VPW Communication Protocol

Breakdown of the j1850 3 byte Header format

Byte1 = priority

Bits 7,6 and 5 are priority 0=High, 7=Low

Bit 4 is header style (0=3 byte header-GM, 1=1 byte header-??)
Bit 3 is In Frame Response (0=Required-Ford, 1=Not allowed-GM)
Bit 2 is addressing mode (1=Physical, 0=Functional)
Bit 1,0 is message type: (depending on bit 2 and 3 see below)
Bit 3 2 1 0
----------Functional
1 0 0 0 Function
1 0 0 1 Broadcast
1 0 1 0 Query
1 0 1 1 Read
Physical
1 1 0 0 Node to Node
1 1 0 1 Reserved
1 1 1 0 Reserved
1 1 1 1 Reserved

Byte2 = physical ID of destination

Byte3 = physical ID of source

Typical Physical ID's, PCM = $10, Off-board scan tool = $F1

Functional Addresses:
ID
-----

Function
----------------------------

$6A

Request Legislated Diagnostics (bit 0 (W bit) = 0 Command)

$6B

Report Legislated Dianostics (bit 0 (W bit) = 1 Status)

Physical Node Addresses:

ID
---------

Module
----------------------------

$00-$1F Powertrain controllers

$00-$0F Integration/Manufacturer Expansion
$10-$17 Engine controllers
$18-$1F Transmission controllers
$20-$3F Chassis controllers
$20-$27 Integration/Manufacturer Expansion
$28-$2F Brake controllers
$30-$37 Sterring controllers
$38-$3F Suspension controllers
$40-$C7 Body controllers
$40-$57 Integration/Manufacturer Expansion
$48-$5F Restraints
$60-$6F Driver information/Diplays
$70-$7F Lighting
$80-$8F Enterntainment
$90-$97 Personal communications
$98-$9F Climate control (HVAC)
$A0-$BF Convenience (doos, Seats, Windows, etc.)
$C0-$C7 Security
$C8-$CB Electric Vehicle Energy Transfer System (EV-ETS)
$C8 Utility connection services
$C9 AC to AC conversion
$CA AC to DC conversion
$CB Energy storage management
$CC-$CF Future expansion
$D0-$EF Manufacturer specific
$F0-$FD Off-Board Testers/Diagnostic scan tools

$FE All nodes

$FF Null node

PCM Mode Requests:

J1979 (Functional) supports modes $01 thru $0F

Mode $01 - Request Current Powertrain Diagnostic Data

Mode $02 - Request Powertrain Freeze Frame Data

Mode $03 - Request Powertrain Diagnostic Trouble Codes

Mode $04 - Request to Clear/Reset Diagnostic Trouble Codes

Mode $05 - Request Oxygen Sensor Monitoring Test Results

Mode $06 - Request On-Board Monitoring Test Results

Mode $07 - Request Pending Powertrain Trouble Codes

Mode $08 - Request Control of On-Board System, Test, or Component

Mode $09 - Request Vehicle Information

J2190 (Physical) supports modes $10 thru $3F and $80 thru $BF

Mode $10 - Initiate Diagnostics Operation

Mode $11 - Request Module Reset

Mode $12 - Request Diagnostic Freeze Frame Data

Mode $13 - Request Diagnostic Trouble Code Information

Mode $14 - Clear Diagnostic Information

Mode $17 - Request Status of Diagnostic Trouble Codes

Mode $19 - Request Diagnostic Trouble Codes by Status

Mode $20 - Return to Normal Mode

Mode $21 - Request Diagnostic Data

Mode $22 - Request Diagnostic Data by PID

Mode $23 - Request Diagnostic Data by Memory Address

Mode $24 - Request Scaling and Offset / PID

Mode $25 - Stop Transmitting Requested Data

Mode $26 - Specifiy Data Rates

Mode $27 - Security Access Mode

Mode $28 - Disable Normal Message Transmission

Mode $29 - Enable Normal Message Transmission

Mode $2A - Request Diagnostic Data Packets

Mode $2B - Dynamically Define Data Packet by Single Data Offsets

Mode $2C - Dynamically Define Diagnostic Data Packet

Mode $2F - Input/Output Control by PID

Mode $30 - Input/Output Control by Data Value ID

Mode $31 - Enter/Start Diagnostic Routine by Test Number

Mode $32 - Exit/Stop Diagnostic Routine by Test Number

Mode $33 - Request Diagnostic Routine Results by Test Number

Mode $34 - Request Download - tool to module

Mode $35 - Request Upload - module to tool

Mode $36 - Block Transfer Message

Mode $37 - Request Data Transfer Exit

Mode $38 - Enter Diagnostic Routine by Address

Mode $39 - Exit Diagnostic Routine by Address

Mode $3A - Request Diagnostic Routine Results

Mode $3B - Write Data Block

Mode $3C - Read Data Block

Mode $3F - Test Device Present

Mode $7F - General Response Message

Mode $A0 - Request High Speed Mode

Mode $A1 - Begin High Speed Mode

Mode $A2 - Programming Prompt

Mode $AE - Request Device Control

PCM Mode Responses:

The response will always be $40 greater than the request mode.

Response $41 - Report Powertrain Diagnostic Data

Response $42 - Report Powertrain Freeze Frame Data

Response $43 - Report Emission Related Diagnositc Powertrain Trouble Codes

Response $44 - Emission-Related Diagnostic Information Cleared

Response $45 - Report Oxygen Sensor Monitoring Test Resluts

Response $46 - Report On-Board Monitoring Test Results for Non-Continuously Monitored
Systems
Response $47 - Report On-Board Monitoring Test Results for Continuously Monitored
Systems

Response $48 - Report Control of On-Board System, Test, or Component

Response $49 - Report Vehicle Information

PCM Mode $7F Response Codes:

Code $00 - Affirmative Response

Code $10 - General Reject

Code $11 - Mode Not Supported

Code $12 - Sub-Function Not Supported or Invalid format

Code $21 - Busy - Repeat Request

Code $22 - Conditions Not Correct or Request Sequence Error

Code $23 - Routine Not Complete

Code $31 - Request Out of Range

Code $33 - Security Access Denied

Code $34 - Security Access Allowed

Code $35 - Invalid Key

Code $36 - Exceed Number of Attempts

Code $37 - Required Time Delay Not Expired

Code $40 - Download Not Accepted

Code $41 - Improper Download Type

Code $42 - Can't Download to Specified Address

Code $43 - Can't Download Number of Bytes Requested

Code $44 - Ready for Download

Code $50 - Upload not Accepted

Code $51 - Improper Upload Type

Code $52 - Can't Upload from Specified Address

Code $53 - Can't Upload Number of Bytes Requested

Code $54 - Ready for Upload

Code $61 - Normal Exit with Results Available

Code $62 - Normal Exit without Results Available

Code $63 - Abnormal Exit with Results

Code $64 - Abnormal Exit without Results

Code $71 - Transfer Suspended

Code $72 - Transfer Aborted

Code $73 - Block Transfer Complete/Next BLock

Code $74 - Illegal Address in Block Transfer

Code $75 - Illegal Byte Count in Block Transfer

Code $76 - Illegal Block Tranfser Type

Code $77 - Block Transfer Data Checksum Error

Code $78 - Block Transfer Message Correctly Received

Code $79 - Incorrect Byte Count During Block Transfer

PID List:
Provided by Beerman on the forum.

$01 - Number of Emission Related DTC

$03 - Fuel System Status

$04 - Calculated Load

$05 - Engine Coolant Temperature

$06 - Short Term Fuel Trim Bank 1

$07 - Long Term Fuel Trim Bank 1

$08 - Short Term Fuel Trim Bank 2

$09 - Long Term Fuel Trim Bank 2

$0B - Manifold Absolute Pressure

$0C - Engine RPM High Resolution (RPM x4)

$0D - Speed in KPH

$0E - Ignition Timing Advance

$0F - Intake Air Temperature

$10 - Mass Air Flow

$11 - Throttle Position Sensor %

$12 - Commanded Secondary Air

$13 - Report O2 Sensor Configuration

$14 - O2 B1S1

$15 - O2 B1S2

$18 - O2 B2S1

$19 - O2 B2S2

$1C - OBD Requirements

$0020 - $21 - $50 Bit Map Flash Constant

$110F - Rear O2 Current Non-Volatile

$1140 - Mass Air Flow Sensor 1

$1141 - Ignition Voltage

$1143 - Throttle Position Sensor

$1144 - Air Conditioner Pressure

$1145 - O2 Sensor - Bank 1 Sensor 1 (mv)

$1146 - O2 Sensor - Bank 1 Sensor 2 (mv)

$1148 - O2 Sensor - Bank 2 Sensor 1 (mv)

$1149 - O2 Sensor - Bank 2 Sensor 2 (mv)

$1151 - Throttle Position Sensor Normalized in Degrees / Percent

$115E - CAM Engine Speed Activity

$116F - Start Up Engine Coolant Temperature

$1170 - Controlled Canister Perge Solenoid

$1171 - EGR Duty Cycle

$1172 - IAC

$1176 - Current IAC Memory

$1179 - IAC Motor Position

$1190 - Fuel Trim Cell

$1192 - Desired Idle Speed

$119D - Barometric Pressure

$119E - Air Fuel Ratio

$11A1 - Engine Run Time

$11A6 - Knock Retard

$11BD - EGR Test Count

$11C0 - EGR Decel Filter

$11D7 - O2 Response Lean to Rich Switches Bank 1 Sensor 1

$11D8 - Catalyst Monitor EWMA Sample Counter Bank 1

$11E3 - LOW RESOLUTION SIGNAL

$11E4 - Cylinder Mode Misfire Index

$11E6 - Revolution Mode Misfire Index (Balance Time)

$11EA - Misfire Current Cylinder #5

$11EB - Misfire Current Cylinder #6

$11EC - Misfire Current Cylinder #7

$11ED - Misfire Current Cylinder #8

$11F3 - Total Misfires per Test Special

$11F8 - Misfire History Cylinder #5

$11F9 - Misfire History Cylinder #6

$11FA - Misfire History Cylinder #7

$11FB - Misfire History Cylinder #8

$1200 - Total Misfire Current Count

$1201 - Misfire History Cylinder #1

$1202 - Misfire History Cylinder #2

$1203 - Misfire History Cylinder #3

$1204 - Misfire History Cylinder #4

$1205 - Misfire Current Cylinder #2

$1206 - Misfire Current Cylinder #1

$1207 - Misfire Current Cylinder #3

$1208 - Misfire Current Cylinder #4

$120A - Short Term Fuel Trim Bank 1

$120B - Long Term Fuel Trim Bank 1

$120C - Short Term Fuel Trim Bank 2

$1212 - Rich/Lean to Lean/Rich Ratio Sen. 1

$1216 - O2 Response Rich to Lean Switches Bank 2 Sensor 1

$1217 - O2 Response Lean to Rich Switches Bank 2 Sensor 1

$121A - O2 Response Rich to Lean Switches Bank 1 Sensor 1

$121C - O2 Average Bias Voltage

$1227 - Total Misfire Failures Since First Fail

$1228 - Total Misfire Passes Since First Fail

$122A - Cycles of Misfire Data

$1232 - Warm up cycles without an emission fault

$1233 - Warm up cycles without a non-emission fault

$1234 - Mileage Since Last Code Clear

$1235 - Mileage Since First Fail

$1236 - Mileage Since Last Fail

$1237 - Fail Counter

$1238 - Pass Counter

$1239 - No Results Counter

$123A - Long Term Fuel Trim Bank 2

$123D - REAR O2 FAIL TIME LEFT

$1246 - O2 Response Rich to Lean Average Time Bank 2 Sensor 1

$1248 - Catalyst Monitor Average Deviation

$124A - Catalyst Monitor Filtered Deviation Difference

$1258 - Rear O2 Time to Activity

$125A - Injector Pulse Width Average Bank 1

$125B - Injector Pulse Width Average Bank 2

$125D - Knock Retard

$125E - Knock Sensor Active Counter

$1262 - Long Term Fuel Trim Decal

$1263 - Long Term Fuel Trim Idle

$1264 - Long Term Fuel Trim Cruise

$1265 - Long Term Fuel Trim Accel

$1266 - Purge Long Term Fuel Trim #1

$1267 - Purge Long Term Fuel Trim #2

$1268 - Purge Long Term Fuel Trim #3

$1269 - Purge Long Term Fuel Trim #4

$1276 - CRANKSHAFT POSITION SENSOR LOW RESOLUTION ANGLE

$1278 - Average Air Flow When Rear O2 Went Active

$1283 - Air Pump Diag. Percent Lean Time

$1284 - Air Pump Diag. Percent Rich Time

$1286 - Air Pump Diagnostic Active Time

$1601 - A/C Evap Temp

$1602 - Engine Oil Temperature

$1941 - Transmission Input Shaft Speed

$1942 - Transmission Output Shaft Speed

$1970 - TCC PWM Duty Cycle

$1972 - PC (Pressure Control) Solenoid Duty Cycle

$1991 - TCC Slip Speed

$1992 - Time of Latest Shift

$1993 - Time of Latest 1-2 Shift

$1994 - Time of Latest 2-3 Shift

$1995 - Time of Latest 3-4 Shift

$1996 - Shift Time Error for Latest Shift

$1997 - Shift Time Error for 1-2 Shift

$1998 - Shift Time Error for 2-3 Shift

$1999 - Shift Time Error for 3-4 Shift

$199C - Current TAP (Transmission Adaptive Pressure) Cell

$199D - Transmission Pressure

$199E - Pressure Control Actual Current

$199F - Pressure Control Reference Circuit

$19A0 - Shift Delay

$19AD - Transmission Temp Sensor

$19F3 - Transmission Temp

$19F4 - Gear Box Ratio

$19F5 - Current Gear

$1A01 - Z-Body: Steady State Ratio Fail Counter

Examples of VPW Code (Functional Messages)

For the OBDII mandated diagnostics, requsts are actually made to the functional address $6A,
with whatever processor is responsible for this function answering the request.
Theoretically many different processors can respond to a single functional request,
each contributing their insight as to the information requested.
Request current value of PID ($00..$20):

Send: $68,$6A,$F1,$01,$PID

Recv: $48,$6B,$10,$41,$PID,[up to 5 data bytes]

Request freeze frame value of PID ($00..$20):

Send: $68,$6A,$F1,$02,$PID,$FRAME
Recv: $48,$6B,$10,$42,$PID,$FRAME,[up to 5 data bytes]
where FRAME is $01..$06 and is the freeze frame number from which to retrieve the PID's
history data.

Examples of VPW Code (Physical Messages)

Request GM VIN:

Send: $6C,$10,$F1,$3C,$01

Recv: $6C,$F1,$10,$7C,$01,[VIN segment 1 data]

Send: $6C,$10,$F1,$3C,$02

Recv: $6C,$F1,$10,$7C,$02,[VIN segment 2 data]

Send: $6C,$10,$F1,$3C,$03

Recv: $6C,$F1,$10,$7C,$03,[VIN segment 3 data]

Request GM PCM#:

Send: $6C,$10,$F1,$3C,$04

Recv: $6C,$F1,$10,$7C,$04,[PCM #, 4 data bytes]

Request enhanced PID ($0000..$FFFF):

Send: $6C,$10,$F1,$22,$PID-hsb,$PID-lsb,$01

Recv: $6C,$F1,$10,$62,$PID-hsb,$PID-lsb,[up to 5 data bytes]

Requesting a DTC
The $XX byte in the following command:
$6C,$10,$F1,$19,$XX,$FF,$00
is the status byte. It has the following "bitmapped" values:

$80 - MIL is illuminated

$40 - Pending trouble code

$20 - Old code - MIL was illuminated for this code but is no longer illuminated.

$10 - History code with freeze frame data available.

$08 - Manufacturer specific status (I do not know what this means).

$04 - Manufacturer specific status (I do not know what this means).

$02 - Current code.

$01 - Immature code.

To get real trouble codes you should request only

$80+$10+$02=$C2
To get real trouble codes AND pending trouble codes request:
$80+$40+$10+$02=$D2

Special thanks to Paul of EFI Live for much of this info. See his site at >
http://www.efilive.com/news_20040423.html