<\/p>\n
Anyone reading out the fault memory of a commercial vehicle, an engine or an agricultural machine inevitably ends up with three abbreviations: SPN, FMI and OC. Together they form a Diagnostic Trouble Code (DTC), and it is transported by the diagnostic messages DM1 and DM2 defined in SAE J1939-73. This article explains how those two parameter groups are built, how to decompose a DTC correctly, and where hand-written parsers regularly get it wrong.<\/p>\n
<\/p>\n
The parameter group DM1 (Active Diagnostic Trouble Codes)<\/strong> carries PGN 65226 (0xFECA) and is sent with the default priority 6. It is a broadcast message in PDU2 format \u2014 the PF value 0xFE is above 240, so there is no destination address but a group extension. Every device on the network can listen in on DM1 without being addressed.<\/p>\n As long as at least one fault is active, the ECU transmits DM1 cyclically once per second<\/strong>. This is where DM1 differs fundamentally from an event log: a DM1 is not a fault entry but a snapshot of all faults currently present. Once a fault clears, it simply no longer appears in the next DM1.<\/p>\n Important for receivers: even when no fault is active<\/strong>, a standard-compliant device keeps transmitting DM1 cyclically \u2014 with the lamps off and a DTC field containing SPN 0, FMI 0 and occurrence count 0. The absence of DM1 therefore does not mean “no faults”, it means “the device is not responding”. A receiver that does not model this distinction will miss failed ECUs.<\/p>\n When the fault state changes, DM1 may be transmitted once immediately; after that the one-second cycle applies again. An ECU that pushes out DM1 every few milliseconds while a sensor value flutters violates the specification and loads the bus for no reason.<\/p>\n The first two bytes of DM1 do not describe the fault but the indication in the cab. Byte 1 holds the status of four lamps, two bits each:<\/p>\n The values are That second byte is the one most often ignored in practice. Bytes 1 and 2 have to be evaluated together \u2014 only both combined yield the statement “amber warning lamp flashing slowly”. A diagnostic tool that displays byte 1 only withholds information that, for the engine manufacturer, may well distinguish different fault classes.<\/p>\n The first DTC follows from byte 3 onwards. It always occupies exactly four bytes and contains four fields:<\/p>\n The SPN<\/strong> identifies the affected parameter, i.e. what<\/em> is faulty \u2014 the coolant temperature, say, or a particular pressure sensor. The mapping from SPN to parameter is given in SAE J1939-71 and in the J1939 Digital Annex. Manufacturer-specific SPNs are permitted, so an unknown value is not automatically a parser error.<\/p>\n The FMI<\/strong> identifies the failure mode, i.e. how<\/em> the parameter is faulty. The value range 0 to 21 is defined in J1939-73, and 31 means “condition exists” without further specification. The complete table belongs in the standard rather than in a blog article, but it is worth knowing the groups:<\/p>\n The occurrence count<\/strong> records how often the fault has become active since the last reset. The counter saturates at 126, and 127 means “not available”. It does not count down \u2014 an OC of 40 on a fault that is currently active strongly suggests an intermittent loose contact rather than a failed component.<\/p>\n The CM bit has historical roots and is the cause of most incorrectly decoded fault codes. In the early days of J1939 there were several ways of distributing the 19 bits of the SPN across three bytes. Only one of them applies today, and it is indicated by CM = 0<\/strong>: byte 3 holds the least significant byte of the SPN, byte 4 the middle one, and the upper three bits of byte 5 hold the three most significant bits.<\/p>\n A CM = 1<\/strong> signals one of the older methods. Those cannot be told apart from each other, so a generic receiver cannot reliably reconstruct the SPN in that case. For new designs, only CM = 0 is permitted.<\/p>\n The practical mistake happens elsewhere: many hand-written parsers read the SPN as a 24-bit value from bytes 3 to 5 and mask off the lower five bits \u2014 which leaves the three SPN bits from byte 5 in the wrong position. The result is SPN values that happen to look right for faults below 65536 and are systematically wrong above it. Anyone who only uses small SPNs during testing will never notice.<\/p>\n If several faults are active, further DTCs are simply appended in four-byte blocks. Two DTCs already make 10 bytes \u2014 the parameter group then no longer fits into a single CAN frame and has to be transported by the transport protocol.<\/p>\n Since DM1 is a broadcast, the Broadcast Announce Message (BAM)<\/a> is used rather than the handshake procedure CMDT<\/a>. That has two consequences which are often underestimated during design: BAM requires gaps of at least 50 ms between data frames, so a DM1 carrying many faults needs several hundred milliseconds of transmission time. And BAM has no flow control \u2014 a receiver that cannot keep up loses the message silently.<\/p>\n For the implementation this means the DM1 receive path has to handle the transport protocol case from the start. A parser that only processes 8-byte frames with a single DTC works flawlessly on the bench and fails precisely when several faults coincide in the field.<\/p>\nThe lamp status in bytes 1 and 2<\/h2>\n
\n
\n Bits in byte 1<\/th>\n Lamp<\/th>\n Meaning<\/th>\n<\/tr>\n \n 8\u20137<\/td>\n Malfunction Indicator Lamp (MIL)<\/td>\n emissions-related fault<\/td>\n<\/tr>\n \n 6\u20135<\/td>\n Red Stop Lamp<\/td>\n stop the vehicle<\/td>\n<\/tr>\n \n 4\u20133<\/td>\n Amber Warning Lamp<\/td>\n warning, operation may continue<\/td>\n<\/tr>\n \n 2\u20131<\/td>\n Protect Lamp<\/td>\n condition outside engine operation, e.g. coolant<\/td>\n<\/tr>\n<\/table>\n 00<\/code> for off, 01<\/code> for on and 11<\/code> for not available. Byte 2 has exactly the same structure but describes the flash behaviour<\/strong> of the same four lamps: slow flash, fast flash or no flashing.<\/p>\nThe DTC in four bytes<\/h2>\n
\n
\n Field<\/th>\n Width<\/th>\n Position<\/th>\n<\/tr>\n \n SPN (Suspect Parameter Number)<\/td>\n 19 bit<\/td>\n bytes 3 and 4 in full, plus the upper 3 bits of byte 5<\/td>\n<\/tr>\n \n FMI (Failure Mode Identifier)<\/td>\n 5 bit<\/td>\n lower 5 bits of byte 5<\/td>\n<\/tr>\n \n SPN conversion method (CM)<\/td>\n 1 bit<\/td>\n most significant bit of byte 6<\/td>\n<\/tr>\n \n Occurrence count (OC)<\/td>\n 7 bit<\/td>\n lower 7 bits of byte 6<\/td>\n<\/tr>\n<\/table>\n \n
The SPN conversion method \u2014 the most common parser bug<\/h2>\n
Several faults at once<\/h2>\n
DM2 and clearing<\/h2>\n