Interesting 1200Bd/800 "FSK" (apparently) transmissions spotted and monitored on 7980.0 KHz/usb from monday feb. 28th until march 2nd when it disappeared. The heard signal is a Russian "tactical data link" waveform which is used for HF comms in the Russian «БАРНАУЛ-Т» ("Barnaul-T") C2 system [1], a tactical air defense control subsystem set. The main tasks solved by "Barnaul-T" are reconnaissance of air targets, receiving and displaying information about the air situation, target distribution and issuing target designations for hitting air targets: basically, something very similar to NATO Link-11.
 |
Fig. 1 - Russian «БАРНАУЛ-Т» set
|
Looking at the signal, the measured shift is = 0.67 Br so the used modulation could be GMSK or CPFSK (indeed, trajectories resolve in a circle): the phase plane and harmonics at 3rd power seems to confirm the assumption, although these "semi-modes" are hard to exactly determine (figs 2,3).
 |
Fig. 2
|
 |
Fig. 3
|
According to the demodulated bitstreams, two distinct framings are used:
_a) 69-bit length period (ACF = 57.5 ms), recording of 2022-03-01 at 1021 utc (figure 4)
_b) 117-bit length period (ACF = 97.5 ms), recordings of 2022-03-01 at 1757 utc and 2022-03-02 at 1112 utc (figure 5)
Actually the two framings differ only in the length of the data block and consist of:
2 start bits + 48/96 data bits + 1 bit separator + 16 bits for error detection and correction + 2 stop bits
ie, the _b frames allow to room a double space for data.
 |
| Fig. 4 - 69-bit length framing (48-bit length data block) |
|
 |
| Fig. 5 - 117-bit length framing (96-bit length data block) |
I had the chance to record some complete sessions of the _b framing. The preamble preceeding the data block consists of initial reversals followed by a same 112-bit sync sequence (just 96+16) which can be successfully descrambled with the polynomial x^21+x^11+1 (figure 6). The 117-bit data block follows and consists of single messages (approximately every 8 seconds) separated by what I think be pseudo-random traffic.
 |
Fig. 6 - initial 112-bit sync sequence
|
Other 117-bit framing recordings do not show single inserts/messages within their stream but rather a continuous flow, in my opinion just pseudo-random traffic to keep the channel alive as STANAG-4285 does in the absence of messages to send (figure 7).
 |
Fig. 7 - 117-bit framing "continuous" stream
|
After removing the 4 start/stop bits and the separator bit from both _a and _b frames, I obtained two codewords of 64-bit and 112-bit length respectively, coded as (64,48) as (112,96). My tests confirm that the rightmost position of the 16 EDAC bits (P15) stores an overall parity-bit (aka "extra parity bit"): that's a good clue in favor of the use of a Hamming-like coding and related parity-check matrix (figure 8).
 |
Fig. 8 - the overall check parity bit in the two data blocks (48 and 96 bits length)
|
I then analyzed the two data parts (length 48/96 bits) and found that both are scrambled with the polynomial x^13+x^9+x^7+1. After removing the scrambler, the result is a stream consisting of 35/83 bits of zeros followed by 13 bits of data (figure 9): this is interesting because although the two frames have a different lengths, both transport a payload of the same length (13 bits): it could be that the choice of the framing to use depends on the channel conditions, but that's only a guess.
 |
Fig. 9 - results after the removal of the x^13+x^9+x^7+1 scrambler
|
I cut off the zeros columns e found some other info about the remaining 13-bit payloads:
* the one of the 48-bit descrambled stream (_a framing) has a period of 389 bits
* the one of the 96-bit descrambled stream (_b framing) has - curiously - a parity bit (figure 10)
 |
Fig. 10
|
Direction Finding results (TDoA algorithm), although they are not exactly coincident, indicate an area in North East Ukraine (figure 11): that makes sense given the current situation in that country and the purposes of the БАРНАУЛ-Т system. As said above, the signal disappeared on March 2nd morning: last signals I heard were short MS-5 (CIS-12/AT-3004D) transmission and a voice call around 1400Z ("Pervyy pervyy ya vtoroy, priyom"). Coincidently, the press service of the Ukrainian Ministry of Defense on March 3rd morning reports that "A unit of the Main Intelligence Directorate of the Ministry of Defense has seized the Russian module of intelligence and control 9C932-1 (Barnaul-T)" [2].
 |
| Fig. 11 - some direction finding (TDoA algo) results |
https://disk.yandex.com/d/hTc5YhtPUg_1ow
[1] https://vpk.name/library/f/barnaul-t.html
[2] https://suspilne.media/213350-pid-kievom-zahopili-rosijskij-modul-barnaul-t-so-protidiav-ukrainskij-aviacii/
