Murmansk-BN HF EW Complex

Murmansk-BN of the 475th Independent EW Centre near Sevastopol

Brief Murmansk-BN overview

Murmansk-BN has been operationally active from at least 2014 when the 475th Independent EW Centre of the Russian navy set up a complex in the Crimea south of Sevastopol. The system has a primary role of eliminating, or trying to eliminate, High Frequency (HF) broadcasts from NATO forces – in particular the HF Global Communications System of the United States (HFGCS).

HFGCS operates on well known HF frequencies with regular broadcasts of Emergency Action Messages (EAM’s) and other operational messages, phone patches etc. as required. To this date though, I am unaware of any reports that HFGCS has been interfered with by jamming. This in itself isn’t surprising. HF is a difficult thing to jam due to the very nature of using the ionosphere to carry the broadcasts. Throw in multiple frequencies in use at the same time, the same message being broadcast on numerous occasions, propagation and all other things related to HF reception means the message is likely to get through regardless of the attempts made to jam.

The Murmansk-BN complex is a fully mobile system and comprises of groups of up to four extendable antenna masts – two of which each on a dedicated Kamaz or Ural truck, which then tows a further antenna on a trailer. The masts extend to 32 metres in height. Each full Murmansk-BN complex normally has four of these antenna groups, making 16 antennas in total.

Further to that there are numerous support vehicles including a Kamaz 6350 Command vehicle and a Kamaz 6350 generator vehicle per four antenna group. Other vehicles include fuel bowsers and troop transport. Not always four antennas are used per group.

Murmansk-BN is in operation with units of both the Russian army and the navy – for the army with the 15th EW brigade in Tambov, 16th EW Brigade in Kursk, 18th EW Brigade in Yekaterinburg and 19th EW Brigade in Rassvet – for the navy with 186th Independent EW Centre of the Northern Fleet in Severomorsk, the 471st and 474th Independent EW Centres of the Pacific Fleet in Petropavlovsk-Kamchatsky and Shtykovo respectively, the previously mentioned 475th Independent EW Centre of the Black Sea Fleet in Sevastopol and the 841st Independent EW Centre of the Baltic Fleet in Yantarnyy.

It is highly likely that the 17th EW Brigade at Khabarovsk also has Murmansk-BN in operation but a this time I haven’t been able to locate any of the systems.

Screen grab from one of the Murmansk-BN videos showing an Icom IC- R8500 in use as the main receiver in each command vehicle
AOR 500 in a R330ZH Zhitel – image credited to
twower.livejournal.com

One aspect about the system is its use of analogue receivers rather than Software Defined Radio (SDR) technology – Icom IC-R8500 receivers have been noted in all the video footage available so far. This isn’t unusual for Russian EW systems – the AOR 5000 receiver is used in R330ZH Zhitel which is a mobile system primarily used in the jamming of satellite and cellular phone communication systems operated in the 100 to 2,000 MHz range. The AOR 5000 has multiple versions available, one of which has the cellular bands (824 to 849 MHz and 869 to 894 MHz) unblocked. Zhitel was used in the Crimean conflict with the high likelihood that the AOR 5000 was used to jam or intercept mobile phone communications. Recent reports have shown that Zhitel is still in use in the occupied Luhansk region.

I use an R8500 myself and it is an excellent receiver. I normally use it in conjunction with my SDR’s that provide me with a wider view of the HF bands so that I can search out signals. From the videos available online, the Russian military don’t do this but instead slow scan manually through the bands or scroll through frequencies saved to the receivers memory bank.

The receiver is linked to a PC using software that shows a visual spectrum taken from the audio output from the R8500, but this is limited to the mode in use. Video footage shows the likely use of AM mode to give as wide a visual spectrum as possible but this would be limited to the R8500’s 12 kHz maximum bandwidth. More on the software later.

The slow scan/memory scan method is not the best and would likely mean that any interception would be caught mid-way through a message. It is also time consuming. I am highly surprised there isn’t some sort of auto-scan software included. For instance I personally use df8ry’s CSVUserListBrowser to control not only my R8500 but most of my SDR’s. This can scan through stored frequencies on the Icom at a slow 1 second pace, but its better than sitting there turning a knob continuously for hours.

As the Icom is a receiver only, it needs to be linked to a transceiver using its CI-V remote jack point that then sends out the jamming signal – whether this then means another Icom transceiver is located within the command vehicle is unknown as, whilst confirmed from commentary and interviews with Russian personnel in the videos I found, there is no visual confirmation of what is used as the transmitter.

Each antenna group can operate individually or as multiples. Reports also state that the complexes can be integrated into the Russian EW command and control system.

The software

The software in use cannot be identified. It appears to operate like an automatic signals classifier, such as go2MONITOR by Procitec, but it is hard to assess whether it has this capability. It would be unusual not to have a classification capability, even if it meant manual selection of a signal.

There are a number of different screens, some tabulated, that control different functions, or provide different data.

One screen shows spectrum information split into four panels. The top panel shows the selected frequency, and what looks like audio taken from the Icom in AM-Wide mode – this differs from cuts to the Icom itself which shows it is in AM mode. If in AM-Wide it would mean the maximum audio spectrum available would be 12 kHz as this is all that the Icom can manage in this mode below 30 MHz, whilst AM would only produce a 5.5 kHz wide spectrum. However, using either of these modes would make it possible to visually obtain a signal from this.

What is interesting here though is that in the video, the top panel appears to show a bandwidth spread of 30 kHz with an area of 6 kHz in a lighter colour, possibly depicting the true area that a signal can be classified or monitored. 30 kHz is not a selectable bandwidth for the R8500 in any mode, with the maximum possible being 15 kHz above 30 MHz in WFM mode. Also of note is the noise floor indication which appears to be between -40dB and -50dB.

It could well be that this panel does not actually show a signal from the Icom, but could be the panel that shows the transmitter that produces the jamming signal.

The next two panels appear to show the signal with sensitivity information from the incoming audio. The final panel is unknown as it is not shown in any video close-up.

Another screen shows interface information to the bottom left. This has a number of tabs that control some the external elements that assist in the suppression of a signal. Connection status is shown by a green or red button.

Firstly, one tab shows the connection to a Protek KS-100M navigation device which is a GPS unit. This is connected to an antenna mounted to the top of the command vehicle and provides an accurate position for probable signal reception direction finding/triangulation purposes when connected to the other command vehicles KS-100M’s.

The KS-100M is also found in the Zhitel system as shown here in the far right panel. It is used for Direction Finding purposes in both systems – image credited to
twower.livejournal.com

To the left of the KS-100 tab are two unknown connections marked as ГТ-11and ГТ-11.1 (GT-11 and GT-11.1). ГТ in the Russian military is normally an abbreviation for rehepatop which translate to generator. In another part of one of the videos it shows the ГТ-11.1 title again, this time with four green boxes, each with what appears to be a tick box. Two of these appear to be connected as there is a joining line between them.

The final tab is unknown but marked as ГТ-205-ОПМ (GT-205-OPM) which if using the standard abbreviation format would also be related to a generator. However, the generator shown in the video appears to be named as an AD-100-T400-1R. Alternatively, you could break down the OPM part into two which would give supply (OP)/ engine (M).

What doesn’t quite tie up is that each four antenna group only has one generator, so does this section actually have something to do with the four antennas themselves and whether they have power going to them?

Above the four tabs is a box that is titled Information about current IRI. Below this is information on the signal being suppressed: Frequency – 9 961 02 kHz Type of target – unclassified Bandwidth – 3.36 kHz Duration – 16 msec Strength – 16 dB Bearing – 179 7 (1) – 0

This box is likely associated with the KS-100M tab.

The large window to the right shows what I thought at first was historic signal information in the selected bandwidth. However, looking closer I wonder if this is the case as the “signals” are too regular – they are evenly spaced. In other shots there are up to 20 signals shown. My thoughts are that these are connected to the KS-100M and are signal strengths of GLONASS GPS satellites. But again, without clearer screenshots or a confirmed ID on the software in use, this can only be guessed at.

There are numerous other tabs and screens available, but these are unreadable in the videos found.

Locations

The various units I have listed above. The sites used so far, despite Murmansk-BN being fully mobile, have been very close to the units home base. Despite the area required for a full complex deployment being large, they can be difficult to spot, but once you know the locations used – or the area – then it makes checking on them relatively easy.

The 15th EW Brigade at Tambov has not been observed on Google Earth (GE) as deployed as yet but the vehicles can be seen at their HQ at 52.666385N 41.537552E

Latest 15th EW Brigade site imagery near Tambov. Dated 13/11/18 and is the first time the Murmansk-BN was observed here.

The 15th EW HQ is situated in a large area of military ranges with plenty of surrounding free land available. It is presumed that this area will be used when setting up the complex. There is also an area to the NW that previously contained numerous antennas, but is now disused.

The 16th EW Brigade at Kursk uses a military training group for its deployment site. Only two antenna groups have been observed since first deployment in April 2015.

Latest 16th EW Brigade site imagery near Kursk at 51.713194N,
36.290736E. Dated 3/9/19

The 18th EW Brigade at Yekaterinburg is a very active unit with just two Murmansk-BN antenna groups in use at any one time according to GE imagery. Moreover, it seems to be a unit that likes to train in setting up the complex as it is quite often observed in different states. The Murmansk-Bn is spread over two sites – a permanent one (site one below) and a secondary site located in a field about 1.6km away (site two). In some imagery of site two only one antenna is up in two “groups” and quite often the site is empty.

The continuous erecting and disassembling of the complex’s could hint at the unit being involved in training. As shown in the image below it also tends to use truck mounted antennas at site two. There are no trailer mounted antennas visible, whilst they are in use at site one. However, the fact that there are six truck mounted here points to the 18th EW having a full compliment of Murmansk-BN equipment, despite only using two groups at the same time.

Murmansk-BN equipment of 18 EW Brigade at site two in a stored state

The 18th EW was also used in one of the videos. Comparing the video to GE imagery I was able to identify various features that confirmed that site two was used for the filming.

Site two confirmed as used in the Pravda.ru video

The 19th EW Brigade at Rassvet, near Rostov-on-Don, has had Murmansk-BN since at least 19/6/2016 when equipment first appeared in GE imagery at the HQ. Since then it would appear that it has not been deployed as the vehicles have stayed in a parked up state in all imagery from that date. The number of vehicles indicates only two groups have been allocated to the Brigade so far.

19th EW Brigade HQ in latest imagery dated 15/2/19

On the Russian navy side of things, the 186th Independent EW centre is based near Taybola at 68.515306N 33.290056E on the old airfield for the town. Taybola used to be a Soviet R-14 (SS-5 ‘Skean’) intermediate-range ballistic missile (IRBM) base with at least two silo complexes, a rail head, and the airfield.

The latest imagery on GE has just two Murmansk-BN groups set up at the northern end of the runway and old dispersal, but older imagery has a further group half way down the runway to the south.

GE imagery dated 18/8/17 showing the three locations of Murmansk-BN groups. the 186th has had the Murmansk-BN capability since at least 20/8/15 according to GE

The 471st Independent EW centre at Petropavlovsk-Kamchatsky, has a full complement of four Murmansk-BN antenna groups though it has had differing numbers in use since the system first arrived from at least 15/8/15. The latest imagery on GE below, dated from 3/11/18, shows just about a full complex in use. The NW group has one antenna missing.

471st Independent EW centre situated at 53.053583N 158.828178E

The 474th Independent EW Centre at Shtykovo, is also sited at a disused airfield. It has had three antenna groups in place at least once, but the latest GE imagery has just two in use.

The actual location of the 474th HQ is unknown and there no immediately close active military bases. There are numerous bases at a distance away, with a potential SIGINT site 12km to the SW. Analysis of these don’t provide any other Murmansk-BN vehicles.

The 475th Independent EW Centre is probably the most well known of the Murmansk-BN deployments. It is located to the south of Sevastopol in the Crimea at a coastal base and has been widely exposed on social media and articles since it became active. First shown in GE imagery dated 15/11/14 with one group, it has expanded to a full four group complex.

The 475th complex shown here, dated 26/8/18, with just the NW group active

It was news about the deployment of Murmansk-BN to the 841st Independent EW Centre at Yantarnyy in the Kaliningrad Oblast that drew my attention to the system. It is known that the 841st has a full compliment of four antenna groups but it is unusual to see all deployed. The image below, dated 11/9/17 is one of those times that it is fully active.

It is usually the northern site that is active when the 841st deploy. This is situated at 54.832506N 19.958467E. The “town” of Okunevo is actually a comms site.

The news I mention was reference the “new” deployment of Murmansk-BN to the Kaliningrad region, yet what is strange is that from GE analysis it is obvious the system has been in use there since at least 11/4/16 – so why this sudden hype? My only thought is that there was a major NATO exercise on in the region at the time which included USAF B-52’s carrying out Global Power missions from the US to Europe.

Was this news a counter to the US stating that Russian forces could interfere with their operations?

From all accounts, and from reported loggings of HFGCS messages since the Murmansk-BN system has been available for use, there has been zero suppression of any HFGCS frequencies that I’m aware of.

This then, with the fact that most units have not fully deployed their systems, makes me wonder whether Murmansk-BN is not quite so good as expected and claimed.

Here are the videos used for analysis:

This is the longer of the two videos and actually contains the second one.

https://www.yacoline.com/video/168091/

Second, shorter video showing the 186th Independent EW centre

Advertisements

The Bear Net “Pirate”

The “Bear Net” of Russian Long Range Aviation has been relatively busy during the last few months, no doubt some of this due to the exercises playing out in Northern Europe by Western countries and NATO. They also tend to increase activity around the same time as USSTRATCOM have their Global Thunder exercises, one of which kicked off on the 29th October and lasted for just over one week.

Three Russian missions took place within the last two weeks, all of which travelled through the same airspace as the area covered by Exercise Trident Juncture 2019 (TRJE18) off the North coast of Norway. One flight was of a single Tu-142M, RF-34063//Red 56, that made a low pass near participating ships. I was unable to follow this flight so not received by me, the likely callsign on the CW frequencies for this was LNA1. This was intercepted being called by IWV4 on 8112 kHz at approximately the same time as the pass was being made. Images of the pass were caught by AFP correspondent P. Deshayes who was on one of the ships.

One of the other missions was of more interest than normal. The “Bear Net” is always an interesting thing to follow on HF, but when extras are produced it makes them even more fascinating. In this case it wasn’t so much what the Russian did, but what happened late on in the mission that wasn’t them.

Stepping back, we’ll go to the beginning of the day – 31st October 2018. The net was still on the autumn frequencies with ground station CW first being picked by myself sending “W” markers at 0920z on 8162 kHz. I quite often put one of the receivers on the current season ground station frequency to get any alert of possible flights heading out thanks to the markers sent every 20 minutes at H+00, H+20 and H+40. With this 0920z interception I started recording the frequency and I switched all radios to the other known frequencies – 9027 kHz for Air CW and 8033 kHz for Simplex USB voice comms – and got set up to start recording these should anything happen.

The 0940z W marker came, but interestingly when I went through the recordings later on I was able to hear a very faint G marker in the background. This had at least two operators carrying out the task as there were two distinct methods of sending. One would use the standard G every two seconds, whilst the other sent as double G’s and slightly quicker. The marker also started approximately 10 seconds earlier than the W and – guessing as it was stepped on by the W – looks to have lasted the two minutes too. You could hear it in the background between the odd W space.

At 0949z 8033 kHz became active and I started up recording on multiple SDR’s whilst using my Icom IC-R8500 as the live radio. By this time, I had also observed callsigns associated with QRA flights on my SBS so was pretty certain something was heading towards the UK.

With a few more USB calls following, but no CW traffic except for the markers I was certain the aircraft involved were Tu-160’s as they don’t use CW.

My Russian is still pretty basic (if that) so I totally rely on recordings to go through it all in slow time. I had been able to work out live that there was at least the usual STUPEN callsign along with TABLITSA; but I was also hearing another one that when going through the recordings I worked out to be KONUS – this one I hadn’t heard of before.

Going through the recordings, this mission certainly helped my knowledge of Russian numbers, or rather the methodology of how the messages are sent, as there were plenty of messages involved. The two aircraft callsigns were 16115 and 16116. These callsigns carry on in sequence to those that were used on a mission a few days earlier on the 28th with 16111, 16112 and 16114 being used by Tu-160’s and 50606 by an accompanying A-50.

In general 16115 was much harder to understand than 16116. 16116 said it all much slower and louder. STUPEN was very clear at the beginning, but faded towards the end, whilst TABLITSA may of well have been in my room, she was that loud.

Here then is the first part of my USB log:

8033 – Bear Net

0941z 16116 calls STUPEN
274 443 624

0949z 16116 calls STUPEN
458 842 156 816 443 896

0959z 16116 calls STUPEN [replies, 16116 faint]
KONUS calls 16116 and tells him to pass the message to him

1000z [16116] 303 847 023 534 734 619 822 332
[with wrong read back of group three, corrected by 16116]

1002z 16115 call KONUS
138 534 005 964 312 147 443 896

1010z 16115 call KONUS
741 534 724 619 822 180 443 594

1020z 16116 calls STUPEN
478 815 023 534 071 955 117 957 084 305

1028z 16115 calls TABLITSA, then straight away calls STUPEN
138 1?5 [error?] 138 534 540 115 ??? 251 660 033 084 316
[garbled with a possible error]

1036z 16116 calls STUPEN and TABLITSA, STUPEN replies
303 815 023 534 671 612 842 768 084 544

1039z 16115 calls TABLITSA and STUPEN, STUPEN replies
741 534 671 619 246 768 023 084 544

1048z 16115 calls STUPEN
138 534 491 236 896 443 084 635

1050z 16116 calls STUPEN
478 815 023 534 635 233 107 219 084 615

The recording below contains the 1048z and 1050z messages

1112z 16116 calls STUPEN
452 635 084 125
[repeats third number twice]

1129z STUPEN calls 16116 twice – no answer

1132z STUPEN calls 16116 twice – no answer

1133z STUPEN send message
BLIND 553 028 533 ??1

1141z 16115 calls STUPEN
741 534 360 810 719 980 447 023 038 914

1144z 16116 calls STUPEN
303 875 023 534 106 673 980 719 038 914

1148z 16115 calls STUPEN
138 537 023 534 674 400 388 521 038 496

1159z 16115 calls STUPEN
741 537 023 534 940 441 388 441 038 896

1201z 16116 calls STUPEN
478 816 023 534 717 355 637 321 038 496

1210z 16115 calls STUPEN
138 537 023 534 600 902 955 462 038 844

1213z 16116 calls STUPEN
303 815 023 534 186 117 388 117 038 896

1217z 16115 calls STUPEN
741 537 023 534 981 980 356 789 905 149

1306z 16115 calls STUPEN
138 537 023 534 540 288 810 236 905 206

1318z 16115 calls STUPEN
352 315 544 243 942

1320z 16115 calls STUPEN
[4 calls, no answer]

1322z 16115 calls STUPEN
741 537 023 534 724 284 312 816 315 555

1325z 16116 calls STUPEN
457 187 905 844

1351z 16116 calls STUPEN
457 187 315 715

Then comes the interesting part of this…… the arrival on frequency of the “Pirate”.

At 1427z an open mike became present on the frequency, in AM mode. This was fairly brief, and at 1429z the Pirate started.

Mike Delta Kilo Romeo, Mike Delta Kilo Romeo
Mike Delta Kilo Romeo, Mike Delta Kilo Romeo Standby
Mike Kilo Delta Romeo, Mike Kilo Delta Romeo, Mike Kilo Delta Romeo Standby

Note his own error or change with the callsign

MDKR//MKDR

Image of carrier wave and transmissions of MDKR//MKDR. The Pirate is using AM mode, but as the recording was in USB only that half was captured.

This was followed at 1431z
Mike Kilo Delta Romeo
56822166095499102

The audio for the above is here:

At 1439z he was back but very faint, almost like it was a recording or live transmission of a Numbers Station. Shortly after this 16116 tries to call STUPEN and KONUS, getting stepped on by the Pirate who sends yet another attempt at an EAM/Numbers Station.

C78AAA5ACBCEA77D76FF33EAFAE63CF5A7AAAAFAF555A85CDBEEBBA5D6DFCCA – or something like that! It was hard to work out some of the digits due to the lack of phonetics. Each time I listen to it I get a different result!

Fake EAM/Number station message

The audio is below.

At 1446z, 16116 calls STUPEN, KONUS and TABLITSA but gets no response back.

The Pirate then attempts to jam the frequency again. First of all with an extract from a selcall system used by the Russian Ministry of Foreign Affairs given the name “Mazielka”, designated X06 in the Enigma Control list. See the end of the blog for analysis on this.

This was followed by a continuous tone at 1090 Hz for approximately 35 seconds. These are the last transmissions by the Pirate.

Again at 1459z, 16116 tries the ground stations until TABLITSA finally acknowledges his presence and a message is sent. 16116 is barely readable with me by this time, though TABLITSA was ridiculously loud.

1459z 16116 calls STUPEN
calls TABLITSA
calls STUPEN
calls TABLITSA answers [very strong]
452 730 969 463

1506z 16115 calls TABLITSA
590 375 143 986 196 233

1531z 16116 [very faint] calls TABLITSA
452 859 143 168

This was the end of all contacts on USB, with the last W marker coming it at 1520z (though these then did start up again at 1640z, though much weaker).

From various OSINT feeds, the approximate route of the Tu-160’s took them out over the Barents Sea having departed Olen’ya air base in the Murmansk Oblast and heading north before turning west once out over the sea. At some stage they were intercepted by Norwegian Air Force F-16’s and were escorted to abeam Bergen/NE of the Faroe Islands before turning for home. The Russian Air Force have stated that the flight lasted for ten hours which ties in with the seven hours or so of HF traffic, with the remaining 3 hours probably within range of Russian VHF communications.

Olen’ya is a common forward operating base for LRA missions, being one of the remaining Arctic Control Group (OGA) airfields available. The base itself hosts Tu-22M-3R Backfire-C of the Russian navy. These are Tu-22M3’s that have been converted for a navy reconnaissance role though it is unknown just how many are airworthy. The base has over 30 Tu-22’s in permanent storage.

Twitter feed for записки охотника (Hunter Notes) has a rough plan of the route flown, along with his intercept of the messages sent – he has few of the earlier ones, and there’s a couple of differences between his and mine.

So, who is this Pirate? It isn’t the first time he’s been around. He was also heard in September.

On this occasion he was a little bit more direct.

Russians we are watching you
Russians we know where you are
Russians, turn around and abort your mission

And later

We will blow you out of the sky
The Russians. We have you under observations [sic], stand down

Despite having what is clearly a South East England accent, he signed off using something along the lines of:
This is the United States BC36

No doubt he is trying to gain some sort of attention, and in a way he is succeeding – me writing this blog is proof of that. But what else is he trying to achieve? Is he hoping the Russians respond? I doubt they will. Apart from anything, I expect the radio operators, having had to listen to all the noise on HF for every flight, have learnt to ignore any calls which aren’t specific to their mission.

My initial thoughts were that he isn’t a radio amateur and hasn’t worked in any other field that involves speaking on the radio. His use of poor phonetics made me wonder this. However, with access to a transceiver and associated antenna this may not be the case – and amateur radio operators tend to make up their own phonetics rather than standard ones, and he may just not know them.

That said, he must have some interest in military aviation and possibly a member of a military aviation forum. These tend to have thousands of members that have not been vetted in any way or form and quite often have threads that give notice of flights are on their way, be it with an alert of a QRA launch or actual comms received on Bear net frequencies.

Twitter, of course, is another example of information being out there for anyone to then take action on.

One thing is for sure, if caught he will find himself in trouble with UK authorities with the possibility of a two year prison sentence and a heavy fine. He will most definitely lose his radio licence should he actually have one, and have all equipment confiscated.

Lets see if he turns up again in another LRA mission.

Analysis of the Mazielka (X06) transmission

It was obvious straight away that this was a recording of X06 – in this case the sub-variant X06b.

However there was something odd about it.

X06 is a selcall system used by the the Russian Ministry of Foreign Affairs to alert outstations of an upcoming message, normally on another frequency.

The system sends out 6 tones, each lasting 333 milliseconds, making each call 2 seconds long. Each tone represents numbers 1 to 6 making a total of 720 different selcall combinations available for use.

The tones are sent on slightly different frequencies:
1 – 840 Hz
2 – 870 Hz
3 – 900 Hz
4 – 930 Hz
5 – 970 Hz
6 – 1015 Hz

The image below is taken from a X06 call I intercepted in November 2017 and decoded using go2Monitor. This shows a selcall of 116611. In this case the tones, which are still 333 ms long, sound longer but this is because the digits join on the same tone.

Whilst you can use a decoder, for X06 it is easy enough to decode using other means, such as Adobe Audition or Signals Analyzer. With these you can measure the tone frequencies and lengths.

In Adobe Audition the Pirate transmission is shown below

Pirate_003Pirate_003a

What is unusual is that the tones are off by 60 Hz. Whilst 1 should be at 840 Hz, here it is at approximately 900 Hz, and 6 is at 1075 Hz rather than 1015 Hz. Whether this is because the Pirate was transmitting in AM rather than USB I’m not sure. Maybe it is something to do with his original recordings. My recording is below

It is likely the long tone sent after the selcall here is the usual long tone that is sent before the standard ones. This is sent at 1090 Hz.

Pirate_004Pirate_004a

Looking at it using Signals Analyzer (SA) you can see that it is definitely X06. With SA you can measure more accurately the frequency and length of each tone.

X06_005

Here you can see the two tones (actually 6). The total time for the selcall is 2.040 seconds with 1 marked at 896 Hz and 6 at 1074 Hz

X06_006

Measuring the length of an individual tone (though actually 3 joined together) gives a length just over 1 second or 3 tones at 333 ms each

X06_007

Finally, measuring the space between each call gives us 1.312 seconds which is the correct spacing for X06

The sub-variant of X06b is designated due to its format of six tones sounding like two. It is thought this is a test transmission.

Finally, just to confirm my theory, I ran a looped sound file through go2Monitor with the result confirming the selcall as 111666

X06_004

SDR Console V3 analyser

The shack, finally operational after a few months off.

With the rebuild of my shack complete I’ve been able to start testing out all my radios, new connections etc.

The Mini-Circuits components all come well packaged in anti-static bags

A whole bundle of new cables from Mini-Circuits arrived last of all and have helped tidy up the back of the radio 19″ rack considerably. I’ve previously installed quite a few Mini-Circuits components, including 0.141″ diameter Hand-Flex interconnect cables, and so it was more of these that I opted for. The bonus with these cables is that they are hand formable meaning you can shape and bend them into pretty much any area that you want to. The 141 series (which I use) are capable of a 8mm bend radius, whilst the thinner 086 series can be bent to 6mm.

Being able to manipulate the cables certainly helps in tight spaces, and when you don’t want them to hang down

Previously I used hand-made cables with RG58U coax, but in order to have a 19″ rack that can slide out from under the desk, the cables needed to be longer than actually required. Because of this the cables would drop down into all the others attached to the PC and in some cases cause a little interference. With the Hand-Flex cables I’ve been able to use the same length of coax to allow me to move out the rack, but be able to bend them up and out of the way of the PC cables.

They’re also very good for the radios on the rack, being able to bend them and hold in place around the radios and other cables. They are near lossless too with a quoted insertion loss of 0.01 dB in the HF band to 0.55 dB at 18GHz. I normally run tests of the Mini-Circuit components when I receive them and find that the figures quoted are near spot on. I highly recommend these cables if you’re looking to upgrade your systems, and are available from the Mini-Circuits website, along with lots of other goodies that will tempt you.

Measurement of insertion loss of the Mini-Circuits ZF3RSC-542B-S+ Power Splitter/Combiner I also purchased as part of my plans for satellite communication monitoring. This is connected to the AirSpy SDR and takes feeds from two SatCom connections (currently deactivated) and a WinRadio AX-71C Discone Antenna. Mini-Circuits quote an insertion loss of around 19.5dB at 130 MHz which is confirmed here with a signal generated at -20dB being less than 1dB out at -40.48dB when passed through the combiner.

This image shows how the cables can be held in place without cable ties

The radio setup now includes two new SDR’s – an AirSpy HF+ and a standard AirSpy with the HF+ replacing the Enablia TitanPro. I’ve also reinstated my WinRadio G31DDC which had been in storage for a year or so. I really do like the TitanPro, and have put it into storage for the time being. The recording capabilities in particular are great with it being able to select 40 frequencies at once spread over numerous bandwidths, but I have had issues with the power supply – one being it caused interference. I attempted to make one of my own but it has a 6v(+/-1v)/2.5 Amp current requirement and no matter how many different methods of building my own supply using a 12v feed downgrading to 5, 6 or 7 volts, it just wouldn’t work in a stable manner. In the end it was easier to remove it and slot the G31DDC back in its place.

As it is, I’d forgotten how good the G31DDC is and I don’t really feel like I’m missing much thanks to the ability to use the other SDR’s with SDR Console V3 and it’s SDR Analyser.

The three 19″ racking units from Penn Elcom, along with all the shelves, have been very useful and certainly makes things easier when it comes to changing radios and connections over. I can just disconnect a few things and slide the whole unit out. I also obtained a 19″ Project box from them which I used as my main 12v switch unit. This is connected to two regulated desktop power supplies that act as master switches.

Although the SDR Console website page for the Analyser states it isn’t available yet, this is incorrect and it is downloaded with the latest version of the main programme.

If you’re a current user of V2 or have been in the past then you won’t notice much difference. You can have up to 24 parallel demodulators operating within the SDR’s bandwidth that you have chosen, all of which can run independent of each other in receive and record. You can also run each demodulator through a decoder such as MultiPSK independently and decode these in parallel with each other. This capability has taken that step towards those of the TitanPro, especially when being used with the Elad FDM-S2 that can provide a Maximum DDC bandwidth of 6144kHz’s.

Unfortunately, whilst you can schedule recordings of IQ data, you still can’t do this for individual channel recordings. This is a real shame as it would be a fantastic addition to the capabilities of SDR Console.

Getting back to the analyser though this does, in theory, cancel out the lack of channel recording scheduling.

When you record IQ data it is saved as WAV files, split into multiple ones depending on how long a recording you make . All of these files can be individually played back through the incorporated SDR Console player but even better is the use of the File Analyser.

With this you get a visual “image” of the complete recording, whereby after opening the analyser you get it to combine all the files into one XML file. For the image below I used the FDM-S2 with a selected bandwith of 768kHz centred on 4425kHz, hoping to catch calls to Russian Naval base Severomorsk in CW(RJD99) from ships operating in the region. I set the scheduler up to record from 0000z to 0700z which worked perfectly, giving me 78 files totalling 78GB – obviously, the bigger the bandwidth, the larger the total file size.

After clicking on New in the analyser and browsing to the relevant folder the WAV files are saved in, the analyser finds the first one and gives this as an option to open – it automatically adds the remaining WAV files and starts the process. This can take quite some time to extract, around 45 minutes for the example shown. But you only need to do this once because once it has finished you can save it as an XML file and open it at any time – in this case it was a 28MB XML file.

A note here – do not then delete the WAV files as the analyser still needs them.

As you can see, I was successful in locating calls to RJD99, and I have highlighted some of the others that I took a look at – this is just a screenshot of two hours out of the seven recorded.

All you then need to do is find any signal of interest, and after clicking on select and start in the top ribbon, click on the signal. This will then start playing the file from that location in the main SDR Console window. You don’t need to stay on that frequency, you can use the Console as if you were listening live and move around the frequency range you dictated in the bandwidth of the recording.

And, as it is basically a live screen you can do additional things such as record and use decoding software.

RJI92 calling RJD99 on 4416 kHz during playback of the Analyser

When using the Analyser I run this through a separate PC meaning SDR Console itself can carry on working on the main radio control PC. This is also handy if you’re away but have time to go through the IQ data using a laptop. Just copy over the original WAV files to a portable hard drive/memory stick and carry on as described above.

There are numerous other functions available for you to use with the main part of SDR Console, some I still haven’t had the chance to play with completely. I’m still exploring things such as the Signal History function which can store up to 48 hours of data. Here you can export data in CSV format to third-party programs such as QtiPlot. Signal history can also be used within the Analyser

This is useful as it can give you a quick overview into single frequency use, signal strengths, fading and such like. Definitely something I need to spend more time on.

It’s been a long time coming, but Version 3 of SDR Console has been well worth the wait.

A quick update & Roland Proesch Radio Monitoring books 2018

Firstly, a quick update on what’s been going on with me.

In the world of radios, ships, photos and Russians – not a lot!! No blog since September 2017 wasn’t what I had planned that’s for sure. Much of my writing time has gone to Jane’s, which has been great. This has meant I had to prioritise any free time available to them, having to put my blog on the back burner. Overall I’ve written or carried out analysis for around 10 Jane’s magazine articles since September 2017, as well as my continual fleet analysis on the Russian navy for Fighting Ships.

One of my articles from the November 2017 edition of Jane’s Intelligence Review

With regards to any radio monitoring, that also had to go on a back burner. When the shack was rebuilt as part of the house renovations I installed all the coaxial in temporary locations, drilled through the outer wall and coming into the shack through a large 50cm by 30cm hole in the interior plasterboard wall. This was in April 2015!! Hardly temporary!!

Due to the pretty crap weather we get here, and the fact that I needed at least 5 days of continuous good weather to be able to do all the connections outside, it has taken until the last week – 3 years later – to finally get the sunny days I needed at the same time as being off work.

Over the last year, the temporary connections had become worse and worse, with lots of noise causing interference. Nothing was earthed correctly either. Other factors such as the neighbours installing dreaded solar panels really screwed up everything, totally wiping out the main Russian navy day frequency they use for CW.

Not only that, with the hole in the interior wall being the size it is, it gets very cold in the room during the Winter – and the rest of the year for that matter – with a large draft blowing in most of the time.

Anyway, new outside connections are complete, in nice new waterproof boxes. Now the exterior part is done, I’m not weather dependant on the rest of it and hopefully I’ll be back up and running in the next month or so. I’ll do a full blog on the new setup once it’s complete.

Roland Proesch Radio Monitoring books 2018

For 2018, Roland Proesch has updated two of the five books he creates in his Technical handbook range.

The first is Signal Analysis for Radio Monitoring Edition 2018. This has nearly 60 new pages of information on how to analyse various waveforms, including a new section on Satellite signals – useful if you’ve already purchased his Technical handbook for satellite monitoring 2017. There’s also a section on describing how to analyse RADAR signals. Other things such as useful software tools and PC calibration is also included. Here’s a PDF of the contents with new information highlighted in yellow.

The other book is Frequency Handbook for Radio Monitoring Edition 2018. Whilst many people would say a book containing information on frequencies used by various utility stations, armed forces and other agencies is dated and old school, I tend to disagree. There is so much useless information out there online, I prefer using a book for looking things up that I may have found on the HF bands. Granted, a book does go out of date – normally as it’s being printed – but you can quite easily add your own entries in the right places if needed.

This update has several hundred changes of new, deleted and updated frequencies ranging from 0Hz to 30000kHz, and contains a section dedicated to ALE frequencies and idents.

Both books, along with the ones released last year in one of my previous blogs, are available from his website. As usual, he has his bundle offers which makes the books cheaper if you buy two or more at the same time.

I’ve used his books for years and highly recommend them.

Guide to the Royal Navy 2017/18

Published at the end of July 2017, the latest Guide to the Royal Navy 2017/2018 is the eight edition from the team at Warships International Fleet Review.

Contained within the 64 pages are photographs – some of which by yours truly – and data on ship classes and naval aviation. The data covers all aspects of the current UK naval forces, as well as future developments and also those of the past in a section on RN heritage.

As expected, the quality from the Warships IFR magazine is carried over into this guide and it is well worth purchasing at a price of £6.50 from either the Tandy Media website directly or from high street stockists such as W.H.Smiths (a full list of stockists is available on the Tandy website).

No doubt there will be those of you that think there won’t be much in the guide due to the ever decreasing size of the Royal Navy, but I hope that some of the screenshots below will show just how much detail there is contained within its pages.

An updated AIS system

Back in March I blogged about my AIS system, in particular about the LNA4ALL and how it coped with the low signal reception of my homemade antenna.

Things went really well until one day the reception dropped out completely.

A quick test of the system showed that something had gone wrong with one of the pieces of equipment though at the time I was unsure whether it was the antenna, the LNA or the NASA Engine AIS decoder.

As I was due to go away for a short while I decided to tell all the relevant websites that I feed (IHS AISLive, MarineTraffic and VesselFinder) that my system would be offline until further notice due to a technical fault, and that as soon as I’d worked out the issue that I’d get it fixed and back online.

The guys at MarineTraffic were very quick in getting in contact with me and offered to help with a new decoder as long as I didn’t mind being a beta tester for the equipment and some of their new software. I was very happy to agree to their offer.

The decoder they organised for me was a new Comar Systems SLR350ni Intelligent AIS Decoder and it arrived with me about ten days after I agreed to their offer.

The main thing that really appealed to me about this decoder was the fact that it links directly to your home network either by WiFi or hardwired using RJ45 Ethernet cable. This meant that I could install the decoder remotely, nearer to the antenna and out of my radio shack, but have full control of it from my main PC. The decoder itself is interfaced to a Raspberry Pi™ 3 computer, comes with aforementioned WiFi and Ethernet connectivity, 4 USB ports and an HDMI connector for a monitor display. It can be used in any AIS setup and is a dual channelled parallel receiver.

Installation was simple. Within 15 minutes the decoder was connected to my home-made antenna and we were receiving data – and at a much faster rate than the NASA due to the dual channel capability.

The MarineTraffic part of the agreement included some new software that they are testing, which includes the capability of sending received raw AIS data to five feeds such as AISLive. Any of these decoders obtained using MarineTraffic come with their host settings hardwired in so any data received through it is automatically sent to them – you don’t have to do anything to send data to MarineTraffic, just attach an antenna, connect it to your network and switch it on – that’s it.

In the new software there is a page where you can add other host iP addresses and port details. Doing this means a couple of things:

1 – You no longer need to use other software such as ShipPlotter or Neal Arundale’s NmeaRouter/AisDecoder software to forward on the data.
2 – You don’t actually need a PC connected directly to the Comar decoder.

The second point is interesting as it means you no longer need to have a PC running 24/7 to feed any of the AIS data to whichever sites you want. This is a bonus if you currently switch off your computers when you go on holiday or are away from home for a while. It still means you can provide the data whilst you are away.

Personally I have the following set up:
MarineTraffic (hardwired)
AISLive (iP host)
VesselFinder (iP host)
ShipPlotter (internal network address)
AIS Decoder (internal network address)

Using the ShipPlotter software still means I can get a better picture of what I am receiving, range of reception etc.; whilst using the AIS Decoder software means I can look at any of the messages sent in greater detail.

I have to say that I am very impressed so far, and highly recommend the Comar decoder. It is available from numerous online shops, but if you are going to feed MarineTraffic you may as well get it from their site, currently priced at €379.00. Doing this means it already comes pre-programmed to send to MarineTraffic.

A new antenna too

I had gotten round to testing all the equipment to see what the cause of the original loss of reception was and it turned out to be the LNA4ALL. This was a shame as I had new objectives for the LNA with regards to the reception of weather satellites so it means I’ll have to get a new one. Luckily I don’t need to replace the whole thing, just the circuit board, so it will be much cheaper – but a pain none the less, especially if I have the same issues with UK Customs that I had previously. The likely cause of the failure was an Electrostatic Discharge of some sort or other. There had been some Lightning storms nearby over the previous days and it could well have been this that had done it – strange though as my equipment is very well protected from this happening. The area I live in is prone to power surges and power cuts – the joys of living in a remote area in Scotland, still backwards in many things the rest of the UK take for granted.

With the loss of the LNA, this drastically reduced the range of my home-made antenna and so I decided it was time to buy a new one. I’d toyed with building a better one but in the end I just couldn’t be bothered and so I went for a Metz AIS antenna, bought from the Salty John website. Great service from them meant it arrived within 48 hours and so when it came to installing the Comar decoder I also rigged up the antenna in the loft space next to my home-made one at the same time.

If I have one complaint about the Metz, it’s that it doesn’t come with any form of protection for the co-ax connection area. This is especially strange as it is designed specifically for boats and would therefore be exposed to wet/salty conditions all the time. Add to that that the threaded area is over an inch long, much longer than what you would get with a UHF connector, this makes it a weak area for the lifetime of the antenna. If you were to install it outside (which is the general recommendation for AIS reception) then you would need to cover it in self-amalgamating tape and check it regularly to ensure it is still working. Not perfect if you need to climb up on the roof of your property.

One other option would be to use the tightening nuts supplied to fix some plastic or aluminium tubing around the connection, but again this is some extra hassle which could have been remedied by Metz themselves.

As it is, I seem to be getting great coverage from the Metz from it’s position in the loft, though I may still add a LNA4ALL to boost it even more.

With the antennas side by side I was able to run some quick comparisons between the two. The images below show the Spectrum analysis using my Rigol gear.

From the images you can see that with my messing around of the home-made antenna I had over trimmed it to be tuned to 180MHz rather than the required 162MHz. At 162MHz it measured in at 9.3dB which wasn’t even worth calculating the VSWR, whilst at 180MHz its VSWR was 1.23:1

In comparison the Metz antenna, which is a half-wave whip antenna, came in nicely at 83.6MHz with a measurement of 30.15dB/VSWR 1.07:1. Metz communications specify less than 1.2:1 VSWR so this is spot on.

With the new set up things have definitely improved. I also ran a quick test using AISDecoder to see how many messages the two antennas fed to the Comar, be it in a very basic manner of waiting till there was some ships being picked up, running the software with one antenna for a minute, noting how many messages were received and then swapping to the other antenna for the same length of time. In theory it is a reasonable test as the ships won’t have travelled far in that time, but not 100% perfect. Regardless, the Metz was able to pick up 19 messages in its minute test, whilst my home-made antenna only managed three! The test was carried out in less than five minutes.

In conclusion, whilst it has been a pain to lose the LNA4ALL, it has turned out better in the end for my AIS station. Statistically my data feed has improved no end for AISLive and MarineTraffic; and having gone away twice now since installation I have still been able to provide 24/7 coverage where I would normally have switched the whole system off.

Area coverage provided to MarineTraffic since the new installation. Fitting a LNA4ALL in the future should make this even better.

ShipPlotter example with the new installation. The bold plots are being received by my station and show 4673 messages received by 1032z. The image below shows the same but at 1753z and a message number of 28135. This averages out at about 52 messages a minute, though it was a busy time with lots of fishing boats in the area.

NOTES:

Following a couple of questions regarding the Comar decoder I’d like to add that it doesn’t have to be connected to the Internet or a Network to work. It can be used “locally” using the USB connections direct to a PC.

Also, you do not NEED to feed MarineTraffic if you don’t want to. If you don’t want to do this then buy a unit from another supplier which won’t have the files installed.

Fighting Ships 2017/2018

In the last month or so the latest edition of Jane’s Fighting Ships has been released. It’s available from the IHS online shop for the usual eye-watering price of £984.

One thing to note is that older editions of the yearbook are also available on the IHS website at much cheaper prices.

This is the last edition that Commodore Stephen Saunders RN will be the chief editor of, as he has decided to retire from the role after 17 years. Having been a contributor of JFS for the last five of those years it will be sad to see him go.

From now on there will be a multi-team of editors that will compile both the yearbook and the on-line version. I will be remaining a contributor, and will hopefully be getting more involved than I am already.

There could well be complications regarding contributing data and photographs and I suggest that if you do either of these then to contact the team at IHS as soon as possible. There is a strong likelihood that contracts will need to drawn up with regards to copyright usage of whatever you send in. The email address for the yearbook is JanesFightingShips@ihsmarkit.com

In the meantime, I wish Stephen all the best in his retirement – he’s done a great job editing the yearbook over the last 17 years.