17 August 2016

Ital-Mil FSK, FSK 1200Bd/800


FSK-2 1200Bd/800Hz waveform, approximately 1500 Hz bandwidth, used by Italian Military; in this record it's used by Italian Navy HQ (IDR Rome) on 12200.6 KHz/USB as unusual intro before STANAG-4285 1200bps/L transmission, receive peer had the tactical callsign AZWL.

fig. 1 ~1500 Hz bandwidth
fig. 2 - baudrate line
fig. 3 - involution module and shift between carriers
 
The main features of this signal are what seems a polarity change that occurs each 8 bits (fig. 4), as reported by radioscanner.ru and confirmed in this analysis, and, at least in this sample, its quite pronounced 232-bit period shown in figure 5.

fig. 4 - polarity change
fig. 5 - 232-bit period (fisrt part looks like a sort of preamble)

13 August 2016

CIS-14 FSK 96Bd/1000


The characteristic of CIS-14 FSK-2 is the 14-bit length frame, in this recording shift is 1000Hz and speed 96 Bd. This signal has been spotted on 8009.8 KHz (cf) on 0624 UTC.

fig. 1
fig. 2
The transmission is encrypted by the T-207 on-line ciphering device, as shown in fig. 3

fig. 3
T-207 is quite old and it is used by CIS Mil as well as by Ukrainian Mil or other Ukrainian Governative users such as Diplomatic and/or Intelligence services: allegedly as a Soviet communication legacy.

11 August 2016

(yet another) email exchange via STANAG-5066 over MS188-110


I report this interesting catch since it's a link setup - forward - link down complete example and because it's formed of a bilateral email exchange between the peers.
The 188-141 2G-ALE setup phase is followed by the data forward phase through 188-110A ST that carries STANAG-5066 at the upper layer. Low data rates, 75-600 bps, are used  since the 66.67ms ACF of the 188-110 waveform (fig. 1). Once decoded, the raw output shows the transfer of two files compressed by STANAG-5066 (H)BFTP protocol (fig. 2).

fig. 1 - 188-110 ST using low data rates waveform
fig. 2 - raw decode window

The timing diagram of the transmission is shown in fig. 3

fig. 3 - timing diagram
STANAG-5066 bistream is obtained after removing the overhead bits added by 188-110 (fig. 4) and after processing the 5066 PDUs we get the two files involved in the transfer (fig. 5).

fig. 4 - part of the STANAG-5066 PDUs
fig. 5
 One can get other informations from the reading of the (unzipped) emails headers (fig. 6):

1) pc clocks seem to be not synced
2) ALE calls "KW7" and "DE1" corresponds to addresses "wmtkw7" and "wmtde1"
3) translation results in "location10" or "place10" and "check"
4) an HMSTP server is running in the IP sub-network 
5) they use the Microsoft email client Outlook Express


https://yadi.sk/d/-oH-XQtMu9umR 





Other info about HBFTP and 5066 are available in the blog, just search for STANAG-5066 tab.

6 August 2016

unid BPSK 125.3Bd & 127.3Bd


These two PSK-2 signals has been heard on 12499.0 KHz (06 August, 2016) and 22499.0 KHz (10 May, 2016) on USB. Perhaps a coincidence but, unless a little variance of ~ 140 Hz, their central frequencies differ of 10KHz: for that reason I shifted up the 22499 KHz signal of just 140 Hz in order to find differences and similarities.

The two signals exhibit different manipulation speeds: 125.3 and 127.3 Baud, although the sub-carrier frequency have (reasonably) the same value of 830 Hz (it's to note the better recording quality of the 22499 KHz signal).

fig. 1 - manipulation speeds
fig. 2 - sub-carrier and harmonics

For what concerns the modulation, both the two signals use the PSK-2 technique (figs. 3,4)

fig. 3
fig. 4
 
The analysis of the demodulated bitstreams show a 141-bit period for the 22499 KHz signals and a 14-bit period for the 12499 KHz signal (fig. 5).

fig. 5- perdios of the two bitstreams
These signals are perhaps produced by the same modem/equipment running at different speeds, but it's only my supposition. As far as I know, user(s) is unidentified: comments and help in this direction are welcome.


bpsk-125.3 Bd https://yadi.sk/d/VCAq0bBktzER8 
bpsk-127.3 Bd https://yadi.sk/d/buRS-WngtzEKn