Crank Sensor on an Oscilloscope: Hall vs VR and Signal Integrity

How to scope a crank sensor: Hall vs magnetic/VR concepts, missing-tooth patterns, signal dropout, amplitude behaviour, intermittent wiring, air-gap influence and why RPM data alone does not prove waveform integrity.

General Diagnostic PrincipleTechnical Review CompleteLast reviewed 2026-08-12
Written by MechanIQ Editorial TeamTechnically reviewed by AutoLogic Diagnostics

Pressure, voltage, torque, pin and waveform values on this page are guidance only. Vehicle-specific verified specification required before acting on any test.

What this guide covers

Scoping the crankshaft position sensor — why the waveform reveals signal-integrity faults the scan tool hides, Hall vs VR sensor patterns, missing-tooth reference, dropout, amplitude, air gap, and intermittent wiring. Pairs with P0335 and the Crank/Cam Correlation guide.

Why oscilloscopes reveal what scan data hides

The scan tool's RPM is a derived value — the ECM counts crank-sensor pulses and computes speed. A signal that is noisy, dropping out, or low in amplitude can still produce an RPM reading while corrupting misfire detection or causing intermittent no-starts. The scope shows the actual signal the ECM sees — the timing, amplitude, and dropouts that the RPM number averages away.

Hall vs magnetic / variable-reluctance

Two sensor technologies, two waveform shapes:

  • Hall effect (3-wire: power, ground, signal) — produces a clean digital square wave. Amplitude is constant regardless of engine speed. Faults: power/ground loss, signal-wire open/short, sensor failure. On the scope, a healthy Hall signal is a crisp square wave with clean transitions.
  • Variable reluctance / magnetic (2-wire: signal, return) — produces an AC sine wave. Amplitude rises with engine speed (faster crank = bigger signal). No power supply. Faults: sensor coil open/short, air gap, reluctor damage. On the scope, a healthy VR signal is a sine wave whose amplitude grows with RPM and whose frequency matches engine speed.

The fault-finding approach differs: Hall faults centre on power/ground/signal; VR faults centre on amplitude/air gap/reluctor.

Missing-tooth patterns

Many crank trigger wheels have a gap (one or more missing teeth) that gives the ECM a fixed crank-position reference for injector/ignition timing. On the scope, the otherwise-even pulse train has a gap at the reference position. Tooth counts and gap patterns vary by engine. Do not assume a specific tooth count — compare to a known-good waveform for that engine, and verify the gap aligns with TDC reference per the vehicle's specification.

Signal dropout

A scope catches dropout — moments the signal disappears — that the scan tool reports as "RPM erratic" or as a stall. Dropout patterns point to:

  • Thermal sensor failure (drops out hot, returns cold)
  • Intermittent wiring (drops out with vibration/heat)
  • Air gap / reluctor damage (dropouts at specific crank positions)

Capturing the dropout on a scope, at the temperature the fault occurs, is the decisive test for P0335.

Amplitude behaviour

  • VR sensor: amplitude should rise smoothly with RPM. Low amplitude at cranking speed that never builds, or amplitude that collapses, indicates sensor wear, air gap, or reluctor issues.
  • Hall sensor: amplitude is constant; a collapsing Hall amplitude indicates power/ground loss or sensor failure.

Amplitude that is fine cold but collapses hot indicates thermal sensor failure — the classic P0335 hot-stall pattern.

Intermittent wiring

Chafed wiring near the engine, heat-damaged connectors, and loose pins cause intermittent crank-signal loss. A scope with the engine running, wiggling the harness, catches the dropout at the moment it happens. A meter continuity test cannot.

Sensor air-gap influence

The air gap between the sensor tip and the reluctor affects VR-sensor amplitude: too large → weak signal, dropouts at low speed; too small → sensor damage / contact. Hall sensors are less gap-sensitive but still have a range. Vehicle-specific verified specification required for air gap.

Why RPM data alone may not prove waveform integrity

The ECM derives RPM by counting pulses. A signal with:

  • Occasional dropouts
  • Low amplitude at cranking
  • Noise/spikes that confuse edge detection

…can still produce an RPM reading — while causing misfire-detection errors, intermittent no-starts, or stall. The scope proves the signal is clean edge-to-edge; the RPM PID does not. This is why P0335 diagnosis ends with a scope, not a scan-tool RPM check.

Relationship to P0335

P0335 sets when the ECM cannot reliably read the crank signal. This guide is the waveform method behind that diagnosis — confirming whether the sensor, the wiring, the air gap, or the reluctor is the cause.

Specification warning

Tooth counts, gap patterns, air gaps, and amplitude thresholds vary by engine and sensor type. Do not publish manufacturer-specific tooth counts unless sourced/verified. Compare to a known-good waveform for that engine. Vehicle-specific verified specification required.

Common mistakes

  • Stopping at "scan tool shows RPM" without a scope
  • Not testing at the temperature the fault occurs
  • Confusing Hall and VR testing approaches
  • Assuming a specific tooth count without verification
  • Not wiggling the harness during the scope capture
  • Ignoring amplitude behaviour on VR sensors

Related DTCs

Diagnosing this capture on a real vehicle?

Start a MechanIQ diagnosis — import your scan data and let the evidence engine find the next best test.