Jump to content

CwazyWabbit

Forum Financial Supporter
  • Posts

    7,222
  • Joined

  • Last visited

  • Days Won

    30

Posts posted by CwazyWabbit

  1. I got mine changed a couple months ago by a guy in a mobile van. He pointed out to me some damage around the case crimping to say that it had been opened before and wasn't him. Afterwards, he said it was as difficult to open as a motorcycle speedo... :huh: So in my case, it was definitely opened.

    I tried the drill too but calculated it would take a week at full tilt, keeping the drill piece perfectly in line and soundproofing it from the neighbours. Ended up paying £70 to this guy after quotes of up to £230! And he did it in 20 minutes.

    I think most cars are easy to open the instruments on, I have a ford galaxy instrument pack here and just a few screws and it's all in bits.... although I think it's mileage is stored in the ECU.

    Just for info, was he adding miles on or taking them off?

    Cheers for the information :)

  2. Got a speedo you can have a look at !

    Just been on the micronas website and found a uk distributor, I'll send an enquiry from my prof. email tomorrow !

    Fingers crossed you get a result with the enquiry, they may tell you it's obsolete though (I don't know if it is) and try to sell you something else, but definitely worth a try :D Even a datasheet for a related chip may be of use....

  3. I've been following this thread with interests as I'm planning on doing the panel conversion. You guys lost me extremely early on (I only just learnt about hex)and am extremely impressed at your abilities.

    "I'm thinking a few more examples of flash contents might be helpful now..... any volunteers?"

    Even this gets me :blink: - If it means you want another speedo to try, I have one waiting in my garage with unknown mileage on.

    Malcolm

    The memory chip inside the speedo that stores the mileage when the power is off is a type of memory chip known as a flash memory chip. Flash contents is just shorthand for contents of the flash memory chip. By comparing the information in these chips we may be able to work out what else is stored there.

    Where abouts are you located Malcolm?

  4. I'll take it out of the truck over the weekend & have a good look, it didn't look tampered with when I got it back.

    That would be great Ralph, there may be a few marks on the white plastic and the inner edge of the metal ring if digidash opened yours. Although I imagine they are quite practiced at it now so the marks may not be too obvious.

    Thanks again :D

  5. Would be worth tracing the connections from the 3 pin connector to the relevant chip to see what inputs they are connected to (not easy on 3-4 layer pcbs!!!) , then grabbing the datasheet of the relevant chip and what level they operate at. If there is a xtal, worth checking what frequency it is operating at. (and be careful of cheap meters as the buzzer could potentially blow the low voltage circuits, probably stating the obvious now!)

    Great work guys, keep it up !

    Middle pin goes direct to GND and the two others go via resistors to the only other chip on the board besides the eeprom. Unfortunately the IC manufacturer seems to be quite good at keeping their datasheets secret.

    The chip in question is a Micronas CDVN 2117, there's a picture somewhere on page 2

    I'll take a look at the Xtal in a mo...

    I'm thinking a few more examples of flash contents might be helpful now..... any volunteers? ;)

  6. As mentioned before, the Buspirate is exactly the widget to communicate with this, cheap, open-source, off-the-shelf and works on anything with a USB port (and has 100's of other uses too - anyone for CANBUS?)

    Very good point, and it looks like it has microwire support already if people want to program their own flash :)

    http://code.google.com/p/the-bus-pirate/source/browse/trunk/scripts/pyBusPirateLite/MicroWire.py?spec=svn355&r=355

  7. ..... Would be real good if we could make something to talk to the 3 pin port on the back to avoid opening the case.

    I manage with this electronics stuff but dont get a great deal of time to use it. Id be interested in making a micro controller based LCD display / button arrangement to type a new mileage in to adjust the mileage from out side the case but have no idea how that port works.

    ...

    Good point, would make changing them a lot quicker, which has to be a good thing. :)

    So far all I know about that 3 pin port is

    Centre pin is GND

    The other two pins are connected to the main chip via resistors.

    There has been no observed activity on the pins during testing apart from one being pulled to 5v at power up.

    We have been unable to find the main chips datasheet....yet.

    We have anecdotal evidence that to reduce mileage requires opening the case but adding mileage can be done without opening the case.

    I have clocked the input on this speedo at approx 1.6khz with no adverse affects observed, mileage increased at approximately 25 miles per minute. Any greater frequency and the speedo fails to register a signal. Even so that is about 1500MPH which means you could add 50 000 miles to a speedo in about a day and a half, using a microcontroller You could automate the stop time so you don't overshoot.

    It has so far been a good day :)

  8. Top idea, I'd donate for that.

    Although I expect Mr Wabbit could become a very busy man, and would reasonably like something for his efforts too.

    That may be a good way to get more example flash dumps to help work out what the other contents are. At the moment I'd guess it would take about an hour to do the dismantling, soldering, reprogramming and reassembly... with the proviso we haven't actually put James's back together yet! :)

    How much of a forum donation would that be worthy of? I don't mind doing them for free providing any expense is covered (probably just return postage, can't think of owt else) and people understand no guarantees are provided. Also I reserve the right to change my mind if it turns out 1000's of people want them redone and I'm not getting any sleep! :P

    All information discovered about these Speedos will be published on LR4x4 so people are free to just reprogram their own if they like.

    Important point to note at the moment is there are some marks left on the back of the metal ring that holds the glass in place using our current method. These are not visible when it's put back in the binnacle though.

  9. You need to look for points on the diagrams where there shouldn't be power unless the switch is on, if that makes sense, an example would be the wire going from the switch to the coil of a relay. It can be a bit of a nightmare but working methodically through a bundle of wires making a note of what you have tested and what reading you got really helps. Also there will be things that naturally will cause what appears to be continuity between wires, again this may be coils of relays etc, so it might help to unplug relays and fuses before testing to help save you getting false results, just remember what went where! :D digital cameras can be a god send :).

  10. Well it's worth a shot, a good shot of WD40 to displace any water or carp in the connector then clean it up and seal it in some way, it won't do any harm.

    Another theory could be related to damaged insulation on some cables in the loom, maybe they have rubbed somewhere and are shorting out hence the interaction between different circuits, it's possible that some moisture is giving it a hand as well. It may be worth using a multimeter to see if there is some kind of short going on between the circuits.

  11. Is that a warning light in the middle of the dial, just above the needle pivot? Can you tell I've never seen a TD5 speedo? :)

    If it is, I wonder if it's a speed warning light. I think some markets (Japan?) have overspeed warning lights at 120kmh. Maybe one of the bits toggles this? My first guess would be word 10 (currently 8000, only one bit set)

    Rob.

    There looks to be a red light there, but I've never seen one of these in a vehicle :D, I'm just doing this for the challenge and because I think people being charged a £100 for changing a few bytes is a bit rough.

  12. Of course, you'd replace the background of the dial with one that has the letters 'km/h' rather than 'mph', so it would probably have a suitable km/h scale too. The sensor pulses per stepper motor steps / degree of needle deflection would remain the same.

    Sure different speeds e.g. 140mph rather than 120mph would need a different calibration factor for the road speed versus needle angle, as RJF was suggesting.

    Google tells me that 1 mph = 1.609344 km/h so the 2562ppm might be slightly out (2547.621 pulses)

    Kev

    Don't forget the total distance traveled recording, that isn't in pulses per angle of stepper motor, that must be a pulses per unit factor.

  13. 4100 is 1004 in hex. Exactly what is in word 08. Word 09 is similar. Maybe one value of pluse per mile for the odo and one for the dial?

    Good idea, I've tried a few different values in that word now and anything other than 0x1004 have so far left it refusing to move the needle :( all works fine again when it is changed back though

  14. I'd seriously doubt the VDO unit is storing VIN info, it's a universal part they flog to LR and knowing LR's development style they'll have done the bare minimum to make it work.

    I also doubt that *all* of the data is useful or used in this application, very rare that you'd be using exactly the right amount of space on a device, so it'll just be the smallest version that had enough space on it.

    As someone else said, the data will probably include a calibration number, MPH/KPH setting, probably a couple of other options (EG illumination always on) - who knows, you could twiddle a bit and make it into a rev counter :P

    Other things I could imagine being stored, either on the quiet or optionally, are store top speed and total up-time / run time.

    I'd say there are some mods for Rover though as there is a specific Rover sticker on the PCB.

    In this particular case I doubt it's storing the top speed as nothing changed when I ran it from the signal generator at an indicated 120MPH, if it has stored it then James will have some explaining to do to the authorities as to how he managed that speed in his 110 :) Although it is a very good point and recording uptime would be a very strong possibility even if just to sort out warranty issues between VDO and Land Rover.

    I might try some 'bit flipping' this evening to see if I can get it to read different speeds while running on a known clock speed.

  15. These are all the numbers I can find printed on it... oh and a gratuitous mileage shot for James :)

    The date code on the stepper motor seems to agree with the '03 claim for the vehicle...

    In image 4 the number written in the same direction as VDO is 0249, you can only see the 49 in the picture.

    post-25689-0-79996000-1308748831_thumb.jpg

    post-25689-0-51137800-1308748870_thumb.jpg

    post-25689-0-38250000-1308748885_thumb.jpg

    post-25689-0-53287000-1308748904_thumb.jpg

    post-25689-0-94011000-1308748927_thumb.jpg

    post-25689-0-48164700-1308748944_thumb.jpg

    post-25689-0-62838700-1308748961_thumb.jpg

    post-25689-0-91984500-1308748982_thumb.jpg

×
×
  • Create New...

Important Information

We use cookies to ensure you get the best experience. By using our website you agree to our Cookie Policy