Analysis Modes

Three ways to see
what the network is doing

CANTrak focuses on observable network behavior — payload transitions, message frequency, and communication timelines — rather than manufacturer-specific definitions. Each analysis mode answers a distinct diagnostic question.

CANTrak v27 — Diagnostic Workspace
CANTrak application interface showing vehicle selection, CAN connection settings, capture controls, and live watchlist with traffic light scoring

Vehicle Selection

Load or create a vehicle profile by make, model, year, and engine

Connection

Configure interface (pcan, socketcan, etc.), bitrate, and bus family

Capture

BG Start/Finish, Event Start/Finish, and Sequence capture controls

Watchlist

Pin suspect IDs — traffic lights show no activity, count-only, or payload changed

Mode 01

Command Verification

When a technician issues a command — through a vehicle switch or a diagnostic scanner — CANTrak captures the network activity surrounding that event and identifies which arbitration IDs exhibited payload changes.

This answers the most fundamental diagnostic question: was the command actually transmitted, and did the network respond? Without this visibility, a technician can only observe the end result — not whether the command traveled the network correctly.

01

Define the capture window

Use the Spacebar Clutch to bracket the command event. Press and hold during the switch operation or scanner command.

02

CANTrak records payload transitions

All arbitration IDs that exhibit byte-level changes within the window are flagged as event participants.

03

Review the delta report

Compare pre-event and post-event payload states. Verified IDs confirm the command was transmitted and acknowledged.

Use case: A technician commands a window motor through a scan tool. CANTrak verifies that 0x07E8 (BCM response) and 0x0300 (door module) both transitioned — confirming the command reached the correct modules.

Command Verification — Delta Report3 VERIFIED
ARB IDPre-EventPost-EventStatus
0x07E8FF 00 1A 3C00 FF 1A 3CVERIFIED
0x03003C 00 00 1F1F 00 00 3CVERIFIED
0x04B0A1 00 3F 0000 A1 3F 00VERIFIED
0x020100 FF 00 A400 FF 00 A4NO CHANGE
0x040000 00 00 0000 00 00 00NO CHANGE
Command transmitted — 3 modules respondedWindow: 847ms

Byte-level diff — 0x07E8

FF
00
1A
3C
00
00
00
00
00
FF
1A
3C
00
00
00
00
Pre-eventPost-event
Sleep Analysis — t+45s after key-off
2 AWAKE
ARB IDLast ΔMsg/sStatus
0x0580t+44.2s10AWAKE
0x06A0t+43.8s5AWAKE
0x07E8t+2.1s0SLEEP
0x0201t+1.8s0SLEEP
0x0300t+3.4s0SLEEP
0x0400t+2.9s0SLEEP

0x0580 and 0x06A0 remain active 45s after key-off. Possible parasitic drain source identified.

Network activity timeline

0x07E8
t+15s
0x0201
t+12s
0x0300
t+20s
0x0580
active
0x06A0
active
Key-offt+60s
Mode 02

Sleep & Wake Analysis

Parasitic battery drain is one of the most time-consuming diagnoses in automotive service. The root cause is almost always a module that fails to enter sleep mode after key-off. CANTrak monitors network activity over time and identifies which message groups remain active when they should be silent.

Rather than using a milliamp clamp and pulling fuses one at a time, CANTrak gives you a direct view of which arbitration IDs are still transmitting — pointing you toward the responsible module before you touch a fuse box.

01

Establish a baseline

Record the normal sleep sequence for the vehicle. Note which IDs go silent and at what intervals after key-off.

02

Monitor post-key-off activity

CANTrak continues monitoring after the ignition is off, tracking which IDs continue to exhibit payload changes.

03

Identify the outliers

Any ID that remains active beyond the expected sleep window is flagged. These are your parasitic drain candidates.

Use case: A vehicle has a 200mA draw after key-off. CANTrak identifies 0x0580 and 0x06A0 as still active at t+45s. Cross-referencing those IDs with known module ranges narrows the suspect to the telematics control unit.

Mode 03

Module Dropout Detection

When a module loses power, crashes, or drops off the network, its arbitration IDs go silent. CANTrak tracks the last-seen timestamp for every active ID and flags any that stop transmitting unexpectedly — building a timeline of communication failures.

This is particularly useful for intermittent faults where a module drops out under specific conditions — vibration, heat, load — and recovers before a conventional scan tool can capture a code. CANTrak's timeline shows exactly when the dropout occurred relative to other network events.

01

Establish active ID inventory

CANTrak records all arbitration IDs present on the network and their expected transmission intervals.

02

Monitor for silence

Any ID that exceeds its expected interval without transmitting is flagged as a potential dropout candidate.

03

Build the failure timeline

Dropout events are timestamped and correlated with other network activity to isolate the cause and sequence.

Use case: A vehicle sets intermittent U-codes under load. CANTrak captures a dropout of 0x06A0 at t=4.87s, coinciding with a throttle input event — pointing to a power supply issue on the affected module rather than a bus fault.

Dropout Detection — Event Log1 DROPOUT
ARB IDIntervalLast SeenStatus
0x07E810mst=5.01sACTIVE
0x04B020mst=5.00sACTIVE
0x030050mst=4.95sACTIVE
0x06A020mst=4.87sDROPOUT
0x0201100mst=5.00sACTIVE

0x06A0 missed 7 consecutive intervals. Last payload: 1C 00 00 00 00 3A 00 00

Event correlation timeline

Session startt=0s
Throttle inputt=4.2s
0x06A0 dropoutt=4.87s
U-code sett=5.1s
Capture System

All three modes use the Spacebar Clutch

The trigger-based capture system is the foundation of accurate event isolation. By defining a precise capture window, CANTrak minimizes background traffic and improves the signal-to-noise ratio for all three analysis modes.

Ready to go deeper?

The documentation covers setup, hardware requirements, and capture workflows.