Support this project: The information on this page is free, but it took a lot of work to gather, test and write up. If it has been useful to you, you can say thanks with a donation at buymeacoffee.com/bigjimny.

Suzuki Jimny JB74 - CAN bus devices and the commands they answer

Status: work in progress. This page lists every module that answered on the OBD socket (DLC) of one RHD UK-market 2021 Jimny, its request and reply CAN IDs, and the diagnostic commands seen so far. Many sections are short because only identification and fault-code requests have been captured. See OBD2 Diagnostics reading project for how the captures were made and for the TPMS data in detail.

How to read this page

All IDs are 11-bit CAN IDs on the OBD socket (pins 6 and 14, 500 kbit/s). The "request ID" is the header a tool sends to; the "reply ID" is where the module answers.
Commands are shown as the payload bytes in hex, without the ISO-TP length byte. Replies longer than 7 bytes are sent as several frames; the tables show them reassembled.
KWP-style modules use services such as 1A (read ECU identification) and 18 (read DTCs by status). UDS-style modules use 22 (read data by identifier) and 19 (read DTCs).
The reply ID is not always the request ID plus 8: the engine is +0x08, the 0x261 to 0x274 group is +0x400, and all others are +0x10.
Identification strings are ASCII Suzuki part numbers. The first one in each module (1A 8E or 22 F1 01) has no trailing character; the second (1A 8A or 22 F1 88) ends in *. They do not always equal the number printed on the module's label.
Commands marked captured were seen in a trace. Nothing here has been sent to a module by us except the TPMS requests.

Example usage

This example reads the TPMS controller (request ID 0x798) with an ELM327 adapter in a terminal app. Use a terminal that sends a carriage return (CR) at the end of each line, with the ignition on. Send the commands one at a time and wait for OK after each.

Command	Purpose
`ATZ`	Reset the adapter (prints the adapter version, not OK)
`ATSP6`	Use protocol 6: ISO 15765-4, 11-bit CAN, 500 kbit/s
`ATSH798`	Send requests to the TPMS controller (see device table above)
`ATS0`	No spaces in the reply (stops one clone adapter overflowing its buffer)
`ATL0`	No line feeds in the reply
`ATFCSH798`	Send flow-control frames to 0x798 (see device table above)
`ATFCSD300000`	Flow-control data `30 00 00`: continue, send all frames, no delay
`ATFCSM1`	Use the custom flow-control header and data above
`2100`	Request the sensor data block (service 0x21, identifier 0x00) ( see device specific tables below)

Example reply (generic ELM327 clone, ignition on, engine off):

2100
066
0:610075010000
1:0000000000004E
2:AA094310397901
3:4900DD91B52520
4:3B880149004EAA
5:0319183C830249
6:004EAA09C9083C
7:83024900000000
8:004EAA09434EAA
9:09434EAA09434E
A:AA094373737373
B:7D7D7D7D000000
C:00000000000000
D:00000030222202
E:01801700000000

Reading the reply:

066 is the total length in hex: 0x66 = 102 bytes. The lines 0: to E: carry those bytes in order.
The data starts 61 00 (positive reply to 21 00). The next byte, 75 = 117, probably tracks system voltage (about 11.7 V, unconfirmed).
Each wheel has a 10-byte record. Byte +6 of the record is the pressure; bar = raw x 0.01372.

Wheel	Record (hex)	Byte +6	Raw	Pressure
Front left	`4E AA 09 43 10 39 79 01 49 00`	`79`	121	1.66 bar
Rear left	`DD 91 B5 25 20 3B 88 01 49 00`	`88`	136	1.87 bar
Rear right	`4E AA 03 19 18 3C 83 02 49 00`	`83`	131	1.80 bar
Front right	`4E AA 09 C9 08 3C 83 02 49 00`	`83`	131	1.80 bar

Notes:

The sensor IDs, and the byte values, are from one car. Your IDs will differ, and the values change with pressure and temperature.
ATSH and the ATFC settings last until the adapter is reset (ATZ) or loses power, so send them again after either.
Without the ATFC lines, the clone adapter used here returned only the first line (610075010000).
If the terminal prints NO DATA, check the ignition is on, that no other app is connected to the adapter, and that ATSH798 was sent after the last reset.

Device table

Request ID	Reply ID	Style	Module	Identification reply (first / second)	How the module was identified
0x7E0	0x7E8	KWP	ECM	33980-78R0 / 33980-78RC*	Standard engine address
0x261	0x661	KWP	ABS (inferred)	56100-77RA / 56100-78RF*	Only brake module left by elimination
0x263	0x663	KWP	EPS controller	38720-77R0 / 38720-77R0*	Parts catalogue (38720-77R01)
0x271	0x671	KWP	Body control module	36775-77R0 / 36775-77RC*	Parts catalogue (36775-77RC2 to RC4)
0x274	0x674	KWP	Instrument cluster	34100-78R0 / 34110-78RD*	Rev counter sweep test
0x798	0x7A8	KWP	TPMS controller	37160-61M0 / 37120-78R0*	Label (Model No. P61M0) and parts catalogue
0x79A	0x7AA	KWP	Combination switch (lighting and turn)	37210-74PA / 37210-74PE*	Parts catalogue (37210-74PE2)
0x778	0x788	KWP	Dual sensor brake support (inferred)	33990-52R0 / 33990-78R8*	By elimination
0x793	0x7A3	UDS	Airbag (SRS) controller	38910-77R0 / 38910-78RC*	Parts catalogue (38910-78RC0)
0x772	0x782	UDS	4WD shift controller	38885-77R0 / 38885-78R0*	Parts catalogue (38885-78R01)
0x799	0x7A9	UDS	E-call controller	38960-78RA / 38960-78RA*	Parts catalogue (38960-78RA0, RA1)
0x751	0x761	UDS	Central gateway	33580-79R0 / 33580-78R0*	Label (33580-79R01) and parts catalogue

Two more addresses, 0x273 and 0x262, were probed by the scan tool and did not answer.

The names marked "inferred" are guesses from elimination and part-number series, not confirmed by a label or test.