Welcome to Tesla Motors Club
Discuss Tesla's Model S, Model 3, Model X, Model Y, Cybertruck, Roadster and More.
Register

Let the hacking begin... (Model S parts on the bench)

This site may earn commission on affiliate links.
That was data recorded from the powertrain CAN bus from a soft ~20 to 60 launch at a pretty low SoC (~38%) in a P85D. I was able to fiddle with the various pieces of data and play it back to my bench setup to see what the IC did with the data, which let me nail down the variables. The "presto" moment was realizing I was looking at scaled battery voltage and current :) :) :) I may get sidetracked and make a tech display that parses this data out in real time for performance monitoring in my car... :)

So do I understand correctly that the data you would be able to capture from your P85D and then feed to your bench set up for performance monitoring would be more accurate data than what is available through the REST API combined with VBox monitoring?
 
Holy...A drop of 100V under full throttle?
I thought you were off on your 50V estimate but...wow. Yea. Tesla are getting every last drop out of the pack.

Yeah, I've confirmed that once the IC is up I can disconnect everything from it besides power and it will stay up. Pretty cool. The errors seem to be thrown from the MCU, though.

This makes sense, as the gateway is integrated into the MCU. The gateway probably determines error codes, not the applications processor. (I believe there is a Freescale automotive processor, and an Altera FPGA on the MCU main board. The automotive processor probably handles the gateway interaction and the FPGA probably handles something to do with the display or camera...it's unclear..tied into a few large DDR memory ICs.)
 
Last edited:
The camera signal wiring is definite digital, so as long as Tesla didn't waste a bunch of resources adding layers of encryption to a rearview camera... probably in good shape. Even if they did, eventually I'm getting into the MCU and I'll figure out what it is. :)

Could someone please get me the part number of the camera itself (the Tesla module number may help, too). I remember that in the very early days, some manufacturer was priding himself with having the Tesla contract, but I can't find that article anymore. It contained part numbers, and I was able to find the tech sheets including much of the digital camera format.
 
Yeah, I've confirmed that once the IC is up I can disconnect everything from it besides power and it will stay up. Pretty cool. The errors seem to be thrown from the MCU, though.



Definitely on my list.

In the meantime, I'm working on decoding some of the data that reaches the IC and I'm getting sidetracked a little.

For example..........

Code:
253.06 V @ -1213.6 A = -307.114 kW (54 MPH / 98.0% throttle) (Pack temp?: 54 F) 
254.07 V @ -1216.2 A = -309.000 kW (54 MPH / 98.0% throttle) (Pack temp?: 54 F) 
253.68 V @ -1220.5 A = -309.616 kW (54 MPH / 98.0% throttle) (Pack temp?: 55 F) 
254.68 V @ -1200.5 A = -305.743 kW (54 MPH / 98.0% throttle) (Pack temp?: 55 F) 
252.44 V @ -1213.9 A = -306.437 kW (54 MPH / 98.0% throttle) (Pack temp?: 55 F) 
254.80 V @ -1206.7 A = -307.467 kW (54 MPH / 98.0% throttle) (Pack temp?: 55 F) 
252.56 V @ -1200.9 A = -303.299 kW (54 MPH / 98.0% throttle) (Pack temp?: 55 F) 
252.42 V @ -1229.8 A = -310.426 kW (54 MPH / 98.0% throttle) (Pack temp?: 54 F) 
255.29 V @ -1185.1 A = -302.544 kW (55 MPH / 98.0% throttle) (Pack temp?: 55 F) 
253.29 V @ -1203.5 A = -304.835 kW (55 MPH / 98.0% throttle) (Pack temp?: 55 F) 
252.43 V @ -1227.3 A = -309.807 kW (55 MPH / 98.0% throttle) (Pack temp?: 55 F) 
253.04 V @ -1215.5 A = -307.570 kW (55 MPH / 98.0% throttle) (Pack temp?: 55 F) 
252.69 V @ -1212.3 A = -306.336 kW (55 MPH / 98.0% throttle) (Pack temp?: 55 F) 
251.70 V @ -1227.7 A = -309.012 kW (55 MPH / 98.0% throttle) (Pack temp?: 55 F) 
254.07 V @ -1211.4 A = -307.780 kW (55 MPH / 98.0% throttle) (Pack temp?: 55 F) 
251.45 V @ -1223.4 A = -307.624 kW (55 MPH / 98.0% throttle) (Pack temp?: 55 F) 
254.43 V @ -1217.0 A = -309.641 kW (55 MPH / 98.0% throttle) (Pack temp?: 54 F) 
253.43 V @ -1206.4 A = -305.738 kW (55 MPH / 98.0% throttle) (Pack temp?: 55 F) 
254.55 V @ -1199.4 A = -305.307 kW (56 MPH / 98.0% throttle) (Pack temp?: 55 F) 
254.68 V @ -1176.1 A = -299.529 kW (56 MPH / 98.0% throttle) (Pack temp?: 54 F) 
252.94 V @ -1216.2 A = -307.626 kW (56 MPH / 98.0% throttle) (Pack temp?: 54 F) 
253.82 V @ -1207.6 A = -306.513 kW (56 MPH / 98.0% throttle) (Pack temp?: 54 F) 
252.32 V @ -1210.8 A = -305.509 kW (56 MPH / 98.0% throttle) (Pack temp?: 55 F) 
254.94 V @ -1194.9 A = -304.628 kW (56 MPH / 98.0% throttle) (Pack temp?: 54 F) 
250.95 V @ -1213.8 A = -304.603 kW (56 MPH / 98.0% throttle) (Pack temp?: 55 F) 
255.44 V @ -1211.0 A = -309.338 kW (56 MPH / 98.0% throttle) (Pack temp?: 55 F) 
252.56 V @ -1191.8 A = -301.001 kW (56 MPH / 98.0% throttle) (Pack temp?: 55 F) 
252.19 V @ -1234.0 A = -311.202 kW (56 MPH / 98.0% throttle) (Pack temp?: 55 F) 
255.05 V @ -1193.0 A = -304.275 kW (57 MPH / 98.0% throttle) (Pack temp?: 55 F) 
253.19 V @ -1208.6 A = -306.005 kW (57 MPH / 98.0% throttle) (Pack temp?: 55 F) 
253.08 V @ -1220.6 A = -308.909 kW (57 MPH / 98.0% throttle) (Pack temp?: 55 F) 
252.70 V @ -1210.2 A = -305.818 kW (57 MPH / 98.0% throttle) (Pack temp?: 55 F) 
254.57 V @ -1191.8 A = -303.397 kW (57 MPH / 98.0% throttle) (Pack temp?: 55 F) 
251.33 V @ -1211.1 A = -304.386 kW (57 MPH / 98.0% throttle) (Pack temp?: 55 F) 
253.07 V @ -1231.6 A = -311.681 kW (57 MPH / 98.0% throttle) (Pack temp?: 55 F) 
252.94 V @ -1205.2 A = -304.843 kW (57 MPH / 98.0% throttle) (Pack temp?: 54 F) 
253.69 V @ -1203.6 A = -305.341 kW (57 MPH / 98.0% throttle) (Pack temp?: 55 F) 
251.43 V @ -1218.5 A = -306.367 kW (57 MPH / 98.0% throttle) (Pack temp?: 55 F) 
252.56 V @ -1232.2 A = -311.204 kW (57 MPH / 98.0% throttle) (Pack temp?: 54 F) 
252.81 V @ -1212.3 A = -306.482 kW (57 MPH / 98.0% throttle) (Pack temp?: 55 F) 
251.93 V @ -1222.2 A = -307.909 kW (57 MPH / 98.0% throttle) (Pack temp?: 55 F) 
251.41 V @ -1225.4 A = -308.078 kW (57 MPH / 98.0% throttle) (Pack temp?: 55 F) 
252.66 V @ -1220.1 A = -308.270 kW (57 MPH / 98.0% throttle) (Pack temp?: 55 F) 
252.02 V @ -1210.9 A = -305.171 kW (57 MPH / 98.0% throttle) (Pack temp?: 55 F) 
251.66 V @ -1216.6 A = -306.170 kW (57 MPH / 98.0% throttle) (Pack temp?: 55 F) 
253.78 V @ -1209.8 A = -307.023 kW (57 MPH / 98.0% throttle) (Pack temp?: 54 F) 
251.91 V @ -1213.5 A = -305.693 kW (57 MPH / 98.0% throttle) (Pack temp?: 55 F) 
253.53 V @ -1209.1 A = -306.543 kW (57 MPH / 98.0% throttle) (Pack temp?: 54 F) 
253.02 V @ -1200.1 A = -303.649 kW (58 MPH / 98.0% throttle) (Pack temp?: 55 F) 
252.14 V @ -1221.4 A = -307.964 kW (58 MPH / 98.0% throttle) (Pack temp?: 55 F) 
254.14 V @ -1187.9 A = -301.893 kW (58 MPH / 98.0% throttle) (Pack temp?: 54 F) 
252.40 V @ -1195.5 A = -301.744 kW (58 MPH / 98.0% throttle) (Pack temp?: 55 F) 
252.77 V @ -1217.4 A = -307.722 kW (58 MPH / 98.0% throttle) (Pack temp?: 55 F) 
253.89 V @ -1187.9 A = -301.596 kW (58 MPH / 98.0% throttle) (Pack temp?: 55 F) 
252.78 V @ -1206.8 A = -305.055 kW (58 MPH / 98.0% throttle) (Pack temp?: 55 F) 
253.65 V @ -1207.9 A = -306.384 kW (58 MPH / 98.0% throttle) (Pack temp?: 55 F) 
252.91 V @ -1203.4 A = -304.352 kW (58 MPH / 98.0% throttle) (Pack temp?: 55 F) 
254.18 V @ -1202.5 A = -305.651 kW (58 MPH / 98.0% throttle) (Pack temp?: 55 F) 
252.05 V @ -1197.8 A = -301.905 kW (59 MPH / 98.0% throttle) (Pack temp?: 55 F) 
254.42 V @ -1202.5 A = -305.940 kW (59 MPH / 98.0% throttle) (Pack temp?: 55 F) 
252.80 V @ -1191.1 A = -301.110 kW (59 MPH / 97.6% throttle) (Pack temp?: 55 F) 
254.06 V @ -1208.1 A = -306.930 kW (59 MPH / 97.2% throttle) (Pack temp?: 55 F) 
253.19 V @ -1191.2 A = -301.600 kW (59 MPH / 96.0% throttle) (Pack temp?: 55 F) 
252.05 V @ -1212.1 A = -305.510 kW (59 MPH / 94.9% throttle) (Pack temp?: 55 F) 
256.16 V @ -1166.7 A = -298.862 kW (59 MPH / 93.3% throttle) (Pack temp?: 55 F) 
252.92 V @ -1194.2 A = -302.037 kW (59 MPH / 90.9% throttle) (Pack temp?: 55 F) 
254.28 V @ -1194.9 A = -303.839 kW (59 MPH / 88.2% throttle) (Pack temp?: 55 F) 
254.28 V @ -1178.6 A = -299.694 kW (59 MPH / 84.7% throttle) (Pack temp?: 55 F) 
252.28 V @ -1214.4 A = -306.369 kW (60 MPH / 80.0% throttle) (Pack temp?: 55 F) 
256.41 V @ -1177.0 A = -301.795 kW (60 MPH / 74.1% throttle) (Pack temp?: 55 F) 
260.78 V @ -1108.7 A = -289.127 kW (60 MPH / 67.4% throttle) (Pack temp?: 55 F) 
263.28 V @ -1054.9 A = -277.734 kW (60 MPH / 60.8% throttle) (Pack temp?: 55 F) 
264.27 V @ -1042.8 A = -275.581 kW (60 MPH / 54.9% throttle) (Pack temp?: 55 F) 
266.90 V @ -1015.2 A = -270.957 kW (60 MPH / 49.4% throttle) (Pack temp?: 55 F) 
272.53 V @ -943.3 A = -257.078 kW (60 MPH / 44.3% throttle) (Pack temp?: 55 F) 
276.64 V @ -870.7 A = -240.870 kW (60 MPH / 40.8% throttle) (Pack temp?: 55 F) 
278.13 V @ -841.1 A = -233.935 kW (60 MPH / 38.4% throttle) (Pack temp?: 55 F) 
284.00 V @ -758.7 A = -215.471 kW (60 MPH / 36.1% throttle) (Pack temp?: 55 F) 
289.53 V @ -680.1 A = -196.909 kW (61 MPH / 34.1% throttle) (Pack temp?: 55 F) 
293.15 V @ -620.7 A = -181.958 kW (61 MPH / 31.8% throttle) (Pack temp?: 55 F) 
297.28 V @ -563.3 A = -167.458 kW (61 MPH / 29.8% throttle) (Pack temp?: 55 F) 
300.89 V @ -506.4 A = -152.371 kW (61 MPH / 28.2% throttle) (Pack temp?: 55 F) 
303.25 V @ -470.4 A = -142.649 kW (61 MPH / 26.7% throttle) (Pack temp?: 55 F) 
307.26 V @ -435.4 A = -133.781 kW (61 MPH / 25.1% throttle) (Pack temp?: 55 F) 
310.39 V @ -384.3 A = -119.283 kW (61 MPH / 23.5% throttle) (Pack temp?: 55 F) 
314.88 V @ -326.5 A = -102.808 kW (61 MPH / 22.0% throttle) (Pack temp?: 55 F) 
317.51 V @ -281.8 A = -89.474 kW (61 MPH / 20.8% throttle) (Pack temp?: 55 F) 
319.25 V @ -256.8 A = -81.983 kW (61 MPH / 19.2% throttle) (Pack temp?: 55 F) 
321.64 V @ -220.7 A = -70.986 kW (61 MPH / 18.0% throttle) (Pack temp?: 55 F) 
324.26 V @ -186.7 A = -60.539 kW (61 MPH / 17.2% throttle) (Pack temp?: 55 F) 
326.26 V @ -162.6 A = -53.050 kW (61 MPH / 16.1% throttle) (Pack temp?: 55 F) 
328.00 V @ -132.1 A = -43.329 kW (61 MPH / 14.9% throttle) (Pack temp?: 55 F) 
329.88 V @ -107.8 A = -35.561 kW (61 MPH / 14.1% throttle) (Pack temp?: 55 F) 
331.12 V @ -90.2 A = -29.867 kW (61 MPH / 13.3% throttle) (Pack temp?: 55 F) 
333.38 V @ -73.7 A = -24.570 kW (61 MPH / 12.5% throttle) (Pack temp?: 55 F) 
333.61 V @ -57.1 A = -19.049 kW (61 MPH / 11.8% throttle) (Pack temp?: 55 F) 
336.00 V @ -36.0 A = -12.096 kW (61 MPH / 11.0% throttle) (Pack temp?: 55 F) 
336.50 V @ -26.0 A = -8.749 kW (61 MPH / 10.6% throttle) (Pack temp?: 55 F) 
337.63 V @ -14.1 A = -4.761 kW (61 MPH / 9.8% throttle) (Pack temp?: 55 F) 
338.50 V @ -4.5 A = -1.523 kW (61 MPH / 9.0% throttle) (Pack temp?: 55 F) 
338.36 V @ -0.2 A = -0.068 kW (61 MPH / 8.6% throttle) (Pack temp?: 55 F) 
338.62 V @ -6.0 A = -2.032 kW (61 MPH / 8.2% throttle) (Pack temp?: 55 F) 
339.12 V @ -2.7 A = -0.916 kW (61 MPH / 7.4% throttle) (Pack temp?: 55 F) 
339.76 V @  4.7 A = 1.597 kW (61 MPH / 7.1% throttle) (Pack temp?: 55 F) 
340.77 V @ 12.3 A = 4.191 kW (61 MPH / 6.7% throttle) (Pack temp?: 55 F) 
341.52 V @ 21.4 A = 7.309 kW (61 MPH / 6.3% throttle) (Pack temp?: 55 F) 
342.74 V @ 38.5 A = 13.195 kW (61 MPH / 5.9% throttle) (Pack temp?: 55 F) 
344.11 V @ 60.1 A = 20.681 kW (61 MPH / 5.5% throttle) (Pack temp?: 55 F) 
344.99 V @ 72.6 A = 25.046 kW (61 MPH / 5.1% throttle) (Pack temp?: 55 F) 
346.38 V @ 89.8 A = 31.105 kW (61 MPH / 4.7% throttle) (Pack temp?: 55 F) 
347.25 V @ 100.1 A = 34.760 kW (61 MPH / 4.7% throttle) (Pack temp?: 55 F) 
347.36 V @ 102.9 A = 35.743 kW (61 MPH / 4.3% throttle) (Pack temp?: 56 F) 
348.48 V @ 111.6 A = 38.890 kW (61 MPH / 3.9% throttle) (Pack temp?: 55 F) 
348.24 V @ 117.1 A = 40.779 kW (61 MPH / 3.9% throttle) (Pack temp?: 55 F) 
348.76 V @ 122.0 A = 42.549 kW (61 MPH / 3.5% throttle) (Pack temp?: 55 F) 
348.88 V @ 123.7 A = 43.156 kW (61 MPH / 3.5% throttle) (Pack temp?: 55 F) 
349.50 V @ 124.9 A = 43.653 kW (61 MPH / 3.1% throttle) (Pack temp?: 55 F) 
349.13 V @ 119.4 A = 41.686 kW (61 MPH / 3.1% throttle) (Pack temp?: 55 F) 
349.24 V @ 113.9 A = 39.778 kW (61 MPH / 2.7% throttle) (Pack temp?: 55 F) 
348.86 V @ 115.5 A = 40.293 kW (61 MPH / 2.7% throttle) (Pack temp?: 55 F) 
349.25 V @ 118.3 A = 41.316 kW (61 MPH / 2.4% throttle) (Pack temp?: 55 F) 
349.50 V @ 120.8 A = 42.220 kW (61 MPH / 2.4% throttle) (Pack temp?: 55 F) 
349.64 V @ 122.2 A = 42.726 kW (61 MPH / 2.4% throttle) (Pack temp?: 55 F) 
349.89 V @ 124.9 A = 43.701 kW (61 MPH / 2.0% throttle) (Pack temp?: 55 F) 
350.14 V @ 125.0 A = 43.767 kW (61 MPH / 2.0% throttle) (Pack temp?: 55 F) 
351.14 V @ 139.4 A = 48.949 kW (61 MPH / 2.0% throttle) (Pack temp?: 55 F) 
351.14 V @ 143.5 A = 50.389 kW (61 MPH / 1.6% throttle) (Pack temp?: 55 F) 
351.26 V @ 141.1 A = 49.563 kW (61 MPH / 1.6% throttle) (Pack temp?: 55 F) 
351.26 V @ 142.5 A = 50.055 kW (61 MPH / 1.6% throttle) (Pack temp?: 55 F) 
352.26 V @ 149.6 A = 52.698 kW (61 MPH / 1.6% throttle) (Pack temp?: 55 F) 
352.00 V @ 157.8 A = 55.546 kW (61 MPH / 1.2% throttle) (Pack temp?: 56 F) 
352.88 V @ 158.2 A = 55.826 kW (61 MPH / 1.2% throttle) (Pack temp?: 55 F) 
353.02 V @ 164.3 A = 58.001 kW (61 MPH / 1.2% throttle) (Pack temp?: 55 F) 
352.90 V @ 164.0 A = 57.876 kW (61 MPH / 1.2% throttle) (Pack temp?: 55 F) 
353.28 V @ 163.1 A = 57.620 kW (61 MPH / 1.2% throttle) (Pack temp?: 55 F) 
353.40 V @ 163.3 A = 57.710 kW (61 MPH / 0.8% throttle) (Pack temp?: 55 F) 
353.66 V @ 167.5 A = 59.238 kW (61 MPH / 0.8% throttle) (Pack temp?: 56 F) 
354.00 V @ 174.6 A = 61.808 kW (61 MPH / 0.8% throttle) (Pack temp?: 55 F) 
354.00 V @ 173.0 A = 61.242 kW (61 MPH / 0.8% throttle) (Pack temp?: 55 F) 
353.87 V @ 175.7 A = 62.175 kW (61 MPH / 0.8% throttle) (Pack temp?: 56 F) 
354.38 V @ 177.7 A = 62.973 kW (61 MPH / 0.8% throttle) (Pack temp?: 55 F) 
354.38 V @ 177.9 A = 63.044 kW (61 MPH / 0.8% throttle) (Pack temp?: 55 F)


(more of that data here: http://skie.net/uploads/rollingto60.txt )

That was data recorded from the powertrain CAN bus from a soft ~20 to 60 launch at a pretty low SoC (~38%) in a P85D. I was able to fiddle with the various pieces of data and play it back to my bench setup to see what the IC did with the data, which let me nail down the variables. The "presto" moment was realizing I was looking at scaled battery voltage and current :) :) :) I may get sidetracked and make a tech display that parses this data out in real time for performance monitoring in my car... :)

Well done on this project!

Out of interest I note none of your throttle positions are 100% (seems capped at 98%) I wonder what an S85 would look like?

We certainly know that throttle maps can be adjusted OTA, I wonder if there is something here to investigate (if performance tuning were the goal).
 
So do I understand correctly that the data you would be able to capture from your P85D and then feed to your bench set up for performance monitoring would be more accurate data than what is available through the REST API combined with VBox monitoring?

Yep, looks that way. Definitely faster than the REST API. The voltage and amperage are literally reported 100 times per second, and speed with 0.1 MPH resolution is reported 10 times per second. That's pretty awesome data.

Holy...A drop of 100V under full throttle?
I thought you were off on your 50V estimate but...wow. Yea. Tesla are getting every last drop out of the pack.

Yep, pretty much matches my estimates from a few months back. http://skie.net/uploads/packampsvshp.jpg

Could someone please get me the part number of the camera itself (the Tesla module number may help, too). I remember that in the very early days, some manufacturer was priding himself with having the Tesla contract, but I can't find that article anymore. It contained part numbers, and I was able to find the tech sheets including much of the digital camera format.

I don't have this info handy, but I'll dig it out later if no one else steps up with it before I get a chance.

Well done on this project!

Out of interest I note none of your throttle positions are 100% (seems capped at 98%) I wonder what an S85 would look like?

We certainly know that throttle maps can be adjusted OTA, I wonder if there is something here to investigate (if performance tuning were the goal).

Please excuse my throttle position part. The throttle position shown is kind of an estimate. I'm not 100% sure the range of that value so I just set the max value I saw as 100% in my parser. It's definitely throttle position, though.
 
Could someone please get me the part number of the camera itself (the Tesla module number may help, too). I remember that in the very early days, some manufacturer was priding himself with having the Tesla contract, but I can't find that article anymore. It contained part numbers, and I was able to find the tech sheets including much of the digital camera format.

There is no part number on the camera. Tesla has a part number but that will not help trace its origin. As I recall from open it up its made in Japan.
 
OK, so for kicks I went ahead and CAN logged a bit of P85D fun and plotted some graphs. This definitely verifies the ~1300A ceiling on the P85D power draw.

launch1-CANgraph.jpg


(parsed CAN data: http://skie.net/uploads/launch1-parsed.txt )

Launch from 0 to ~67 or so. (No launch mode, still on v7.0 2.7.77). Interesting that the throttle position and power data are ahead of the speedometer data by ~0.3s or so. This was a hair up hill, pack was pretty cold. I think my "Pack temp?" variable is related to the pack temp, since it rises after launches... but I don't think it's actually correct since it's 48F or so in my garage. (Hence the question mark ;) ) Also appears that it either took about 0.6s for me to mash the accelerator (not likely), or that variable is feathered.

launch2-CANgraph.jpg


(parsed CAN data: http://skie.net/uploads/launch2-parsed.txt )

Tires skipped a little on this one, and you can see it in the high resolution power output graph. Interestingly, time to 60 MPH was exactly the same in both launches and I got a reading of 60+ MPH for the first time 3.881 seconds after throttle position was > 0, or 3.600 seconds after the first non-zero MPH read. (Obviously no roll out nonsense here).

The speedometer reading is 10 Hz (0.1s resolution) data and the power is 100 Hz (0.01s resolution / 10ms resolution).

These were starting at about 90% SoC.

Anyway, that's enough fun for today. :)
 
Last edited:
I've got CAN bus product from previous efforts along with some spare time. I am wiling to provide both to a forum member support effort (non-profit similar to the key fob project) should the group want to develop a Tesla CAN data gathering and analysis tool set. The hardware design has long since paid for itself :)
 
Very interested to see if pack 'true' SoC and cell / string voltages will be decodeable on the bus traffic

I haven't caught any CAN data that looks like it could be string voltages... but then again, the car is sending 2000+ frames per second on the power train CAN bus, so... lots to look through. Still holding out hope since the diagnostic screen shots we've seen suggests this data is there, just not sure if it's something always sent or not.

Out of interest (and sorry if I missed it) which CAN Bus logger are you using, and where are you tapping into the data line on your working car ?

I'm using EVTV's SavvyCAN box along with some custom hardware I whipped up previously. Most of the CAN buses are accessible on Tesla's diagnostic connector that is hidden above the little pouch that's under the 17" screen. The pouch is just held in with a couple of clips and pull right down.

I've got CAN bus product from previous efforts along with some spare time. I am wiling to provide both to a forum member support effort (non-profit similar to the key fob project) should the group want to develop a Tesla CAN data gathering and analysis tool set. The hardware design has long since paid for itself :)

Sounds like a plan. Does your CAN bus stuff work at 500 kbit? That was an issue I was having with some of my cheap CAN hardware...
 
My bits are based on a Freescale 32 bit device (running at over 50 MHz IIRC). The CAN engine is integrated but autonomous including address screening. It can handle CAN bus rates up to 1M and would have zero problem filtering, parsing and logging traffic from a 1/2M bus. I'll have to check but I seem to remember 8 Mbyte of on board flash. One of my older designs used an SD card but these particular boards were meant to be potted in epoxy and had onboard flash parts.

Here is some diagnostics stuff from a man in the middle voltage (potentiometer) based suspension module. The wheel speeds are CAN data (from a 1/2M bus) while the wheel heights are local a/d and d/a data.
New Page 1

I normally use IXXAT for my logging and have found my hardware often catches stuff that the IXXAT does not. It is the benefit of a dedicated processor and no Windows overhead.

I think I have a pile of boards still laying around. I'd put them into a project at cost if we could come up with a plug and play Model S harness and some good data viewing software.
 
Earlier in the thread you had mentioned that the speed was a 1-byte value (0 - 255) but in the latest graphs you mention 0.1 MPH precision for the speed readings. Are these just coming from different CAN busses?
 
Omnivision makes the IC not sure who the Tier-1 is that does the integration (maybe Tesla themselves?)

That's the sensor not the camera itself. This was a dead end WhiteP85 and I went down several years ago when he was designing the camera switch PCB. When he did the front camera switch design hw found that there was a way to invert the front camera image on the horizontal plane but it was a software solution that required access to the touchscreen controls.
 
Earlier in the thread you had mentioned that the speed was a 1-byte value (0 - 255) but in the latest graphs you mention 0.1 MPH precision for the speed readings. Are these just coming from different CAN busses?

Oh, right. I must have forgotten to mention I deciphered a better speed read out.

The *numeric* speed displayed on the IC is one byte. The speed used by the analog meter (now missing from the autopilot cars on the IC but still in the raw data) is actually 12-bits and is speed_in_mph/10.