Skip to content

CAN-Bus Investigation

Objective

Solution

Step 1: When you first open the candump.log file you’ll notice there are a lot of event ID 244 and 188 messages. If you filter these out, you’ll find three remaining messages. Two are the lock signals the terminal challenge tells you you’ll find, and the other must be the unlock signal.

elf@3ee86141f23b:~$ cat candump.log | egrep -v "(244|188)"
(1608926664.626448) vcan0 19B#000000000000
(1608926671.122520) vcan0 19B#00000F000000
(1608926674.092148) vcan0 19B#000000000000

Step 2: Provide the timestamp to the ./runtoanswer program.

elf@3ee86141f23b:~$ ./runtoanswer 122520
Your answer: 122520

Checking....
Your answer is correct!