Been working on ways to gather the data from the CAN bus t work out what happens when I make a call on my phone.

Ive put together an Arduino and MCP2515 module to connect t the CAN bus to dump data and see whats going on.

Basic set up is

Arduino Clone connected to MCP2512_CAN module which gets connected to the CAN bus via a couple of wires I soldered to the CAN bus lines inside the Uconnect module. This was the easiest way for me to get access to the bus but now means I cant disconnect the Uconnect module and continue to monitor the bus. Thinking of putting a power switch in the Uconnect module to be able to turn it on and off easily.

Ive tried a coupl eof methods to retrieve the Bus data -

1.  Serial capture of traffic.
2.  Arduino Sketch to loosely emulate the Lawicel CAN adaptor https://github.com/latonita/arduino-canbus-monitor.
3. attach the MCP2515 board directly to a raspberry pi and SSH into it from the laptop and capture data

1 gave me results but didnt look right so I moved onto number 2 and was bale to extract a lot of data which gave me results that matched data I had foind posted on line https://github.com/BiggRanger/CANBUS-Vehicle-Reverse-Engineering

But I was unable to send data on the bus.

So investigating why I could send data I gave the Raspberry pi a shot and was able to recive and send data though at a more complex set up as I have to power the Pi from mains connect it to the car and SSH in from my laptop to retrieve the data. A bit more complex BUT it does allow me to send data on the BUS. Ill come back to the Arduino issues at a later date.

After recording a few logs and looking through the data along with a bit of guidance from the BiggRanger repository I have noticed when a call is made by a paired phone a series of messages under ID 3F5 appear on the Bus. Unfortunately I am unable to ascertain where the messages originate .

3F5 includes the HEx representation of Connecting Phone and then the time the call has been going. I have tried replaying these commands but there is no change in the response from the headunit .