Comment by Czarcasm

What you can do instead, is slip under the car and splice into the wire harness that is running under the car to the transmission or differential.

The transmission controller and differential speed sensor (or even differential controller on some cars) will be post gateway on the CAN bus.

I've done this on GM vehicles to spoof different vehicle behaviors while evaluating traction control systems.