F10 HU_NBT= Wifi Hotspot

From a BMW press release:

Anyone in the car can connect to the Hotspot and use the LTE connection, and anyone outside can as well since it comes with a built-in battery and antennae for portable use for up to 30 minutes or with a USB power supply connected. BMW notes that the LTE Car Hotspot fits into any BMW center console with a phone base plate so that it can be retrofitted to earlier models. In areas without LTE coverage, the Hotspot will switch to another network.

Originally Posted by Mobileum

From a BMW press release:

Anyone in the car can connect to the Hotspot and use the LTE connection, and anyone outside can as well since it comes with a built-in battery and antennae for portable use for up to 30 minutes or with a USB power supply connected. BMW notes that the LTE Car Hotspot fits into any BMW center console with a phone base plate so that it can be retrofitted to earlier models. In areas without LTE coverage, the Hotspot will switch to another network.

Yes, but this has nothing to do with the Head Unit. This is a standalone Hotspot that is powered by the cradle.

after enabling the IPCE_WEBSERVER option in the HU_NBT > 3000, a webserver is reachable in the network you connect to via the wifi at 172.16.222.1.



It appears to be lighttp, which means that the HU_NBT is unix/linux based.



There are two subdirs I could find: /core/ and /trace/. /core has nothing in it, probably used for core dumps after a crash, but /trace/ has detailed logs of every run.



These logs contain quite a lot of information, including all the destinations you programmed, voice commands, music listened to, and lots and lots of diagnostic info. The HU_NBT appears to be a dual core system, indicated by the cpu load info contained in the log.

I'm analyzing the log further and I hope to be able to gain shell access to the underlying OS of the NBT, this would give me the possibility to expand functionality through custom applications etc.

I'm not comfortable with that lvl of logging, they should not need to know what frigging music i listened to...
Is there anything to be found about coding in those logs?

Originally Posted by ilhan1103

I'm not comfortable with that lvl of logging, they should not need to know what frigging music i listened to...
Is there anything to be found about coding in those logs?

yeah when you code the HU_CIC it shows al sorts of messages about this...
you can delete the logfiles through the web interface though ;-)

If you have the NBT yea.

But its disturbing they log all this in the first place. Why would you think its not logged elsewhere along with the fact that its been deleted thru the web interface

Originally Posted by ilhan1103

If you have the NBT yea.

But its disturbing they log all this in the first place. Why would you think its not logged elsewhere along with the fact that its been deleted thru the web interface

it probably is. I found sql DB's with filenames such as trips.sqlite on the filesystem

The system appears to be running QNX (just like the previous edition)

it appears the system supports video input through usb and over TCP/IP (some stuff points to a /dev/cam0 device, as well as stuff to handle network video)

The USB stick is mounted at /mnt/quota/mm/EntServer/USB DISK/

There is a startup script that tries to initialize a USB ethernet adapter...

speech appears to be handled through lua scripting (/opt/speech/data/lua)

maps data is stored in /mnt/data/nav/


(just dumping my findings)

Keep em coming

Just another thought, there are some wifi DLNA hard drive available in the market now. Could we store movies within the hard drive then stream it on the HU? Theorically should be able to since it is using DLNA protocol.

Anybody tried it & whether does VIM comes into play?

Originally Posted by DTee

Just another thought, there are some wifi DLNA hard drive available in the market now. Could we store movies within the hard drive then stream it on the HU? Theorically should be able to since it is using DLNA protocol.

Anybody tried it & whether does VIM vpcomes into play?

yes this works. I have VIM enabled and this works too.

Originally Posted by cronek

yeah when you code the HU_CIC it shows al sorts of messages about this...
you can delete the logfiles through the web interface though ;-)

Can you post the log file or picture of these coding related messages?

Originally Posted by shawnsheridan

Can you post the log file or picture of these coding related messages?

I'll PM you instead of putting them online, as they contain personal info.

Originally Posted by cronek

it appears the system supports video input through usb and over TCP/IP (some stuff points to a /dev/cam0 device, as well as stuff to handle network video)

The USB stick is mounted at /mnt/quota/mm/EntServer/USB DISK/

There is a startup script that tries to initialize a USB ethernet adapter...

speech appears to be handled through lua scripting (/opt/speech/data/lua)

maps data is stored in /mnt/data/nav/


(just dumping my findings)

In /mnt/data/nav/ do you see any POI data? This may give us a view of how to get our own POI data input into the system, at least in the newer iDrive system.

Sean

Originally Posted by ImSW1

In /mnt/data/nav/ do you see any POI data? This may give us a view of how to get our own POI data input into the system, at least in the newer iDrive system.

Sean

I can't browse the filesystem directly, I'm only seeing files being mentioned in the trace logs.

there is however a mention of this:

"db_poiinfo = /mnt/data/nav/comp/POIINFO_ECE/2.1.10/POIINFO.iso"
and
"CPoiSearchDirectSqlAccessor::CPoiSearchDirectSqlAc cessor open db /mnt/share/nav/JDSI_DB_GT_v2.gtdb"

Wow very cool! Amazing!!

Originally Posted by shawnsheridan

Can you post the log file or picture of these coding related messages?

This is one piece I should share though:

CODING FILE: ExBox, block length: 151, pointer: 0x9636d38
CODING FILE: Audio_System, block length: 150, pointer: 0x9636bf8
CODING FILE: Telefon_Telematik_Online, block length: 150, pointer: 0x9636ab8
CODING FILE: System_Adjustment, block length: 150, pointer: 0x9636978
CODING FILE: APIX_CID, block length: 150, pointer: 0x9636838
CODING FILE ERROR at: File: HMI, Feature: SPEEDLOCK_X_KMH_MIN, coded Value 255
CODING FILE ERROR at: File: HMI, Feature: SPEEDLOCK_X_KMH_MAX, coded Value 255
CODING FILE: HMI, block length: 152, pointer: 0x9636e78
CODING FILE: ExBox, block length: 151, pointer: 0x9636d38

Apparently the speedlock FF werte throws an error (internally in the device)...

Originally Posted by cronek

I'll PM you instead of putting them online, as they contain personal info.

I got it. Thanks.

Anyone know if this setting blocks the Bluetooth tethering or BMW live?

TRSVC

3008 Online Calibration

DID4198 default online calibration control


C:\ESysData\CAF\CAFD_00000223_013_006_004.ncd

I don't think so because TRSVC stands for TopRearSideViewCameras.

what should it have to do with Bluetooth ??

What is TCB for ? it has a network option for 2013 or 2015

The HU_NBT also has this setting....

http://www.bmw-carit.com/open-source/connman.php

Here is the website that talks about the OS...

I'm analyzing the log further and I hope to be able to gain shell access to the underlying OS of the NBT, this would give me the possibility to expand functionality through custom applications etc.

I enabled this feature on my 2013 M5 the question I have is, Is there any way to use this Wifi as a hot spot with the Cars web ? I have BMW Online. I have a wifi only ipad it would be nice if the car could act as a Hotspot over the build in wifi?

I get an ip when I connect, but like everyone said its only a media server. I'm willing to use my car for testing. Also long as nothing blows up lol

Originally Posted by jimmy9980

I enabled this feature on my 2013 M5 the question I have is, Is there any way to use this Wifi as a hot spot with the Cars web ? I have BMW Online. I have a wifi only ipad it would be nice if the car could act as a Hotspot over the build in wifi?

I get an ip when I connect, but like everyone said its only a media server. I'm willing to use my car for testing. Also long as nothing blows up lol

Internet sharing/routing is not supported as far as I know. The internal dhcp server in mine doesn't hand out a default gateway or dns server address either. Can you post your "ipconfig /all" output?

Sent from my Incredible S using Bimmer App

Originally Posted by cronek

Internet sharing/routing is not supported as far as I know. The internal dhcp server in mine doesn't hand out a default gateway or dns server address either. Can you post your "ipconfig /all" output?

Sent from my Incredible S using Bimmer App

I get 172.16.222.105 subnet 255.255.255.0 no gateway

DCHP server and DNS are 172.16.105.1

I set dns to 4.2.2.2 and gate way to 172.16.222.1 no luck with internet.

I also NMapped 172.16.222.105 and it is open on port 80 I try to browse to that port no luck

I wonder what ip the car gets when it use BMW connect ? there must be a way!