was left to
the vehicle manufacturer, and a number of different
systems were connected to them.
may seem a little complicated, but what it really says is
that for the default settings, a send is allowed if the
input signal frequency matches the CAN setting (250
or 500 kbps), or if there appears to be no signal. In
addition, if the user is trying a non-standard OBD
frequency, but a standard frequency is received, a
send will not be allowed.
All bits of PP 28 are set to 1 by default (requiring
frequency matching, unless no signal is detected), but
may be changed at any time - see the Programmable
Parameters section for details.
This logic is only used while searching for a valid
protocol. Once a particular protocol is considered to be
active, no further frequency checks are made (as it is
time consuming). Note that if you should use the AT BI
command to bypass the initiation process, this
frequency matching test will also bypassed.
In order to prevent the disruption of any connected
systems while the ELM329 is searching for a protocol
(it sends out requests during a search), the ELM329
now performs several tests on these wires. Prior to
firmware version 2.1, the tests simply looked for
activity on the wires but were not frequency selective.
This meant that, for example, vehicles that had a
speedometer signal connected to either pin might be
seen as a valid CAN network. and the ELM329 may
have sent a request on these wires. The new firmware
requires that the measured input frequency matches
that selected by the CAN protocol before any test
message is sent.
The diagram below shows how the logic works. It
signal is 500 kbps
CAN Rx
(pin 24)
setting is
500 kbps
PP 28, b7 is 0
signal is 250 kbps
allow a
CAN send
Signal
Processing
setting is
250 kbps
PP 28, b6 is 0
signal is not 250 or 500 kbps
setting is not
250 or 500 kbps
input is quiet
PP 28, b0 is 1
Send Logic While Searching for a Protocol
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
59 of 87
www.elmelectronics.com
ELM329L
CAN (Single Wire) Transceiver Modes
The ELM329 was designed with two wire CAN
(OBDII) applications in mind, but there is no reason
that it can not be used for single wire CAN applications
(SAE J2411, etc.), as well. The data format remains
much the same on the CAN networks - it is really the
physical interface that differs.
Single wire CAN transceiver chips are available
and should be used when connecting the ELM329 to
single wire CAN networks. These ICs usually provide
mode inputs which are used to change the state of the
device - to put it into low power sleep mode, set the
output to high voltage (12V) mode, etc. The table
below shows the four modes typically supported by
single wire CAN transceiver ICs, and the mode inputs
most often used for each.
The ELM329 provides two output pins (M0 and
M1) that may be used to set the modes for a single
wire CAN transceiver. After every reset or AT D
command, the level at pins 21 and 22 will be set
according to PP 20. Note that firmware v1.0 set these
pins to a low level (mode = sleep) when the IC went to
low power mode, but the ELM329 no longer changes
the setting while in low power mode.
The M0 and M1 pin levels are controlled with the
Transceiver Mode commands. For example, if you
wish to put the transceiver into the high voltage
wakeup mode, simply send;
>AT TM 2
OK
and to restore the mode to normal, send:
TM
#
M1
M0
>AT TM 3
OK
Mode
(pin 21) (pin 22)
0
1
2
3
0
0
1
1
0
1
0
1
Sleep
If you do not require these pins for a single wire
CAN application, they may be used as general
purpose outputs., much like the Control output.
High Speed
High Voltage Wakeup
Normal
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
60 of 87
www.elmelectronics.com
ELM329L
The CAN Monitor (pin 11)
Version 2.0 of the ELM329 introduced a CAN
monitor module that could be used to control the
switching to and from the Low Power mode. The
module uses an internal counter to continually monitor
the signal from the CAN transceiver, so it is not subject
to the same constraints that a software (polling)
monitor would experience.
The CAN Monitor counter is typically checked
every 20 msec to see if there has been any activity. If
eight or more rising edges were detected (about 400
Hz), the ELM329 will consider the input to be active,
and will remember this. Should activity stop, this can
initiate the Low Power mode of operation (see the
section following). Similarly, if CAN activity is stopped
while in Low Power mode, the reappearance of a
signal can cause a switch to the normal (full power)
mode. While you are able to stop the switch to low
power on the loss of CAN activity (PP 0F, bit 7), the
circuit will always return to normal should the CAN
signal reappear while the ELM329 is ‘sleeping’ (this
can not be blocked).
The signal presented to pin 11 does not have to
be from a CAN system. If you prefer, you might
connect another signal such as a tachometer or
speedometer output. This input has Schmitt trigger
waveshaping, advances the counter on the rising edge
of the waveform, and can detect pulses as narrow as
30 nsec.
Note that this input also performs a dual function.
Should no CAN activity be detected on the pin prior to
switching to Low Power mode, the flashing of the
Active LED while in Low Power mode will be
determined by the level on the pin (high = flash for
16 msec every 4 seconds, low = off). If there was CAN
activity, then PP 0F bit 4 controls this function.
Control Module Operation
The ELM329 provides two general purpose inputs
and one general purpose output that you may use for
your own control applications.
The two inputs are provided for monitoring signals
that you connect. They both have Schmitt trigger
wave-shaping on the input so can accommodate even
the slowest moving signals. These inputs should also
be protected from voltages which exceed the supply
limits (usually a series resistance is all that is need for
this).
To set the Control output high, simply send:
>AT C1
and to set it low, send:
>AT C0
Note that the Control output can also be selected
to show the internal CAN activity signal (as determined
by the CAN Monitor at pin 11). Simply set PP 0F bit 0
to ‘1’ in order to enable it.
Reading the level at an input is simply a matter of
sending the appropriate AT command. For pin 12,
send:
There are no restrictions on how you use these
inputs and the output. You may wish to control a
buzzer, perhaps an LED, or to monitor a switch input,
or voltage level - it’s up to you.
>AT IN1
0
and the ELM329 reports the logic level at the input (‘0’
in this case). Similarly, the level at pin 13 is read with:
>AT IN2
1
The Control output (pin 4) may be set to a high or
low level at any time with the AT C command. After a
power on reset, the Control output is always reset to a
low level.
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
61 of 87
ELM329L
Low Power Mode
Often, the ELM329 is connected to a vehicle for
that the master enable bit (bit 7 of PP 0E) be set to ‘1’
for them to function (which it is by default).
The first method is with an AT command. Simply
send ‘AT LP’ at the prompt:
only a short time, so power consumption is not of great
concern. Occasionally, the ELM329 may be connected
for longer times, however, possibly without the engine
running. For these applications, it is often desirable to
be able to put the circuit into a low power ‘standby’
state, and have it return to normal operation when
needed. The power control features of the ELM329 are
provided for this.
>AT LP
and the ELM329 will go to the low power mode after a
one second delay (which gives the controlling circuit a
little time to perform some housekeeping tasks).
When the ELM329 goes to the low power mode, it
first turns all five LED outputs off, then switches pin 14
There are four ways in which the ELM329 can be
placed into the low power standby mode (these are
shown pictorially in Figure 6 below). They all require
AT LP
command
1 sec
delay
Go to
Low Power
b7
input is
quiet
2 sec
delay
b6*
CAN Monitor
(pin 11)
activity
monitor
2 or 10 minute
delay
print
LP ALERT
b7*
1 min
remaining
b5*
not
monitoring
b7
print
ACT ALERT
input is
quiet
b4
RS232 Rx
(pin 18)
activity
monitor
5 or 20 minute
delay
b5
idle
(at prompt)
1 min
remaining
b3
b7
Note:
Bits with an asterisk (*) are for PP 0F.
All other bits are for PP 0E.
print
ACT ALERT
voltage
is low
voltage
monitor
IgnMon
(pin 15)
65 msec
debounce
b2
b7
Figure 6. Enabling the Low Power Mode
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
62 of 87
www.elmelectronics.com
ELM329L
Low Power Mode (continued)
to its low power setting. After a delay of 50 msec
(which gives the power supplies a chance to settle),
pin 16 is then set to its low power level, and then after
a further 50 msec, the chip reduces its power needs.
Note that while firmware version 1.0 also set M0, M1
and the Control output to a low level while in low
power mode, that is not the case beginning with v2.0 -
those 3 pins now remain unchanged.
The CAN Monitor (new with v2.0) offers another
way in which the ELM329 can be switched to the low
power mode. This module continually monitors pin 11
for a signal, and can initiate the low power mode if the
signal disappears for more than 2 (or 10) minutes. To
use this monitor, simply connect pin 11 to pin 24. By
default, the module is enabled with a timeout setting of
10 minutes, so is ready to go. Note that the CAN
Monitor signal is blocked from causing a switch to the
low power mode while the IC is in a monitoring mode
(AT MA, DM1 or MP). This feature is provided so that
the ELM329 does not power down while you are
troubleshooting with the monitor.
The third method is very similar in function to the
CAN Monitor. It allows automatic switching to the low
power mode when there has been no RS232 input for
a period of time (a good method if you have a system
where the controlling computer may be turned off at
any time). This method does not require any wiring
changes for the input as the connection is made
internally. This monitor provides slightly longer time
delays of either 5 or 20 minutes, to allow for the longer
time delays that you might encounter with a human
operator.
The final method that may be used to enter the
low power mode is by a low level appearing at the
ignition monitor input (pin 15 - IgnMon). It is enabled
by setting both b2 and b7 of PP 0E to ‘1’. Note that
when connecting to pin 15, care must be taken to not
pass excessive current (>0.5 mA) through the internal
protection diodes. Typically a circuit like this works well
(note that the Schmitt trigger input on pin 15 allows the
use of large value filtering capacitors):
The ignition/voltage monitor method uses a short
internal delay (‘debounce’) timer to be sure that the
low level is a legitimate ‘key off’, and not just noise
spikes. As with the previous two methods, when the
low power mode is initiated, the ELM329 will send an
alert message (‘LP ALERT’), wait 2 seconds, and will
then begin low power mode.
The AT IGN command can always be used to
read the level at pin 15, regardless of the setting of the
PP 0E enable bits. This may be used to advantage if
you wish to manually shut down the IC using your own
timing and criteria. Recall that the alternate function for
pin 15 is the RTS input which will interrupt any OBD
processing that is in progress. So, if the ELM329
reports being interrupted (ie ‘STOPPED’), you can
then check the level at pin 15 with the AT IGN
command, and make your own decisions as to what
should be done. For that matter, you don’t even need
to reduce the power based on the input - you might
possibly do something entirely different.
Having put the ELM329 into low power mode, you
will need a means to wake it up. There are several
ways in which you may do this (note that it does not
have to be the same method that put it into the low
power mode). Figure 7 is a block diagram which
shows the possible ways.
The first way that a wakeup may occur is by the
CAN Monitor sensing that there has been a change
from no CAN activity to there being activity (this is
shown as a ‘rising edge’ condition in the diagram). In
addition to this change in CAN activity, you may also
require that the CAN input was previously active by
setting (PP 0F) bit 3 to 0 (it is set to 1 by default). This
bit 3 switch was provided to more or less ensure that
the circuit only wakes up on CAN activity if that was
the cause of it going to low power mode. PP 0F bit 7
does not have to be set in order for the circuit to ‘wake
up’ on CAN activity.
The other two ways that may be used to ‘wake’ the
circuit are as shown in Figure 7. The first is with an
RS232 input that goes to the active (low) level for at
least 128 µsec. This may be accomplished by sending
a space or @ character if the baud rate is less than
about 57.6 kbps. At higher baud rates, it may be more
difficult to generate this width, so you might consider
temporarily shifting to a lower baud rate, or see if your
software can generate a ‘break’ signal. If you are
directly connected to a microprocessor, then you might
be able to generate a break signal or pulse output in
software.
47KW
+12V switched
by the ignition
0.1uF
22KW
16
15
14
329
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
63 of 87
ELM329L
Low Power Mode (continued)
The final method to wake the ELM329 is with a
low to high signal level transition at the IgnMon input. If
this is wired (through resistors) to a 12V signal that is
controlled by the ignition switch, then turning on the
ignition will also turn on the ELM329 circuit.
No matter how the ELM329 is brought back to full
power operation, it will always restore pin 14 first,
followed 50 msec later by pin 16, and then it will wait 1
second before proceeding with the startup. This 1 sec
period gives your external circuitry a little time to start
up before being expected to be fully functional. After
the 1 second period, the ELM329 will perform a partial
warm start (AT WS) and be ready for operation. We
say partial because several settings are not altered by
the wakeup (they were with v1.0). The settings that
remain unchanged are:
AT0, AT1, AT2 CAF0, CAF1
CEA
CFC0, CFC1
E0, E1
CSM0, CSM1 D0, D1
JTM1, JTM5
M0, M1
H0, H1
R0, R1
L0, L1
S0, S1
In addition, the protocol number is not reset (but
the protocol is closed).
This has discussed some of the aspects of using
the Power Control feature, from a logical perspective.
Also refer to the ‘Modifications for Low Power Standby
Operation’ section (page 80) for some of the electrical
design considerations.
CAN was active
before low power
b3*
CAN Monitor
(pin 11)
activity
monitor
rising edge
) detector
(
low level
at input
RS232 Rx
(pin 18)
1 sec
delay
(partial)
warm start
128 µsec min
pulse width
Go to
Full Power
b1
IgnMon
(pin 15)
1 or 5 sec
delay
rising edge
) detector
(
Figure 7. Returning to Normal Operation
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
64 of 87
www.elmelectronics.com
ELM329L
Programmable Parameters
The ELM329 contains several programmable
memory locations that retain their data even after
power is turned off. Every time the IC is powered up,
these locations are read and used to change the
default settings for such things as whether to display
the headers, or how often to send ‘wakeup’ messages.
The settings, or parameters, can be altered by the
user at any time using a few simple commands. These
Programmable Parameter commands are standard AT
Commands, with one exception: each one requires a
two-step process to complete. This extra step provides
some security against random inputs that might
accidentally result in changes.
04:01 F 05:FF F 06:F1 F 07:09 F
08:FF F 09:00 F 0A:0A F 0B:FF F
0C:68 F 0D:0D F 0E:9A F 0F:F8 F
10:FF F 11:FF F 12:FF F 13:FF F
14:FF F 15:FF F 16:FF F 17:FF F
18:FF F 19:FF F 1A:FF F 1B:FF F
1C:FF F 1D:FF F 1E:FF F 1F:FF F
20:03 F 21:FF F 22:62 F 23:00 F
24:00 F 25:00 F 26:00 F 27:FF F
28:FF F 29:FF F 2A:08 F 2B:02 F
2C:E0 F 2D:04 F 2E:E0 F 2F:0A F
30:42 F 31:01 F 32:F0 F 33:06 F
34:E0 F 35:0F F 36:FF F 37:FF F
The following pages list the currently supported
Programmable Parameters for this version of the
ELM329. As an example of how to use them, consider
PP 01 (shown on page 66) which sets the default state
for the AT H command. If you are constantly powering
your ELM329 and then using AT H1 to turn the
headers on, you may want to change the default
setting, so that they are always on by default. To do
this, simply set the value of PP 01 to 00:
You can see that PP 01 now shows a value of 00,
and it is enabled (oN), while the others are all off.
Another example shows how you might change
the CAN filler byte. Some systems use ‘AA’ as the
value to put into unused CAN bytes, while the ELM329
uses ‘00’ by default. To change the ELM329’s
behaviour, simply change PP 26:
>AT PP 26 SV AA
OK
>AT PP 01 SV 00
OK
>AT PP 26 ON
OK
This changes the value associated with PP 01, but
does not enable it. To make the change effective, you
must also type:
Again, PP 26 is of type ‘D’, so the above change
will not actually take effect until the AT D command is
issued, or the ELM329 is reset.
>AT PP 01 ON
OK
The Programmable Parameters are a great way to
customize your ELM329 for your own use, but you
should do so with caution if using commercial
software. Most software expects an ELM329 to
respond in certain ways to commands, and may be
confused if the carriage return character has been
redefined, or if the CAN response shows data length
codes, for example. If you make changes, it might be
best to make small changes and then see the effect of
each, so that it is easier to retrace your steps and
‘undo’ what you have done. If you get in too deeply,
don’t forget the ‘all off’ command:
At this point, you have changed the default setting
for AT H1/H0, but you have not changed the actual
value of the current AT H1/H0 setting. From the ‘Type’
column in the table on page 66, you can see that the
change only becomes effective the next time that
defaults are restored. This could be from a reset, a
power off/on, or possibly an AT D command.
With time, it may be difficult to know what changes
you have made to the Programmable Parameters. To
help with that, the ELM329 provides a Programmable
Parameter Summary (PPS) command. This simply
prints a list of all of the PPs, their current value, and
whether they are on/enabled (N), or off/disabled (F).
For an ELM329 v2.1 IC, with only the headers enabled
(as discussed above), the summary table would look
like this:
>AT PP FF OFF
No matter what software you use, you might get
into more serious trouble, should you change the baud
rate, or the Carriage Return character, for example,
and forget what you have set them to. The Carriage
Return value that is set by PP 0D is the only character
that is recognized by the ELM329 as ending a
>AT PPS
00:FF F 01:00 N 02:FF F 03:19 F
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
65 of 87
ELM329L
Programmable Parameters (continued)
command, so if you change its value, you may not be
able to undo your change. In this case, your only
recourse may be to force all of the PPs off with a
hardware trick.
When the ELM329 first powers up, it looks for a
jumper between pin 28 (the OBD Tx LED output) and
circuit common (VSS). If a jumper is in place, it will turn
off all of the PPs for you, restoring the IC to the factory
defaults. To use this feature, simply connect a jumper
to circuit common (which appears in numerous places
- pins 8 or 19 of the ELM329, pin 5 of the RS232
connector, one end of most capacitors, or at the OBD
connector), then hold the other end of the jumper to
pin 28 while turning the power on. When you see the
RS232 Rx LED begin to flash quickly, remove the
jumper – the PPs are off.
This feature should only be used when you get
into trouble too deeply, and it’s your only choice (since
putting a jumper into a live circuit might cause damage
if you put it in the wrong place).
Programmable Parameter Summary
The following pages provide a list of the currently
available Programmable Parameters. If a PP number
is not shown in this table, then it does not currently
have a function and it will not affect the operation of
the ELM329. All values shown are hexadecimal - the
ELM329 does not recognize decimal numbers.
Note that the ‘Type’ column indicates when any
changes will take effect. The four possible values are
as shown to the right:
I - the effect is Immediate,
D - takes effect after Defaults are restored
(AT D, AT Z, AT WS, MCLR or power off/on)
R - takes effect after a Reset
(AT Z, AT WS, MCLR or power off/on)
P - needs a Power off/on type reset
(AT Z, MCLR, or power off/on)
PP
Description
Values
Default
Type
00
Perform AT MA immediately after powerup or reset
00 = ON
FF = OFF
FF
R
(OFF)
01
03
04
06
07
09
0A
Printing of header bytes (AT H default setting)
00 = ON
FF = OFF
FF
D
D
D
R
I
(OFF)
NO DATA timeout time (AT ST default setting)
setting = value x 4.096 msec
00 to FF
00 to 02
00 to FF
01 to 0F
19
(102 msec)
Default Adaptive Timing mode (AT AT setting)
OBD Source (Tester) Address. Not used for J1939 protocols.
Last Protocol to try during automatic searches
Character echo (AT E default setting)
01
F1
09
00 = ON
FF = OFF
00
R
R
(ON)
Linefeed Character
00 to FF
0A
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
66 of 87
www.elmelectronics.com
ELM329L
Programmable Parameter Summary (continued)
PP
Description
Values
Default
Type
0C
RS232 baud rate divisor.
baud rate (in kbps) = 4000 ÷ (PP 0C value)
01 to FF
68
P
(38.4)
Here are some example baud rates, and the hex divisor to be used:
Baud Rate
(kbps)
PP 0C value
hex
dec
104
69
35
17
8
38.4
57.6
68
45
23
11
08
115.2
230.4
500
Notes:
1. The PP 0C value must be set using hex digits. The decimal
values are only shown for your convenience.
2. The ELM329 can only process continuous byte receives at
rates of about 700 kbps or less. If you need to connect at a
higher rate, delays will be required between the byte sends.
3. A value of 00 provides a baud rate of 9600 bps.
0D
0E
Carriage Return Character
used to detect and send line ends
00 to FF
00 to FF
0D
R
R
Power Control options
9A
(10011010)
Each bit of this byte controls an option, as follows:
b7: Master enable
0: off
1: on
if 0, pins 15 and 16 perform as RTS and Busy
(must be 1 to allow any low power functions)
b6: Pin 16 full power level
0: low
1: high
normal output level, is inverted when in low power mode
b5: Auto LP (RS232) control 0: disabled 1: enabled
allows low power mode if the RS232 activity stops
b4: Auto LP (RS232) timeout
0: 5 mins
1: 20 mins
no RS232 activity timeout setting
b3: Auto LP (RS232) warning 0: disabled
1: enabled
if enabled, says ‘ACT ALERT’ 1 minute before timeout
b2: Ignition control 0: disabled 1: enabled
allows low power mode if the IgnMon input goes low
b1: Ignition delay 0: 1 sec 1: 5 sec
delay after IgnMon (pin 15) returns to a high level, before
normal operation resumes
b0: reserved for future - leave set at 0
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
67 of 87
www.elmelectronics.com
ELM329L
Programmable Parameter Summary (continued)
PP
Description
Values
Default
Type
0F
More Power Control options
00 to FF
F8
R
(11111000)
Each bit of this byte controls an option, as follows:
b7: Auto LP (CAN) control
0: disabled
1: enabled
allows low power mode if the CAN activity stops
b6: Auto LP (CAN) timeout
0: 2 mins
1: 10 mins
1: enabled
no CAN activity timeout setting
b5: Auto LP (CAN) warning 0: disabled
if enabled, says ‘ACT ALERT’ 1 minute before timeout
b4: Active LED 0: off 1: flashes
setting during low power, if there was CAN activity on pin 11
b3: Previous CAN 0: required 1: ignored
wakeup on CAN activity may be set to require that there was
CAN activity prior to going to low power mode
b2: reserved for future - leave set at 0
b1: reserved for future - leave set at 0
b0: Control output
0:normal
1:CAN Monitor
if set to 1, the Control (pin 4) output follows CAN activity
(Control is a high level when there is CAN activity detected)
20
21
22
Default (Single Wire) Transceiver Mode
M0 - M1 pin setting during normal CAN operation (see page 25)
00 to 03
03
D
R
D
(normal)
Default CAN Silent Monitoring setting (for AT CSM)
FF = ON
00 = OFF
FF
(ON)
CAN wakeup message rate (AT SW default setting)
setting = value x 20.48 msec
00 to FF
00 to 02
62
(2.0 sec)
23
24
25
Default Wakeup Mode (AT WM setting)
00
D
D
D
(OFF)
CAN auto formatting (AT CAF default setting)
CAN auto flow control (AT CFC default setting)
00 = ON
FF = OFF
00
(ON)
00 = ON
FF = OFF
00
(ON)
CAN filler byte (used to pad out messages)
00
26
28
00 to FF
00 to FF
D
D
CAN Filter outputs (controls CAN sends while searching)
The bits of this byte control options, as follows:
FF
(11111111)
b7: 500 kbps match
b6: 250 kbps match
0: ignored
0: ignored
1: required
1: required
b5 to b1: reserved for future - leave set to 1
b0: send if bus is quiet 0: not allowed 1: allowed
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
68 of 87
www.elmelectronics.com
ELM329L
Programmable Parameter Summary (continued)
PP
Description
Values
Default
Type
29
Printing of the CAN data length (DLC digit) when printing header
bytes (AT D0/D1 default setting)
00 = ON
FF = OFF
FF
D
(OFF)
2A
CAN Error Checking (controls testing)
00 to FF
08
D
(00001000)
Each bit of this byte controls an option, as follows:
b7: ISO 15765 Data Length
0: accept any 1: must be 8 bytes
Allows acceptance of non-standard data without errors.
b6: ISO 15765 PCI=00 0: allowed 1: not allowed
Some vehicles send 00’s, which can be confusing.
b5: reserved for future - leave set to 0
b4: reserved for future - leave set to 0
b3: Wiring Test
0: bypass
1: perform
Certain wiring conditions may cause problems. This allows
a quick test, which weeds out some problems.
b2: reserved for future - leave set to 0
b1: reserved for future - leave set to 0
b0: reserved for future - leave set to 0
2B
2C
Protocol A (SAE J1939) CAN baud rate divisor.
01 to 40
02
R
R
(250 Kbps)
The baud rate is determined by the formula:
rate (in kbps) = 500 ÷ value
For example, setting this PP to 19 (ie. decimal 25) provides
a baud rate of 500/25 = 20 kbps.
00 to FF
E0
Protocol B (USER1) CAN options.
(11100000)
Each bit of this byte controls an option, as follows:
b7: Transmit ID Length
b6: Data Length
0: 29 bit ID
1: 11 bit ID
0: fixed 8 byte 1: variable DLC
b5: Receive ID Length
b4: baud rate multiplier
(see note 2)
0: as set by b7 1: both 11 and 29 bit
0: x1
1: x 8/7
b3: reserved for future - leave set at 0.
b2, b1, and b0 determine the data formatting options:
b2 b1 b0
Data Format
none
ISO 15765-4
SAE J1939
0
0
0
0
0
1
0
1
0
Other combinations are reserved for future updates – results will
be unpredictable if you should select one of them.
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
69 of 87
www.elmelectronics.com
ELM329L
Programmable Parameter Summary (continued)
PP
Description
Values
Default
Type
2D
Protocol B (USER1) baud rate divisor. See PP 2B for a description.
01 to 40
04
R
(125 Kbps)
2E
2F
30
31
32
33
34
35
Protocol C (USER2) CAN options. See PP 2C for a description.
Protocol C (USER2) baud rate divisor. See PP 2B for a description.
Protocol D (USER3) CAN options. See PP 2C for a description.
Protocol D (USER3) baud rate divisor. See PP 2B for a description.
Protocol E (USER4) CAN options. See PP 2C for a description.
Protocol E (USER4) baud rate divisor. See PP 2B for a description.
Protocol F (USER5) CAN options. See PP 2C for a description.
Protocol F (USER5) baud rate divisor. See PP 2B for a description.
00 to FF
01 to 40
00 to FF
01 to 40
00 to FF
01 to 40
00 to FF
01 to 40
E0
R
R
R
R
R
R
R
R
(11100000)
0A
(50 Kbps)
42
(01000010)
01
(500 Kbps)
F0
(11110000)
06
(95.2 Kbps)
E0
(11100000)
0F
(33.3 Kbps)
Notes:
1. For Programmable Parameter bits, b7 is the msb, and b0 is the lsb. For example, the PP 2C value of E0 is
11100000 in binary, in which b7 to b5 have the value ‘1’, while b4 to b0 have the value ‘0’.
2. When b4 of a CAN options PP is set, the CAN baud rate will be increased by a factor of 8/7. For example, if
you set PP 2C b4 to ‘1’, and PP 2D to ‘06’, the actual baud rate will be 83.3 x 8/7 = 95.2 kbps. If you are
unsure of your setting, the display protocol (AT DP) command may be used to display the actual baud rate.
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
70 of 87
www.elmelectronics.com
ELM329L
Maximum CAN Data Rates
We are occasionally asked what the maximum
data rate is that the ELM329 can handle. This is often
after someone has tried to monitor all data using the
default settings and has received a ‘BUFFER FULL’
error. It is difficult to say exactly what the maximum
rate is, however, as several factors are involved.
The CAN ‘engine’ inside the ELM329 is actually
configured with one receive register that accepts
messages from the CAN data bus, and another that
accepts messages from the first, in a ‘bucket brigade’
fashion. As long as the firmware empties the second
register before the first register needs it, there should
not be any overflow problems with this component.
The ELM329 actually moves the data quickly to
temporary storage, so this is never a problem.
but that is not so. It must also check for errors,
possibly queue a CAN response, format the received
message, convert it to ascii, load it into the RS232
transmit buffer, do any other processing that’s
required, and then prepare for the next message.
These tasks can take a considerable time, depending
on what formatting options you have chosen, and the
baud rate that you select.
The diagram below shows these processes
grouped into blocks. The times shown are typical, and
as you can see vary with both the length of the CAN
message and the CAN baud rate.
When a CAN message arrives, the ELM329
moves quickly to move the received bytes from the
receive registers. The data is then formatted (as ASCII
bytes) and placed into the RS232 transmit buffer, for
sending to the controlling processor. As long as
It would be nice if all the firmware had to do was to
empty the second register, and wait for it to fill again,
message from ECU
min time
11 bit/500 = 220 µsec
11 bit/500 = 16 µsec
29 bit/250 = 520 µsec
29 bit/250 = 32 usec
Gap at 40% Bus Loading:
11 bit/500 = 354 µsec
29 bit/250 = 828 µsec
message
next message
CAN Data
Rx register is empty -
can accept next message
ELM329:
Moving Data
moves and error checks
500k = 50 µsec
250k = 50 µsec
data has been stored
in the send buffer
Processing Data
this is a background task - the
ELM329 can do other things at
the same time
formatting & conversion
11 bit ID = 138 µsec
29 bit ID = 156 µsec
Sending Data
total send time is typically (in µsec):
38.4k
5180
6475
115.2k
1740
2175
500k
400
500
11 bit ID
29 bit ID
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
71 of 87
www.elmelectronics.com
ELM329L
Maximum CAN Data Rates (continued)
messages do not arrive at a rate that is faster than the
ELM329 can process them in, all messages will be
processed.
no numbers shown in the above charts for some of the
500 kbps entries, as the buffer will not fill up in those
cases.
You can see from the figure that even for a
500 kbps message with an 11 bit ID, the ELM329
finishes these tasks with time to spare. The
measurements were taken with actual messages that
had 8 data bytes, the headers displayed, spaces
turned off, and linefeeds turned off. Since ISO15765-4
specifies that messages must be 8 data bytes in length
(filler bytes are added as needed) these times do
represent the typical situation. Actually, from these
numbers the ELM329 should be able to handle 100%
bus loading (which is not a practical situation).
The rate at which OBD messages occur on the
data bus determines the ‘bus loading’. Bus loading is a
utilization factor that is very similar to the duty cycle for
a square wave signal. Ideally, bus loading should be
less than about 30%, but as vehicles become more
complex, this is very difficult to do. Currently, some
vehicles are reported to have 70% bus loads.
Once the ELM329 has placed all of the properly
formatted bytes into the RS232 transmit buffer, it is up
to the controlling computer to fetch them in a timely
fashion. If the bytes are removed at a rate that is
slower than the rate at which the ELM329 is filling it,
the transmit buffer will eventually become full. It does
not matter how big the buffer is, if the rate of removing
bytes from the buffer is slower than the rate of storing
them. When the buffer is full, you will see the dreaded
‘BUFFER FULL’ message, and you will have to start
over.
This amount of storage is more than enough for
almost all OBD requests – the only time that you might
get into trouble is if you are monitoring all messages
on the bus (eg. with the AT MA command) and have
no filters set. In that case, you would need to be sure
that you are removing bytes as fast as you can, and if
that is not enough, consider filtering for only the data
that you wish to see.
When people ask us then, ‘What data rate can the
ELM329 support?’ the answer is not easy, and
depends on many factors. Certainly, there will be
situations in which the IC is not able to get the data out
as fast as you’d like, but that is often due to serial port
limitations (whether through a poor choice of baud
rates, or due to a hardware limitation). If you are
simply obtaining standard OBD information, there is
really no need to choose a high baud rate, as the
‘buffer’ takes care of temporary data storage for you. If
you are trying to ‘push the envelope’, then hopefully
this discussion has helped to give you the necessary
background information.
The ELM329L RS232 transmit buffer is 2048 bytes
in size. Considering that some bytes will be sent while
new messages are being stored, this means that at
40% bus loading, with headers on but spaces and
linefeeds off, you can typically save:
38.4k
11 bit/500k 115
29 bit/250k 104
115.2k
155
225
500k
–
–
messages in the buffer before it becomes full. But
what about that new car with a busy data bus? At 80%
bus loading, you can typically save:
38.4k
11 bit/500k 108
29 bit/250k 91
115.2k
123
120
500k
390
–
messages before it becomes full. Note that there are
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
72 of 87
www.elmelectronics.com
ELM329L
Microprocessor Interfaces
A very common question that we receive is ‘Can I
connect the ELM329 directly to my own circuit, or must
I use the interface shown?’ Certainly you may connect
directly to our ICs, and you do not need to use an
RS232 or USB interface. There are a few items to
consider, however.
The ELM329 is actually a microprocessor that
contains a standard UART type interface, connected to
the RS232 Tx and Rx pins. The logic type is CMOS,
and the Rx pin has Schmitt trigger waveshaping, so
you should be able to connect directly to these pins
provided that the two devices share the same power
supply (VDD), and that they are not physically more
than about 10 to 20 inches apart (CMOS circuits are
subject to latch-up from induced currents, which may
be a problem if you have long leads).
The normal (idle) levels of the ELM329 transmit
and receive pins are at the VDD (logic high) level. Most
microprocessors and RS232 interface ICs expect that
to be the idle level, but you should verify it for your
microprocessor before connecting to the ELM329. The
connections are straightforward - transmit connects to
receive, and receive connects to transmit, as shown
below. Don’t forget to set both devices to the same
baud rate.
that may simplify the flow of data for you. The interface
consists of two pins - an input an an output. The input
is called ‘request to send’ (RTS), and it is used to
interrupt the ELM329, just the same as tapping a key
on the keyboard when using a terminal program. The
output pin (‘Busy’) is used by the ELM329 to tell your
system that it is processing data.
To use the handshaking feature, set one of your
microprocessor port pins to normally provide a high
output, and connect it to the RTS input (pin 15). Use
another port pin as an input to monitor the ELM329
Busy output (pin 16). When you want to send a
command, simply check the Busy output first. If it is at
a high logic level, then either wait for it to go low, or if
you need to interrupt the IC, then bring the RTS line
low and wait for the Busy line to go low. (You might
want to consider using an edge triggered interrupt on
the Busy output, if one is available). When Busy does
go low, restore your RTS line to a high level, and then
send your command to the ELM329. No need to worry
about the ELM329 becoming busy again after you
raise the RTS line at this point – once Busy goes low,
the ELM329 will wait (indefinitely) for your command. If
you do not use the RTS input on the ELM329, it must
be connected to a high logic level, as shown. Note that
the default setting for PP 0E turns these hand-shaking
The ELM329 also provides a hand-shaking feature
VDD
your microprocessor
+5V
Tx
Rx
VDD
VDD
28
27
26
25
24
23
22
21
20
19
10
18
17
16
15
The ELM329L and your
microprocessor must
use the same VDD supply
Rx Tx Busy RTS
329L
1
2
3
4
5
6
7
8
9
11
12
13
14
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
73 of 87
www.elmelectronics.com
ELM329L
Microprocessor Interfaces (continued)
+3.3V
signals off, so you will need to change that (possibly
disabling the low power mode) in order to use them.
We are often asked about connecting an ELM329
that is operating at 5.0V to 3.3V logic. Many hope that
they can just insert a resistor or two and have it work.
Unfortunately, that is not the case, mostly because the
ELM329 has Schmitt waveshaping on the RS232 Rx
input (pin 18), and so may need as much as 4V for a
high input when the ELM329’s VDD is 5V.
For proper interfacing between two different VDD’s,
we recommend using a level translator circuit. Some
examples are the TXB0102 from Texas Instruments
(www.ti.com), the ST2129 from ST Microelectronics
(www.st.com), or the ADuM1201 from Analog Devices
(www.analog.com) as shown here. We have been
using the ADuM1201 with the Raspberry Pi lately,
because it offers galvanic isolation (to 2500 Vrms) in
addition to the level translation, so protects the Pi from
occasional wiring problems. The one disadvantage
with the ‘1201 over the others is that it draws about 1
mA, which may be an issue if you are trying to
minimize the currents during low power mode.
your microprocessor
Tx
Rx
+3.3V
8
7
2
6
3
5
4
ADuM1201
+5V
1
+5V
+5V
n.c.
16
21
20
19
10
18
17
15
Rx Tx Busy RTS
329
7
8
9
11
12
13
14
Upgrading Versions
A popular question that we receive is “Can I
upgrade my firmware with a file download?”. The
answer to this is no, the ELM329 can not be upgraded
in this way - your integrated circuit must be replaced.
The next question which usually follows is “Can I
simply replace an old ELM329 chip with a new one to
upgrade the firmware?”
The answer to this last question is basically yes.
We say basically because many circuits use the
surface mount version of the ELM329, so the IC is
soldered in, not socketed. You may need special tools
(a hot air gun, etc.) to replace the IC in that case.
Physically, all pin connections are the same. Note that
you can not replace an ELM329 IC with an ELM329L
without modifying the wiring to pin 6.
If you think that there is a chance that you may
upgrade the IC in the future, you may wish to design
your circuit using the PDIP version, and a socket.
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
74 of 87
www.elmelectronics.com
ELM329L
Example Applications
The SAE J1962 (ISO 15031-3) standard dictates
that all OBD compliant vehicles must provide a
standard connector near the driver’s seat, the shape
and pinout of which is shown in Figure 8 below. The
circuitry described here can be used to connect to this
J1962 plug without modification to your vehicle.
for most applications. We have added diode D3 and
resistor R12 to this circuit to reduce backfeeds from
the USB system (without them, the FTDI interface is
able to provide enough current to at least partially
power the ELM329 circuit).
The top left corner of Figure 9 shows the CAN
interface circuitry. We do not advise making your own
interface using discrete components – CAN buses
may have a lot of critical information on them, and you
can easily do more harm than good if you fail. It is
strongly recommended that you use a commercial
transceiver chip as shown. The Microchip MCP2561 is
used in our circuit, but most major manufacturers also
produce CAN transceiver ICs – look at the NXP
PCA82C251, the Texas Instruments SN65LBC031,
the infineon TLE7250G, and the Linear Technology
LT1796, to name only a few others. Be sure to pay
attention to the voltage limits – depending on the
application the IC may have to tolerate 24V, and not
just 12V.
The voltage monitoring circuitry for the AT RV
command is shown connected to pin 2 of the ELM329.
The two resistors (R10 & R11) simply divide the
battery voltage to a safe level for the ELM329, and the
capacitor (C10) filters out noise. As shipped, the
ELM329 expects a resistor divider ratio as shown, and
sets nominal calibration constants assuming that. If
your application needs a different range of values,
simply choose the resistor values to maintain the input
within the specified 0-5V limit, and then perform an AT
CV to calibrate the ELM329 to your new divider ratio.
The maximum voltage that the ELM329 can show is
99.9V.
1
9
8
16
Figure 8. The J1962 Vehicle Connector
The male J1962 connector required to mate with a
vehicle’s connector may be difficult to obtain in some
locations, and you might be tempted to improvise by
making your own connections to the back of your
vehicle’s connector. If doing so, we recommend that
you do nothing that would compromise the integrity of
your vehicle’s OBD network. The use of any connector
which could easily short pins (such as an RJ11 type
telephone connector) is definitely not recommended.
The circuit on page 76 (Figure 9) shows how the
ELM329 might typically be used. Circuit power is
obtained from the vehicle via OBD pins 16 and 5, and
after a protecting diode and some capacitive filtering,
is presented to a five volt regulator. (Note that a few
vehicles have been reported to not have a pin 5 – on
these you will need to use pin 4 instead of pin 5.) The
regulator powers several points in the circuit as well as
an LED (for visual confirmation that power is present).
We have shown an LP2950 for the regulator as that
type has very low quiescent current which is important
if you are going to use the low power feature of the
ELM329.
A 10µF capacitor (C9) is shown connected to pin 6
of the ELM329L. This is required for filtering of the IC’s
internal 3.3V supply. Choose a low ESR (<5W)
ceramic or tantalum type.
Note that there are some rather large capacitors
(C2 and C4) shown on the input and the output of the
regulator. Without these capacitors, you might
experience ‘LV RESET’s (for example, a MAX3222E
transceiver creates large transients as it is switched on
and off so needs this). Testing has shown that the
values shown for C2 and C4 should be adequate in
most cases, but if you do see the occasional ‘LV
RESET’, you may want to increase them further.
The FTDI serial to USB converter shown handles
all of the RS232 communications between the
ELM329 and the controlling computer. It is capable of
very high speed communications so is a good choice
The only remaining components are the LEDs and
the crystal. The LEDs are standard ones, and may be
any colour that you require - we only offer suggestions
here. The crystal is a 4.000MHz microprocessor type,
while the 27pF loading capacitors shown are typical
only, (you may have to select other values depending
on what is specified for the crystal that you use). This
crystal frequency is critical to the circuit operation and
must not be altered. Do not substitute a resonator for
the crystal, as it will not have the accuracy required.
As always, you are not limited to the circuit of
Figure 9. It is only a starting point that you can build
on. The following pages show some alternative
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
75 of 87
ELM329L
Example Applications (continued)
CAN-L
14
+5V
R9
4.7KW
6
CAN-H
R7
R8
100W
100W
D2
5.0V
TVS
8
1
7
6
5
L6
C7
560pF
C8
560pF
PWR
U2
MCP2561
R6
470W
2
3
4
+5V
C11
0.1µF
+5V
OBD
Interface
(J1962)
L1-L4
+5V
R1-4
470W
+5V
28
27
26
25
24
23
22
21
20
19
10
18
11
17
12
16
13
15
U1
329L
+5V
+5V
1
2
3
4
5
6
7
8
9
14
R10
470KW
C9
10µF
16
X1
Battery
Positive
R11
100KW
C10
0.01µF
R5
4.00MHz
470W
C6
27pF
C5
27pF
L5
Active
+5V
D1
U4
U3
LP2950
C2
1 (DCD)
4 (DTR)
6 (DSR)
+5V
+
C4
33µF
10V
+5V
+
7 (RTS)
8 (CTS)
C1
0.1µF
50V
C3
0.1µF
R12
4.7KW
USB
Interface
(mini B)
10µF
50V
3 (TxD)
2 (RxD)
D3
5 (SG)
9 (RI)
5
Signal
Ground
FTDI
DB9-USB-D5-F
Figure 9.
A CAN to USB Interpreter
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
76 of 87
www.elmelectronics.com
ELM329L
Example Applications (continued)
Resistors (1/8W or greater)
R1, R2, R3, R4, R5, R6 = 470 W
R7, R8 = 100 W
Semiconductors
D1 = 1N4001
D2 = 1N5232B or SA5.0AG TVS
D3 = 1N4148
R9, R12 = 4.7 KW
R10 = 470 KW
L1, L2, L3, L4, L5 = Yellow LED
L6 = Green LED
R11 = 100 KW
U1 = ELM329L (CAN Interpreter)
U2 = MCP2561 (CAN Transceiver)
Capacitors (16V or greater, except as noted)
C1 = 0.1 µF 50V
U3 = LP2950 (5V, 100mA regulator)
U4 = FTDI DBP-USB-D5-F usb module
C2 = 10 µF 50V
C3, C11 = 0.1 µF
C4 = 33 µF 10V
Misc
C5, C6 = 27 pF
X1 = 4.000MHz crystal
ELM329L Socket = 28pin 0.3” wide DIP
C7, C8 = 560 pF 50V
C9 = 10 µF (see text)
C10 = 0.01µF
Figure 10. Parts List for Figure 9
communications interfaces that may be of interest if
you are considering modifying the circuit. Also, be sure
to read our Application Note AN04 for a discussion on
connecting with Bluetooth (the ELM327 information
applies to the ELM329 as well).
+5V
RS232
Interface
(DB9F)
4.7KW
10KW
Figure 11 shows a very basic RS232 interface that
may be connected directly to pins 17 and 18 of the
ELM329. This circuit ‘steals’ power from the host
computer in order to provide a full swing of the RS232
voltages without the need for a negative supply. This
circuit is limited to data rates of about 57.6Kbps, but
has the advantage that it uses common components
and does not require a special integrated circuit. Since
this circuit does not create large current transients, the
power supply requirements are less, and you could
likely reduce Figure 9’s C2 to 2.2µF, and C4 to 10µF.
The circuit of Figure 12 offers another RS232
solution that works well at higher baud rates. It uses a
Maxim product (the MAX3222E) that is capable of
operating at up to a 250 kbps rate (be sure to visit
www.maximintegrated.com for more information).
The MAX3222E RS232 transceiver contains
internal charge pump circuitry that generates the
voltages required for RS232 communications, in
addition to the analog interface circuitry needed. All
you have to do is provide a few capacitors, and it does
3 (TxD)
2N3904
10KW
5 (SG)
+5V
0.1µF
10KW
4.7KW
2N3906
2 (RxD)
+5V
1 (DCD)
4 (DTR)
6 (DSR)
19
18
17
16
15
329
7 (RTS)
8 (CTS)
Figure 11. A Low Speed
RS232 Interface (£ 57.6 kbps)
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
77 of 87
ELM329L
Example Applications (continued)
the rest.
RS232
We do caution that the MAX3222E does seem to
place some extra demands on the 5V power supply. It
should work fairly well with a 7805 regulator, but if you
have chosen a lower current device like the 78L05 or
LP2950 (as in Figure 9), you may experience
occasional ‘LV RESET’s. For this reason, we
recommend adding the larger capacitors shown as C2
and C4 in Figure 9. This should eliminate problems,
but if it does not, you may also wish to consider a
more powerful regulator (such as the 7805) if you do
not already have one installed.
The USB interface of Figure 13 provides another
way to connect the ELM329 to USB systems. It uses a
Silicon Laboratories (www.silabs.com) CP2102 chip to
convert between the ELM329’s serial data and USB.
One of the advantages of going to a USB interface
is the high serial baud rates that you may experience.
In order to use these higher rates, you will have to
program both the USB interface and the ELM329
interface for them.
Interface
(DB9F)
10
11
12
13
14
9
8
7
6
5
4
3
2
1
3 (TxD)
2 (RxD)
0.47µF
5 (SG)
0.47µF
0.47µF
1 (DCD)
4 (DTR)
6 (DSR)
7 (RTS)
8 (CTS)
15
16
+5V
17
18
0.1µF
0.1µF
+5V
Figure 12. A High Speed
RS232 Interface (£ 250 kbps)
18
17
16
15
The CP2102 interface baud rate is actually
configured by driver software. When you set the baud
rate in your terminal program, the software does what
is necessary to configure the CP2102 for operation at
that rate and you do not need to do anything more.
The ELM329 initially only uses a 38,400 bps rate,
however, and must be told to use anything different.
In order to change from the standard 38.4 k baud
rate, you must first set your software to 38.4 kbps, and
power up your ELM329 circuit. Make sure that it is
working, as described in the ‘Communicating with the
ELM329’ section, before you do anything else. When
you are confident that all is well, you can then change
the baud rate. Before doing so, we caution that you
should check to be sure that your software actually
supports the desired rate (as several can not handle
more than about 250 kbps).
329
USB
5.0V
TVS
Interface
+5V
(type ‘B’
connector)
7
6
8
5
4
3
1 (+5)
2 (D-)
3 (D+)
4 (SG)
SiLabs
CP2102
1µF
26 25
0.1µF
The CP2102 chip is able to support a 115.2 kbps
rate natively, and almost all software should be able to
support it as well, so we will use that rate to provide an
example.
+5V
19
18
17
16
15
First, while connected to the ELM329 at 38.4 kbps,
we need to change the default rate to 115.2 kbps. No
need to worry that this will affect your communications,
as it will not take effect until the ELM329 has been
reset. To change the data rate, simply change the
value that is stored in Programmable Parameter 0C,
then enable it:
329
Figure 13. An Alternative USB Interface
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
78 of 87
www.elmelectronics.com
ELM329L
Example Applications (continued)
>AT PP 0C SV 23
OK
3.3V
Interface
+3.3V
> AT PP 0C ON
OK
Tx
Rx
That is all that is needed to reconfigure the
ELM329 for 115.2 kbps operation. This change stays
in effect through power downs and resets, but you can
change it again if you wish.
If you now reset the ELM329 (send AT Z or power
down then up), the ELM329 will begin operating at the
new rate of 115200 bps, rather than 38400 bps.
Change your software setting to also be 115200 bps,
and you should be communicating. If you go through
the calculations, you will note that the ELM329 baud
rate is actually off by about 0.8%, but modern UARTs
can typically handle rate errors of a few % without any
problems, so this is not an issue.
3.3V common
8
1
7
2
6
3
5
4
ADuM1201
+5V
+5V
+5V
n.c.
16
21
20
19
10
18
17
15
Rx Tx Busy RTS
329
7
8
9
11
12
13
14
When working with the CP2102, we do caution
that it is very small and difficult to solder by hand, so
be prepared for that. Also, if you provide protection on
the data lines with transient voltage suppressors
(TVS’s), be careful when choosing devices, as some
exhibit a very large capacitance and will affect the
transmission of the USB data.
Figure 14. Connecting to a 3.3V System
Many wireless modules (WiFi or Bluetooth®) use
serial interfaces just like what we have shown here for
the RS232 connections. Connecting to them should
not be very difficult if you follow the manufacturers
directions (and perhaps consider using devices like the
ADuM1201 or the TXB0102) if the supply voltages
differ. If you are considering using a Bluetooth
interface, you might read our ‘AN-04 ELM327 and
Bluetooth®’ application note first.
This has provided a few examples of how the
ELM329 integrated circuit might typically be used.
Hopefully it has been enough to get you started on
your way to many more. The next section shows how
you might be able to optimize these circuits to reduce
power consumption…
Our next circuit (Figure 14) shows one way to
interface a 5V ELM329 to circuits that operate at a
different voltage level. We show 3.3V as an example,
but it can actually be anything from 2.7V to 5.5V.
The circuit uses the ADuM1201 iCoupler chip from
Analog Devices (www.analog.com). In addition to
acting as a level translator, this device also provides
isolation (galvanic, to 2500 Vrms) between the two
sides. This is often desired in order to keep the vehicle
circuit completely separate from the computer circuit.
Typically, one might use a standard level shifter IC
to interface to 3.3V – for example the TXB0102 by
Texas Instruments (www.ti.com), or the ST2129 from
ST Microelectronics (www.st.com), but the ADuM1201
offers several other advantages. The main difference
is that it offers isolation, as mentioned, but it also can
be used with 2.7V to 5.5V on either side, it provides a
high output if the input side is unpowered, and it
typically uses less current and is much faster than
many opto-isolator solutions (the ‘1201 is capable of
data rates of 1 MHz or more). Of course there are a
couple disadvantages too. It does use current (almost
1 mA), so may be an issue if trying to reduce sleep
current to a minimum, and it does cost more than
devices like the TXB0102.
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
79 of 87
ELM329L
Modifications for Low Power Standby Operation
Using an ELM329L integrated circuit rather than
an ELM329 offers several advantages. One of these is
the ability to operate at lower power supply currents.
This may not always be of primary concern, but if you
are considering building a device that may stay
connected to your vehicle, you should consider this, as
excessive power drain during vehicle off times will
cause battery problems.
The following discusses some of the design
decisions that we made in creating the suggested
circuit of Figure 9. That schematic has been repeated
in Figure 15, with the main changes highlighted with
numbered ‘bubbles’.
made a few in-circuit measurements, and present
them here. With 12.0V applied at ‘Battery Positive’, the
measured current was typically:
base current (on the bench) = 16.7 mA
when simply powered on the bench, with no PC or
ECU connected.
If you then connect it to a vehicle and a computer,
the current typically rises to:
base current (in the vehicle) = 23.5 mA
which is largely due to the Active LED being on. When
actually monitoring data, this current rises further, as
the OBD Rx and RS232 Tx LEDs are on, and there
are switching losses. We measured :
The first decision was to use an ELM329L rather
than an ELM329. This results in both lower operating
currents and lower idle current (when in low power
mode). The circuit does require an extra component
(C9) in order to do this.
active current (in the vehicle) = 36.5 mA
Bubble 2 highlights our use of higher value voltage
divider resistors. A 47K/10K divider would continuously
use about 0.2 mA, which is significant when in low
power mode. We chose to increase these resistor
values by a factor of 10, in order to reduce the current
by that same factor. The cost is a slight degradation in
the accuracy of the voltage readings dues to the input
leakage currents. If you do not wish to measure the
battery voltage, you may wish to eliminate R10, R11
and C10 altogether. Don’t forget to tie pin 2 to either
VDD or circuit common if you do.
in that case.
The “Low Power Mode” of operation section (page
62) discussed the ways in which you might initiate low
power operation, but the easiest is to use the low
power command (AT LP). After sending this, the total
circuit current for is typically:
current after AT LP = 0.19 mA
Out of interest, if the MCP2561 is replaced with
the older MCP2551, low power current is typically:
The next bubble (‘3’) shows our use of a low
quiescent current regulator rather than a typical 7805
type unit. This decision saves several mA of current
that is required to maintain bias for the internal circuit.
There is a cost with this however - the regulator is not
stable without a minimum load capacitance (so you
have to add C4).
Bubbles ‘4’ and ‘5’ show how we have returned
both R6 and R9 to pin 16 rather than circuit common.
This allows the ELM329L to turn off the PWR led, and
reduce the CAN transceiver current while the
ELM329L is dormant. Be careful doing this however, if
you wish to have the circuit wake up on CAN activity -
some manufacturer’s transceivers do not pass on the
received CAN signal when they are in low power
mode.
current after AT LP (with MCP2551) = 0.44 mA
which is low, but not quite as good as with a newer
MCP2561.
The 0.19 mA measured is a very low current, and
is likely all you need for most applications. Note that
whether the Active LED is set to flash or not (by PP 0F
or pin 11) has very little influence on this current as it
uses an average of about 25 µA. Similarly, the CAN
Monitor typically only uses about 20 µA during low
power operation, so does not appreciably affect the
total current.
It is difficult to reduce the standby current further
than this, but for almost all applications reducing the
10’s of mA constant draw to a fraction of a milliAmp
should be more than sufficient.
The final change (bubble ‘6’) shows our choice of
an MCP2561 CAN transceiver rather than an
MCP2551. The ‘2561 device is an improved version
that is recommended for new designs.
To see just how effective these changes are, we
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
80 of 87
ELM329L
Modifications for Low Power Standby Operation (continued)
CAN-L
14
+5V
R9
6
4.7KW
CAN-H
R7
R8
100W
100W
D2
5.0V
TVS
8
1
7
6
5
L6
C7
560pF
C8
560pF
PWR
6
U2
MCP2561
R6
470W
2
3
4
+5V
5
4
C11
0.1µF
+5V
OBD
Interface
(J1962)
L1-L4
1
+5V
R1-4
470W
+5V
28
27
26
25
24
23
22
21
20
19
18
11
17
12
16
13
15
U1
2
329L
+5V
+5V
1
2
3
4
5
6
7
8
9
10
14
R10
470KW
C9
10µF
16
X1
Battery
Positive
R11
100KW
C10
0.01µF
R5
4.00MHz
470W
C6
27pF
C5
27pF
L5
Active
+5V
D1
U4
U3
LP2950
C2
1 (DCD)
4 (DTR)
6 (DSR)
+5V
+
C4
33µF
10V
+5V
3
+
7 (RTS)
8 (CTS)
C1
0.1µF
50V
C3
0.1µF
R12
4.7KW
USB
Interface
(mini B)
10µF
50V
3 (TxD)
2 (RxD)
D3
5 (SG)
9 (RI)
5
Signal
Ground
FTDI
DB9-USB-D5-F
Figure 15.
Low Power Mods Highlighted
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
81 of 87
www.elmelectronics.com
ELM329L
Error Messages and Alerts
The following shows what the ELM329 will send to
warn you of a condition or a problem. Some of these
messages do not appear if using the automatic search
for a protocol, or if the Programmable Parameter bits
disable them.
ACT ALERT
DATA ERROR
This message occurs as a warning that there has
been no CAN or RS232 activity (ie commands or
messages received) for some time, and the IC is about
to go to the low power mode in one minute. If an input
signal is found during that minute, the switch to low
power will be cancelled.
There was a response from the vehicle, but the
information was incorrect or could not be recovered.
<DATA ERROR
There was an error in the line that this points to,
either from an incorrect checksum, or a problem with
the format of the message (the ELM329 still shows you
what it received). There could have been a noise burst
which interfered, possibly a circuit problem, or perhaps
you have the CAN Auto Formatting (CAF) on and you
are looking at a system that is not of the ISO 15765-4
format. Try resending the command again – if it was a
noise burst, it may be received correctly the second
time.
This message may be disabled by setting PP 0E
bit 3 (RS232) or PP 0F bit 5 (CAN) to ‘0’.
BUFFER FULL
The ELM329L has a 2048 byte internal RS232
transmit buffer so that OBD messages can be received
quickly, stored, and sent to the computer at a more
constant rate. Occasionally (particularly with some
CAN systems) the buffer will fill at a faster rate than it
is being emptied by the PC. Eventually it may become
full, and no more data can be stored (it is then lost).
If you are receiving BUFFER FULL messages,
and you are using a lower baud data rate, give serious
consideration to changing your data rate to something
higher. If you still receive BUFFER FULL messages
after that, you might consider turning the headers and
maybe the spaces off (with AT H0, and AT S0), or
using the CAN filtering commands (AT CRA, CM and
CF) to reduce the amount of data being sent.
ERRxx
There are a number of internal errors that might be
reported as ERR with a two digit code following. These
occur if an internally monitored parameter is found to
be out of limits, or if a module is not responding
correctly. If you witness one of these, contact Elm
Electronics for advice.
One error that is not necessarily a result of an
internal problem is ERR94. This code represents a
‘fatal CAN error’, and may be seen if there are CAN
network issues (some non-CAN vehicles may use pins
6 and 14 of the connector for other functions, and this
may cause problems). If you see an ERR94, it means
that the CAN module was not able to reset itself, and
needed a complete IC reset to do so. You will need to
restore any settings that you had previously made, as
they will have returned to their default values.
CAN ERROR
The CAN system had difficulty initializing, sending,
or receiving. Often this is simply from not being
connected to a CAN system when you attempt to send
a message, but it may be because you have set the
system to an incorrect protocol, or to a baud rate that
does not match the actual data rate. It is possible that
a CAN ERROR might also be the result of a wiring
problem, so if this is the first time using your ELM329
circuit, review all of your CAN interface circuitry before
proceeding.
LP ALERT
This appears as a warning that the ELM329 is
about to switch to the low power (standby) mode of
operation in 2 seconds time. This delay is provided to
allow an external controller enough time to prepare for
the change in state. No inputs or voltages on pins can
stop this action once initiated.
If you are seeing these messages while working
with the CAN silent mode off, then return to CAN silent
mode (AT CSM1). There is likely a problem with your
baud rate.
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
82 of 87
ELM329L
Error Messages and Alerts (continued)
LV RESET
is directed to monitor the data bus, and there is no
protocol active.
The ELM329 continually monitors the VDD supply
to ensure that it is within acceptable limits. If the
voltage should go below the low limit, a ‘brownout
reset’ circuit is activated, and the IC stops all activity.
When the voltage returns to normal, the ELM329
performs a full reset, and then prints LV RESET. Note
that this type of reset is exactly the same as an AT Z
or MCLR reset (but it prints LV RESET instead of
ELM329 v2.1).
This low voltage protection is not only necessary
for the ELM329 to operate properly, but it may also
Provide monitoring for the CAN transceiver IC too.
Note that many transceiver chips require a minimum
operating voltage of 4.5V, while some require a
minimum of 4.75V.
STOPPED
If any OBD operation is interrupted by a received
RS232 character, or by a low level on the RTS pin, the
ELM329 will print the word STOPPED. If you should
see this response, then something that you have done
has interrupted the ELM329. Note that short duration
pulses on pin 15 may cause the STOPPED message
to be displayed, but may not be of sufficient duration to
cause a switch to low power operation.
The message is printed any time that an OBD task
is interrupted.
UNABLE TO CONNECT
The ELM329 has tried all of the available
protocols, and could not detect a compatible one. This
could be because your vehicle uses an unsupported
protocol, or could be as simple as forgetting to turn the
ignition key on. Check all of your connections, and the
ignition, then try the command again.
NO DATA
The IC waited for the period of time that was set
by AT ST, and detected no response from the vehicle.
It may be that the vehicle had no data to offer for that
particular PID, that the mode requested was not
supported, that the vehicle was attending to higher
priority issues, or possibly that the filter was set so that
the response was ignored, even though one was sent.
If you are certain that there should have been a
response, try increasing the ST time (to be sure that
you have allowed enough time for the ECU to
respond), or restoring the CAN filter to its default
setting.
?
This is the standard response for a misunderstood
command received on the RS232 input. Usually it is
due to a typing mistake, but it can also occur if you try
to do something that is not appropriate for the protocol.
<RX ERROR
An error was detected in the received CAN data.
This most often occurs if monitoring a CAN bus using
an incorrect baud rate setting, but it may occur if
monitoring and there are messages found that are not
being acknowledged, or that contain bit errors. The
entire message will be displayed as it was received (if
you have filters set, the received message may not
agree with the filter setting). Try a different protocol, or
a different baud rate.
SEARCHING
This will be displayed when a message has been
provided for transmitting, but a protocol is not yet
considered to be active. When displayed, it means that
the ELM329 is searching for an appropriate protocol to
use. Similarly, the message may be displayed if the IC
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
83 of 87
ELM329L
Version History
We are often asked about the differences between
the various firmware versions in our integrated circuits.
The ELM329L started with firmware v2.1:
v2.1
The first version that was available. Supports all of the
ELM329 v2.1 functions, and also:
- requires a 10µF capacitor on pin 6
- has a 2048 byte RS232 transmit buffer
Ordering Information
ELM329L integrated circuits are 28 pin devices, available in either a 300 mil wide (‘skinny’) Plastic DIP format,
in a 300 mil (7.50 mm body) SOIC surface mount type of package, or in a 208 mil (5.30 mm body) SSOP
surface mount package. We do not offer a QFN package.
To order, add the appropriate suffix (P, SM, or SS) to the ELM329L part number:
300 mil wide, 28 pin, 0.10” (2.54 mm) pitch, PDIP..............................................................................ELM329LP
300 mil wide, 28 pin, 0.050” (1.27 mm) pitch, SOIC........................................................................ ELM329LSM
208 mil wide, 28 pin, 0.025” (0.65 mm) pitch, SSOP........................................................................ELM329LSS
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
84 of 87
www.elmelectronics.com
ELM329L
Outline Diagrams
The diagrams at the right show the three package
styles that the ELM329L is available in.
ELM329LP
7.24
The top diagram shows our ELM329LP product in
what is commonly called a ‘300 mil skinny DIP
package’. It is used for through hole applications.
The middle diagram shows the ELM329LSM
dimensions. This package is also often referred to as
being 300 mil (0.300”) wide, and is called an SOIC
(Small Outline IC) package. We have chosen to simply
refer to it as the SM (surface mount) version.
The bottom drawing shows our smaller surface
mount device - the ELM329LSS. Although it has a
5.30 mm wide package, it is sometimes referred to as
a 208 mil device. This package is typically used when
space is at a premium (note that due to the size, it is
difficult to hand solder).
2.54
max
10.92
ELM329LSM
The drawings shown here provide only the basic
dimensions for these ICs. Please refer to the following
Microchip Technology Inc. documentation for more
detailed information:
1.27
7.50
10.30
Package Drawings and Dimens ions Specification,
(document name en012702.pdf - 7.5 MB).
Go to www.microchip.com, select ‘Design Support’
then ‘Documentation’ then ‘Packaging Specifications’,
or go directly to www.microchip.com/packaging
PIC18F66K80 Family Data Sheet,
ELM329LSS
(document name 39977fd.pdf - 5.1 MB).
Go to www.microchip.com, select ‘Design Support’
then ‘Documentation’ then ‘Data Sheets, and search
for 18F25K80.
0.65
5.30
7.80
Note: all dimensions shown are in mm.
All rights reserved. Copyright 2011, 2012, 2013 and 2016 by Elm Electronics Inc.
Every effort is made to verify the accuracy of information provided in this document, but no representation or warranty can be
given and no liability assumed by Elm Electronics with respect to the accuracy and/or use of any products or information
described in this document. Elm Electronics will not be responsible for any patent infringements arising from the use of these
products or information, and does not authorize or warrant the use of any Elm Electronics product in life support devices and/or
systems. Elm Electronics reserves the right to make changes to the device(s) described in this document in order to improve
reliability, function, or design.
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
85 of 87
www.elmelectronics.com
ELM329L
Index
Example Applications
Basic, 75
Figure 9, 76
USB, 76, 78
Extended Addresses, CAN, 58
A
Absolute Maximum Ratings, 7
ACT ALERT, 62, 67, 68, 82
Altering Flow Control Messages, 57
Applications, Example, 75-79
AT Commands, 11
F
AT Command
Descriptions, 13-26
Summary, 11-12
Features, 1
Figure 9, 76
Flow Control Messages, Altering, 57
FMS Standard, 55
B
Battery Voltage, Reading, 27
Baud Rates, Using Higher RS232, 46-47
Block Diagram, 1
Brownout Reset, 7, 83
BUFFER FULL, 43, 71, 72, 82
Bus FMS Standard, 55
H
Headers, setting them, 36-37
Hexadecimal conversion chart, 28
Higher RS232 Baud Rates, 46-47
I
C
ID bits, setting, 36-37
Inputs, unused, 6
Interface, Microprocessor, 73
Interpreting Trouble Codes, 31
CAN ERROR, 69, 82
CAN Extended Addresses, Using, 58
CAN Message Formats, 34-35
CAN Messages and Filtering, 41-42
Codes, Trouble,
Interpreting, 31
Resetting, 32
J
Commands, AT
J1939,
Descriptions,13-26
Summary, 11-12
Commands, OBD, 28
Communicating with the the ELM329, 9-10
Contents, 2-3
FMS Standard, 55
Messages, 49-50
NMEA 2000 Standard, 55
Number of responses, 52
Using, 51-54
D
K
DATA ERROR, 15, 43, 82
Description and Features, 1
Diagrams, Outline, 85
KeepAlive (Wakeup) Messages, 56
L
E
Low Power Operation,
Description, 62-64
Modifications, 80-81
LP ALERT, 7, 62, 63, 82
LV RESET, 75, 78, 83
Electrical Characteristics, 7
ERRxx, 82
Error Messages, 82-83
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
86 of 87
ELM329L
Index (continued)
M
R
Maximum Ratings, Absolute, 7
Messages and Filtering, CAN, 41-42
Messages, Error, 82-83
Reading the Battery Voltage, 27
Reading Trouble Codes, Quick Guide for, 32
Resetting,
Message Formats, OBD, 34-35
Microprocessor Interfaces, 73-74
Modifications for Low Power, 80-81
Monitoring the Bus, 43
Prog Parameters, 66
Trouble Codes, 32
Responses, Multiline, 39-40
Restoring Order, 45
RS232 Baud Rates, Using Higher, 46-47
RX ERROR, 51, 83
Multiline Responses, 39-40
N
S
NMEA 2000 Standard, 55
NO DATA, 24, 28, 30, 42, 45, 48, 51, 66, 83
Number of Responses,
J1939, 52
Selecting Protocols, 33-34
Setting the ID Bits (Headers), 36-37
Setting Timeouts (AT & ST commands), 48
Specify the Number of Responses, 30, 48, 52
STOPPED, 16, 43, 63, 83
OBDII 30, 48
Summary,
O
AT Commands, 11-12
Programmable Parameters, 66-70
OBD Commands, 28
OBD Message Formats, 34-35
Order, Restoring, 45
Ordering Information, 84
Outline Diagrams, 85
Overview, 9
T
Talking to the Vehicle, 29-30
Timeouts (AT & ST commands), 48
Trouble Codes,
Interpreting, 31
Resetting, 32
P
Periodic (Wakeup) messages, 56
Pin Descriptions, 4-6
Pin 28, resetting Prog Parameters, 66
Power Control,
U
UNABLE TO CONNECT, 83
Unused pins, 6
Using J1939, 51-54
Using CAN Extended Addresses, 58
Using Higher RS232 Baud Rates, 46-47
Description, 62-64
Modifications, 80-81
Programmable Parameters,
general, 65-66
reset with pin 28, 66
Summary, 66-70
types, 66
V
Protocols, Selecting, 33-34
Voltage, Reading the Battery, 27
Q
W
Quick Guide for Reading Trouble Codes, 32
Periodic (Wakeup) Messages, 56
ELM329L DSA
Elm Electronics – Circuits for the Hobbyist
www.elmelectronics.com
87 of 87
相关型号：
©2020 ICPDF网 联系我们和版权申明