RadioReference on Facebook   RadioReference on Twitter   RadioReference Blog
 

Go Back   The RadioReference.com Forums > Computer Aided Monitoring and Programming > Software Defined Radio


Software Defined Radio - A forum for general discussion of software defined radio (SDR) receiver equipment.

Reply
 
LinkBack Thread Tools Search this Thread Display Modes
  #1441 (permalink)  
Old 11-13-2017, 7:00 AM
Member
  Premium Subscriber
Premium Subscriber
 
Join Date: Mar 2007
Location: Talbot Co, MD
Posts: 609
Default

Quote:
Originally Posted by carbinefreak View Post
A KeyID of 0 is a valid key id for subscribers that only can handle a single key, so relying on that to check for encryption is not the best. A better check would be if ALGID is non-zero, In that drive is a few PDFs that goes into it in more detail.

As for the MI, from my understanding that is the encryption sync(ES) which should contain everything needed other than the key, and the ALGID and the IMBE encrypted frames. It is a variable length field depending on the ALGID it looks like. In that drive is a tar of some standalone code for DES-OFB and AES that was created from a thesis at the University of San Diago that I found. The paper is in there as well, IT was authored by Nwokafor, Anthony Anelechi in 2012. it should be enough to get you running, or at least make for some good bed time reading!
Quote:
Originally Posted by MattSR View Post
The AlgID is set to 0x80 for clear.
I've read some of the documents and learned quite a bit Seems like the encryption I see on my system is using 64bits out of the posisble 72bit MI. Looking back at the logs does validate that AlgId = 128 (0x80) when clear, but something else when encrypted so I'll use that as the quick check. (Validating that MI is all zeros is clumsy and would cost more cpu cycles for something that has to happen multiple times a second.) Thanks guys!
Reply With Quote
Sponsored links
  #1442 (permalink)  
Old 11-13-2017, 10:41 AM
jcardani's Avatar
Member
   
Join Date: Jan 2002
Location: Orlando, FL & Ocean City, NJ
Posts: 1,224
Default

Here's a list of the more popular Encryption Algo IDs that are used in the US:

$80 Unencrypted
$81 DES-OFB
$83 Triple DES (168 bit, ECB)
$84 AES 256
$85 AES 128
$9F DES-XL
$AA ADP

Iv'e personally only seen 80, 81, 84, 9F, and AA used.
__________________
Joe Cardani, W3FOY
Owner, PhillyScanner Yahoo Group and Greater Orlando Communications Group
Reply With Quote
  #1443 (permalink)  
Old 11-13-2017, 10:45 AM
jcardani's Avatar
Member
   
Join Date: Jan 2002
Location: Orlando, FL & Ocean City, NJ
Posts: 1,224
Default

Hi Matt,

Your website has been down for a while, everything OK?

thanks!
__________________
Joe Cardani, W3FOY
Owner, PhillyScanner Yahoo Group and Greater Orlando Communications Group
Reply With Quote
  #1444 (permalink)  
Old 11-13-2017, 11:14 AM
jcardani's Avatar
Member
   
Join Date: Jan 2002
Location: Orlando, FL & Ocean City, NJ
Posts: 1,224
Default

Hi Boatbod,

About a year ago I added code to display additional HDR, LDU1, LDU2, and TDU parameters as well as the voice codewords to Phase 1. And also did the equivalent for phase 2. All changed code is in the C++ modules and I commented my changes pretty well. It would be great to incorporate the code into your version of OP25 or even better merge into the current Max release.

Please let me know if you are interested and PM me. I'll send the code over to you.

thanks!


Quote:
Originally Posted by boatbod View Post
I've read some of the documents and learned quite a bit Seems like the encryption I see on my system is using 64bits out of the posisble 72bit MI. Looking back at the logs does validate that AlgId = 128 (0x80) when clear, but something else when encrypted so I'll use that as the quick check. (Validating that MI is all zeros is clumsy and would cost more cpu cycles for something that has to happen multiple times a second.) Thanks guys!
__________________
Joe Cardani, W3FOY
Owner, PhillyScanner Yahoo Group and Greater Orlando Communications Group
Reply With Quote
  #1445 (permalink)  
Old 11-13-2017, 12:14 PM
jcardani's Avatar
Member
   
Join Date: Jan 2002
Location: Orlando, FL & Ocean City, NJ
Posts: 1,224
Default

Here is an example of my code displaying a simple P25 Phase 1 voice channel with no encryption:

NAC 0x293 FDMA DUID 00 len 396 errs 00 HDU:: rc 0 MFID: 00 ALG: 80 KID: 0000 TGID: 1 MI: 00 00 00 00 00 00 00 00 00
NAC 0x293 FDMA DUID 05 len 864 errs 00 LDU1:: rc 0 Group Call TGID: 1 RID: 1
VC: 04 0C FD 7B FB 7D F2 7B 3D 9E 44
VC: 04 0C FD 7B FB 7D F2 7B 3D 9E 45
VC: 04 0C FD 7B FB 7D F2 7B 3D 9E 44
VC: 04 0C FD 7B FB 7D F2 7B 3D 9E 45
VC: 04 0C FD 7B FB 7D F2 7B 3D 9E 44
VC: 04 0C FD 7B FB 7D F2 7B 3D 9E 45
VC: 04 0C FD 7B FB 7D F2 7B 3D 9E 44
VC: 04 0C FD 7B FB 7D F2 7B 3D 9E 45
VC: 04 0C FD 7B FB 7D F2 7B 3D 9E 44
NAC 0x293 FDMA DUID 10 len 864 errs 00 LDU2:: rc 0 ALGID: 80 KID: 0000 MI: 00 00 00 00 00 00 00 00 00
VC: 05 0C 7F 7F 7F BF F3 FF FF FF FD
VC: 05 73 80 80 80 40 F0 00 00 00 0C
VC: 10 6F 41 68 13 DF 0F 94 48 DA 41
VC: 08 87 9F E4 EB 56 01 EF AF 1D 7E
VC: 94 CC 85 A9 AE 8F 00 00 4A 0E A5
VC: 90 DC BA DC 84 2C 00 05 1D E5 F6
VC: 74 CA 14 B1 BA ED 00 00 63 49 07
VC: 94 A3 FE 42 B2 2F 00 03 74 4E 1C
VC: A4 C9 8A D4 D0 C1 00 02 90 A6 AB
aUNAC 0x293 FDMA DUID 05 len 864 errs 00 LDU1:: rc 0 Group Call TGID: 1 RID: 1
VC: 98 B3 68 5F EF B8 00 02 CB 56 C8
VC: 8C DC 9E FB 90 70 00 06 A9 29 15
VC: 98 AB 8A E9 19 8A 00 03 35 B2 06
VC: 8C B5 AA B4 2E C0 00 03 2A 42 C7
VC: 7C DD 86 CE 70 61 00 03 A9 6C 52
VC: 98 C4 C1 9B 7E F1 80 02 97 1E EB
VC: B0 F4 71 1C 0E E3 80 03 D4 A9 08
VC: A8 F4 3C E6 24 3F 80 05 33 E0 01
VC: 88 DE 04 DF 02 0F 80 03 B9 4F CC
aUNAC 0x293 FDMA DUID 10 len 864 errs 00 LDU2:: rc 0 ALGID: 80 KID: 0000 MI: 00 00 00 00 00 00 00 00 00
VC: 50 A3 FC B9 73 86 00 30 61 6E 31
VC: 58 87 2C DE A8 AE 00 0B 14 5B AE
VC: 04 0C FD 7B FB 7D F2 7B 3D 9E 45
VC: 04 0C FD 7B FB 7D F2 7B 3D 9E 44
VC: 04 0C FD 7B FB 7D F2 7B 3D 9E 45
VC: 04 0C FD 7B FB 7D F2 7B 3D 9E 44
VC: 04 0C FD 7B FB 7D F2 7B 3D 9E 45
VC: 04 0C FD 7B FB 7D F2 7B 3D 9E 44
VC: 04 0C FD 7B FB 7D F2 7B 3D 9E 45
NAC 0x293 FDMA DUID 03 len 072 errs 00 TDUS::
process_data_unit timeout
__________________
Joe Cardani, W3FOY
Owner, PhillyScanner Yahoo Group and Greater Orlando Communications Group
Reply With Quote
Sponsored links
  #1446 (permalink)  
Old 11-13-2017, 12:29 PM
jcardani's Avatar
Member
   
Join Date: Jan 2002
Location: Orlando, FL & Ocean City, NJ
Posts: 1,224
Default

Here is an example of an encrypted capture. I changed the TGID and RID to 1 and the KID to xxxx for privacy reasons.


NAC 0x461 DUID 0x0 len 396 errs 0 HDU:: rc 0 MFID: 00 ALG: 81 KID: xxxx TGID: 1 MI: FC B7 F9 8B 24 12 6A 38 00
NAC 0x461 DUID 0x5 len 864 errs 0 LDU1:: rc 0
VC: 18 8F 1D CE 59 7A 5C 21 16 D7 51
VC: FF 58 5F 7D D0 FF F7 07 C6 45 F5
VC: CE 16 60 3F 6F 6F 81 A3 F6 39 C7
VC: E3 D3 F4 3B 42 F0 0B 19 2E 4A 46
VC: 51 C7 71 AB CE C3 C9 F7 C7 F7 71
VC: A9 D1 39 4E 92 94 A4 21 25 52 56
VC: A4 A3 B8 21 8A CE C2 A3 E4 FC 60
VC: 61 4C 79 6C 1D 87 6C 82 D7 E2 39
VC: 4B 49 44 E0 81 74 C6 71 70 08 09
NAC 0x461 DUID 0xA len 864 errs 0 LDU2:: rc 0 ALGID: 81 KID: xxxx MI: 92 E8 A4 85 EA ED 6E 8D 00
VC: 52 74 B6 7A AE 11 CB 43 76 B6 67
VC: 9C 67 2B 57 84 67 91 7D C5 1A 63
VC: 02 61 D4 C6 0E D5 B5 E8 A1 FF 50
VC: 6A 7A 59 A9 3B 28 E3 26 76 85 20
VC: D7 F1 00 42 C2 46 0A 11 2C 7F 97
VC: BC 56 4D C0 44 AD 79 DB 7B 1B 1A
VC: C2 8E 34 D2 18 84 5B D1 3D 08 BA
VC: 5E 26 51 0F 09 23 C5 EE F4 82 72
VC: DF 86 8E 10 F9 8E 09 EF DD D6 41
NAC 0x461 DUID 0x5 len 864 errs 0 LDU1:: rc 0 TGID: 1 RID: 0
VC: AB 8A 0D 00 27 DA F4 43 87 6A B4
VC: E6 DD 2A 2E E7 2E 2F 46 59 DE D2
VC: DF 8B B5 FF 7E 40 8F 38 A1 3A 35
VC: 51 EA 86 53 E0 6E D3 F5 A2 45 81
VC: 33 F8 B7 79 8E A9 47 E3 2A 57 90
VC: 8C AC 52 E3 24 10 37 29 4E AE 34
VC: 2A 5F 06 67 FD 88 CB 17 F4 0E D1
VC: 8D 63 E2 4B 2B 1A A7 4A CF 55 DC
VC: 78 31 F5 38 DF 92 83 BF AA A0 06
NAC 0x461 DUID 0xA len 864 errs 0 LDU2:: rc 0 ALGID: 81 KID: xxxx MI: DC 40 41 A6 C7 5B 1E D3 00
VC: 95 0F C2 2B 0F 1F 1B 4B FB 5F 42
VC: FA 4F 13 19 D1 D6 90 80 19 CF 3A
VC: 71 14 FE CB 94 F5 53 B5 FB 77 8A
VC: FD 76 BC A9 23 57 8C 82 5C 18 CC
VC: 85 02 DF 29 1D 0E 59 10 44 77 26
VC: DC 36 0D 7C 47 BB 0E 75 20 64 C7
VC: F2 9E 44 05 05 DD 24 32 D5 8B D4
VC: F7 2A 4C B9 29 4B 3D B2 D9 34 DE
VC: 80 C3 65 8E 56 5C 05 BE 39 E4 95
NAC 0x461 DUID 0x5 len 864 errs 0 LDU1:: rc 0 TGID: 1 RID: 1
__________________
Joe Cardani, W3FOY
Owner, PhillyScanner Yahoo Group and Greater Orlando Communications Group
Reply With Quote
  #1447 (permalink)  
Old 11-13-2017, 12:38 PM
Member
  Premium Subscriber
Premium Subscriber
 
Join Date: Mar 2007
Location: Talbot Co, MD
Posts: 609
Default

Quote:
Originally Posted by jcardani View Post
Hi Boatbod,

About a year ago I added code to display additional HDR, LDU1, LDU2, and TDU parameters as well as the voice codewords to Phase 1. And also did the equivalent for phase 2. All changed code is in the C++ modules and I commented my changes pretty well. It would be great to incorporate the code into your version of OP25 or even better merge into the current Max release.

Please let me know if you are interested and PM me. I'll send the code over to you.

thanks!
By all means send me a pm and I'll drop you my email address.

I've got the phase 2 reed-solomon stuff (ESS info recovery) working pretty well now and am presently working on making phase 1 do the same. There is some existing code in the rs.cc module, but it's quite raw and not particularly efficient as it calculates everything from scratch every time it is invoked.

My biggest holdup with phase 1 (as always) is lack of phase 1 traffic with which to test. Every now and again an older radio affiliates and I get a chance to test stuff, but mostly my local system is phase 2 only.
Reply With Quote
  #1448 (permalink)  
Old 11-13-2017, 12:43 PM
jcardani's Avatar
Member
   
Join Date: Jan 2002
Location: Orlando, FL & Ocean City, NJ
Posts: 1,224
Default

And an example of an unencrypted Phase 2 transmission:

NAC 0x000 TDMA DUID 09 00315 Scram FACCH MAC_PTT:: PH2_HEADER_MSG Group: 00007 Source: 04363669 AlgID: 80 KID: 0000 MI: 00 00 00 00 00 00 00 00 00
NAC 0x000 TDMA DUID 09 00317 Scram FACCH BadCRC!
NAC 0x000 TDMA DUID 00 00319 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0F80 01A9 04FC 19C1 > F8 01 A9 9F 8C E0 80
VC: 0F80 01A9 04FC 19C1 > F8 01 A9 9F 8C E0 80
VC: 0F80 01A9 04FC 19C1 > F8 01 A9 9F 8C E0 80
VC: 0F80 01A9 04FC 19C1 > F8 01 A9 9F 8C E0 80
aUNAC 0x000 TDMA DUID 00 00321 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0F80 01A9 048C 19C1 > F8 01 A9 91 8C E0 80
VC: 0F80 01A9 04F6 19C1 > F8 01 A9 9E CC E0 80
VC: 0F80 01A9 04FC 19C1 > F8 01 A9 9F 8C E0 80
VC: 0F80 01A9 04FC 19C1 > F8 01 A9 9F 8C E0 80
aUNAC 0x000 TDMA DUID 00 00323 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0F80 01A9 04FC 19C1 > F8 01 A9 9F 8C E0 80
VC: 0F80 01A9 04FC 19C1 > F8 01 A9 9F 8C E0 80
VC: 0F80 01A9 04FC 19C1 > F8 01 A9 9F 8C E0 80
VC: 0F80 01A9 04FC 19C1 > F8 01 A9 9F 8C E0 80
aUNAC 0x000 TDMA DUID 03 00326 Scram SACCH MAC_ACTIVE:: GROUP_USER_MSG Group: 00007 Source: 04363520 ServOps: 04
NAC 0x000 TDMA DUID 00 00327 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0F80 01A9 057C 19C9 > F8 01 A9 AF 8C E4 80
VC: 0F80 01A9 04FC 19C1 > F8 01 A9 9F 8C E0 80
VC: 0F80 01A9 04FC 19C1 > F8 01 A9 9F 8C E0 80
VC: 0F80 01A9 04FC 19C1 > F8 01 A9 9F 8C E0 80
aUNAC 0x000 TDMA DUID 06 00329 Scram VCH MAC_VOICE:: 2_VOICE_FRAME
VC: 0F80 01A9 04FC 19C1 > F8 01 A9 9F 8C E0 80
VC: 0B80 02B9 027C 0BA5 > B8 02 B9 4F 85 D2 80
NAC 0x000 TDMA DUID 00 00331 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0AC1 0072 0431 1F35 > AC 10 72 86 2F 9A 80
VC: 0B81 0938 05C3 09C1 > B8 19 38 B8 64 E0 80
VC: 0B80 01B8 04D0 1693 > B8 01 B8 9A 0B 49 80
VC: 0B80 0354 0631 11FD > B8 03 54 C6 28 FE 80
NAC 0x000 TDMA DUID 00 00333 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0B81 0B26 044B 0DD7 > B8 1B 26 89 66 EB 80
VC: 0C80 0929 0615 1ABD > C8 09 29 C2 AD 5E 80
VC: 0D80 0878 05A7 160E > D8 08 78 B4 EB 07 00
VC: 0A80 077D 0218 174A > A8 07 7D 43 0B A5 00
NAC 0x000 TDMA DUID 00 00335 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0B81 00B3 041D 04DE > B8 10 B3 83 A2 6F 00
VC: 0491 0B33 001B 2B7F > 49 1B 33 03 75 BF 80
VC: 0B73 013A 02D4 1816 > B7 31 3A 5A 8C 0B 00
VC: 0B72 093E 00E0 1AAF > B7 29 3E 1C 0D 57 80
NAC 0x000 TDMA DUID 03 00338 Scram SACCH MAC_ACTIVE:: GROUP_USER_MSG Group: 00007 Source: 04363520 ServOps: 04
NAC 0x000 TDMA DUID 00 00339 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0E73 0135 0615 10BD > E7 31 35 C2 A8 5E 80
VC: 0D75 0A51 0096 2178 > D7 5A 51 12 D0 BC 00
VC: 0A3E 093C 038D 04E8 > A3 E9 3C 71 A2 74 00
VC: 0A09 0DF5 07F6 17CD > A0 9D F5 FE CB E6 80
NAC 0x000 TDMA DUID 06 00341 Scram VCH MAC_VOICE:: 2_VOICE_FRAME
VC: 0A48 0B3C 02FF 1801 > A4 8B 3C 5F EC 00 80
VC: 0A47 0B14 02F5 0C21 > A4 7B 14 5E A6 10 80
NAC 0x000 TDMA DUID 00 00343 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0A54 091C 0284 1F04 > A5 49 1C 50 8F 82 00
VC: 0A70 0D9A 00EE 1F35 > A7 0D 9A 1D CF 9A 80
VC: 0D80 03D2 0412 177D > D8 03 D2 82 4B BE 80
VC: 0E81 0965 00B0 0F82 > E8 19 65 16 07 C1 00
NAC 0x000 TDMA DUID 00 00345 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0E81 0199 034B 0EE9 > E8 11 99 69 67 74 80
VC: 0B74 0C11 07AD 3C57 > B7 4C 11 F5 BE 2B 80
VC: 0B62 0C5B 0184 1D71 > B6 2C 5B 30 8E B8 80
VC: 0B62 0013 0689 3935 > B6 20 13 D1 3C 9A 80
NAC 0x000 TDMA DUID 00 00347 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0B42 0617 0206 1BC5 > B4 26 17 40 CD E2 80
VC: 0B61 0E3D 0550 0FF6 > B6 1E 3D AA 07 FB 00
VC: 0B61 0B16 03F3 1D23 > B6 1B 16 7E 6E 91 80
VC: 0B61 0F15 0292 1217 > B6 1F 15 52 49 0B 80
NAC 0x000 TDMA DUID 03 00350 Scram SACCH BadCRC!
NAC 0x000 TDMA DUID 00 00351 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0B62 0C01 0151 105F > B6 2C 01 2A 28 2F 80
VC: 0B63 0455 03A6 2029 > B6 34 55 74 D0 14 80
VC: 0B53 0913 0326 021E > B5 39 13 64 C1 0F 00
VC: 0B52 061A 05A5 03F3 > B5 26 1A B4 A1 F9 80
NAC 0x000 TDMA DUID 06 00353 Scram VCH MAC_VOICE:: 2_VOICE_FRAME
VC: 0B62 0416 0220 11F2 > B6 24 16 44 08 F9 00
VC: 0D71 0020 050D 05DB > D7 10 20 A1 A2 ED 80
NAC 0x000 TDMA DUID 00 00355 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0D80 03FB 001B 147B > D8 03 FB 03 6A 3D 80
VC: 0A80 0B3F 00F2 18DE > A8 0B 3F 1E 4C 6F 00
VC: 0A81 0570 06BD 022D > A8 15 70 D7 A1 16 80
VC: 0A80 08FC 00B1 1203 > A8 08 FC 16 29 01 80
NAC 0x000 TDMA DUID 00 00357 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0A81 09B6 0300 04FA > A8 19 B6 60 02 7D 00
VC: 09A2 0371 0256 0574 > 9A 23 71 4A C2 BA 00
VC: 0A80 080F 04B9 325C > A8 08 0F 97 39 2E 00
VC: 0A80 09F4 018D 125B > A8 09 F4 31 A9 2D 80
NAC 0x000 TDMA DUID 00 00359 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0A81 0131 0523 0207 > A8 11 31 A4 61 03 80
VC: 0A80 0A7C 043C 13B4 > A8 0A 7C 87 89 DA 00
VC: 0C80 0579 0270 1713 > C8 05 79 4E 0B 89 80
VC: 0E80 023C 00F1 1FF3 > E8 02 3C 1E 2F F9 80
NAC 0x000 TDMA DUID 03 00362 Scram SACCH MAC_ACTIVE:: V_GRP_CH_GRNT
NAC 0x000 TDMA DUID 00 00363 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0E80 0573 0470 1ED7 > E8 05 73 8E 0F 6B 80
VC: 0E80 023D 0297 1F7E > E8 02 3D 52 EF BF 00
VC: 0E83 0171 005E 1F54 > E8 31 71 0B CF AA 00
VC: 0B75 0911 0455 0B5D > B7 59 11 8A A5 AE 80
NAC 0x000 TDMA DUID 06 00365 Scram VCH MAC_VOICE:: 2_VOICE_FRAME
VC: 0B70 0EBA 00E9 1915 > B7 0E BA 1D 2C 8A 80
VC: 0B71 093A 0416 0453 > B7 19 3A 82 C2 29 80
NAC 0x000 TDMA DUID 00 00367 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0B71 0B3B 05F2 025E > B7 1B 3B BE 41 2F 00
VC: 0A81 0079 007A 0D99 > A8 10 79 0F 46 CC 80
VC: 0A80 0B5F 0224 19AE > A8 0B 5F 44 8C D7 00
VC: 0A74 0032 023B 1570 > A7 40 32 47 6A B8 00
NAC 0x000 TDMA DUID 00 00369 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0F80 01A9 04FC 19C1 > F8 01 A9 9F 8C E0 80
VC: 0F80 01A9 04FC 19C1 > F8 01 A9 9F 8C E0 80
VC: 0F80 01A9 04FC 19C1 > F8 01 A9 9F 8C E0 80
VC: 0F80 01A9 04FC 19C1 > F8 01 A9 9F 8C E0 80
NAC 0x000 TDMA DUID 09 00371 Scram FACCH MAC_ACTIVE:: GROUP_USER_MSG Group: 00007 Source: 04363520 ServOps: 04
NAC 0x000 TDMA DUID 03 00374 Scram SACCH HANG_TIME:: GROUP_USER_MSG Group: 00007 Source: 00000000 ServOps: 04
NAC 0x000 TDMA DUID 09 00375 Scram FACCH BadCRC!
NAC 0x000 TDMA DUID 09 00377 Scram FACCH HANG_TIME:: V_GRP_CH_GRNT
NAC 0x000 TDMA DUID 03 00379 Scram SACCH BadCRC!
NAC 0x000 TDMA DUID -1 00381 Unk Burst
NAC 0x000 TDMA DUID -1 00383 Unk Burst
NAC 0x000 TDMA DUID 09 00395 Scram FACCH HANG_TIME:: GROUP_USER_MSG Group: 00007 Source: 00000000 ServOps: 04
NAC 0x000 TDMA DUID 09 00397 Scram FACCH HANG_TIME:: GROUP_USER_MSG Group: 00007 Source: 00000000 ServOps: 04
NAC 0x000 TDMA DUID 08 00399 Unk Burst
NAC 0x000 TDMA DUID 12 00401 Clear SACCH BadCRC!
NAC 0x000 TDMA DUID 09 00418 Scram FACCH MAC_IDLE:: PH2_UNKNOWN_MSG B1: 0 B2: 0 MCO: 00 Bytes: 00 00 00 00 00 00 00
NAC 0x000 TDMA DUID 09 00420 Scram FACCH MAC_IDLE:: PH2_UNKNOWN_MSG B1: 0 B2: 0 MCO: 00 Bytes: 00 00 00 00 00 00 00
NAC 0x000 TDMA DUID -1 00422 Unk Burst
NAC 0x000 TDMA DUID 05 00425 Unk Burst
NAC 0x000 TDMA DUID 07 00426 Unk Burst
NAC 0x000 TDMA DUID 13 00428 Unk Burst
NAC 0x000 TDMA DUID 09 00439 Scram FACCH MAC_ACTIVE:: GROUP_USER_MSG Group: 00023 Source: 04369029 ServOps: 04
NAC 0x000 TDMA DUID 09 00441 Scram FACCH MAC_ACTIVE:: GROUP_USER_MSG Group: 00023 Source: 04369029 ServOps: 04
NAC 0x000 TDMA DUID 09 00443 Scram FACCH MAC_PTT:: PH2_HEADER_MSG Group: 00023 Source: 04369066 AlgID: 80 KID: 0000 MI: 00 00 00 00 00 00 00 00 00
NAC 0x000 TDMA DUID 03 00446 Scram SACCH MAC_ACTIVE:: GROUP_USER_MSG Group: 00023 Source: 04369029 ServOps: 04


And an encrypted transmission from the same system:


NAC 0x000 TDMA DUID 09 00179 Scram FACCH MAC_PTT:: PH2_HEADER_MSG Group: 00035 Source: 04362384 AlgID: 84 KID: 000D MI: 8E B5 EC 00 3E 1A 31 97 00
NAC 0x000 TDMA DUID 09 00181 Scram FACCH MAC_PTT:: PH2_HEADER_MSG Group: 00035 Source: 04362384 AlgID: 84 KID: 000D MI: 8E B5 EC 00 3E 1A 31 97 00
NAC 0x000 TDMA DUID 00 00183 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0E4E 0717 00C4 3788 > E4 E7 17 18 9B C4 00
VC: 02B8 0358 02B9 3292 > 2B 83 58 57 39 49 00
VC: 046B 058B 0568 0E85 > 46 B5 8B AD 07 42 80
VC: 07B9 0B70 0674 126B > 7B 9B 70 CE 89 35 80
NAC 0x000 TDMA DUID 00 00185 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0C08 016A 01AC 3F7E > C0 81 6A 35 9F BF 00
VC: 0871 0905 0691 00A8 > 87 19 05 D2 20 54 00
VC: 0351 0544 055E 05CD > 35 15 44 AB C2 E6 80
aUVC: 01EA 0341 03FD 3714 > 1E A3 41 7F BB 8A 00
NAC 0x000 TDMA DUID 03 00188 Scram SACCH MAC_ACTIVE:: GROUP_USER_MSG Group: 00035 Source: 04362344 ServOps: 44
NAC 0x000 TDMA DUID 00 00189 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 089E 0A71 0216 085D > 89 EA 71 42 C4 2E 80
VC: 0ADD 0310 059D 0D02 > AD D3 10 B3 A6 81 00
VC: 0B73 0994 018C 2BC5 > B7 39 94 31 95 E2 80
VC: 0284 0FAE 0570 094B > 28 4F AE AE 04 A5 80
aUNAC 0x000 TDMA DUID 00 00191 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0E1F 0BE1 00DB 2286 > E1 FB E1 1B 71 43 00
VC: 0A4E 07D8 0096 3E7B > A4 E7 D8 12 DF 3D 80
VC: 0317 0FB4 04D7 0891 > 31 7F B4 9A E4 48 80
VC: 0135 0F22 049A 0158 > 13 5F 22 93 40 AC 00
NAC 0x000 TDMA DUID 06 00193 Scram VCH MAC_VOICE:: 2_VOICE_FRAME
VC: 0D7B 0F19 05AC 3C90 > D7 BF 19 B5 9E 48 00
VC: 0605 0659 0051 1F60 > 60 56 59 0A 2F B0 00
NAC 0x000 TDMA DUID 00 00195 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0A94 0452 03BA 0756 > A9 44 52 77 43 AB 00
VC: 0ED6 06AD 0465 2FAC > ED 66 AD 8C B7 D6 00
VC: 0361 02CF 0692 2193 > 36 12 CF D2 50 C9 80
VC: 0171 0E6D 0290 18EC > 17 1E 6D 52 0C 76 00
NAC 0x000 TDMA DUID 00 00197 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0F70 0357 0662 140B > F7 03 57 CC 4A 05 80
VC: 0422 0CFB 02B6 15DB > 42 2C FB 56 CA ED 80
VC: 0ED7 0EC2 0624 0E4B > ED 7E C2 C4 87 25 80
VC: 0B71 057B 05E8 38C9 > B7 15 7B BD 1C 64 80
NAC 0x000 TDMA DUID 03 00200 Scram SACCH MAC_ACTIVE:: GROUP_USER_MSG Group: 00035 Source: 04362344 ServOps: 44
NAC 0x000 TDMA DUID 00 00201 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 069D 0B7F 05D8 2BE7 > 69 DB 7F BB 15 F3 80
VC: 0C93 0CEE 07FB 22DB > C9 3C EE FF 71 6D 80
VC: 0EB7 0E0A 0718 13D5 > EB 7E 0A E3 09 EA 80
VC: 0030 0702 00DD 1A93 > 03 07 02 1B AD 49 80
NAC 0x000 TDMA DUID 00 00203 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 09BD 0792 0375 385D > 9B D7 92 6E BC 2E 80
VC: 0C04 0D1E 06E8 3996 > C0 4D 1E DD 1C CB 00
VC: 0C4D 0660 0268 257D > C4 D6 60 4D 12 BE 80
VC: 0284 014C 0223 1D52 > 28 41 4C 44 6E A9 00
NAC 0x000 TDMA DUID 06 00205 Scram VCH MAC_VOICE:: 2_VOICE_FRAME
VC: 0956 02A9 02CD 3F80 > 95 62 A9 59 BF C0 00
VC: 068D 0646 053B 3AE4 > 68 D6 46 A7 7D 72 00
NAC 0x000 TDMA DUID 00 00207 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0D3F 089A 0595 25BC > D3 F8 9A B2 B2 DE 00
VC: 0B04 062D 0655 3288 > B0 46 2D CA B9 44 00
VC: 0774 0C61 055A 1761 > 77 4C 61 AB 4B B0 80
VC: 08FF 098E 060F 19E4 > 8F F9 8E C1 EC F2 00
NAC 0x000 TDMA DUID 00 00209 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0B86 0CEE 0061 0B51 > B8 6C EE 0C 25 A8 80
VC: 051F 0E9A 0041 2839 > 51 FE 9A 08 34 1C 80
VC: 099D 0F5B 066C 382C > 99 DF 5B CD 9C 16 00
VC: 0C29 0B47 04D8 127D > C2 9B 47 9B 09 3E 80
NAC 0x000 TDMA DUID 03 00212 Scram SACCH MAC_ACTIVE:: V_GRP_CH_GRNT
NAC 0x000 TDMA DUID 00 00213 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 089F 0348 0740 2793 > 89 F3 48 E8 13 C9 80
VC: 0597 04FF 04EC 1CF0 > 59 74 FF 9D 8E 78 00
VC: 0436 0BCA 06D8 3EDA > 43 6B CA DB 1F 6D 00
VC: 08AE 0A65 0241 1A8B > 8A EA 65 48 2D 45 80
aUNAC 0x000 TDMA DUID 00 00215 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0E1F 0602 00E6 2BB4 > E1 F6 02 1C D5 DA 00
VC: 00AE 0CF2 061A 01EB > 0A EC F2 C3 40 F5 80
VC: 0284 05BA 01A2 28B4 > 28 45 BA 34 54 5A 00
VC: 0A15 0695 032D 2945 > A1 56 95 65 B4 A2 80
aUNAC 0x000 TDMA DUID 06 00217 Scram VCH MAC_VOICE:: 2_VOICE_FRAME
VC: 03C4 041A 039B 2C7B > 3C 44 1A 73 76 3D 80
VC: 0DEC 0E14 04A8 1C09 > DE CE 14 95 0E 04 80
NAC 0x000 TDMA DUID 00 00219 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0508 0B93 05F7 0EA6 > 50 8B 93 BE E7 53 00
VC: 0176 0B14 060E 12B7 > 17 6B 14 C1 C9 5B 80
VC: 0C22 0611 02E8 36A7 > C2 26 11 5D 1B 53 80
VC: 0094 07F5 0364 26FB > 09 47 F5 6C 93 7D 80
NAC 0x000 TDMA DUID 00 00221 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 04BB 0F8D 043A 1D6A > 4B BF 8D 87 4E B5 00
VC: 0F53 03A8 0516 2CAA > F5 33 A8 A2 D6 55 00
VC: 0857 0FB1 06E1 1BDE > 85 7F B1 DC 2D EF 00
VC: 094A 0799 006D 3160 > 94 A7 99 0D B8 B0 00
NAC 0x000 TDMA DUID 03 00224 Scram SACCH MAC_ACTIVE:: GROUP_USER_MSG Group: 00035 Source: 04362344 ServOps: 44
NAC 0x000 TDMA DUID 00 00225 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 092F 0D12 05F0 32B8 > 92 FD 12 BE 19 5C 00
VC: 093B 0F15 03B3 0AFE > 93 BF 15 76 65 7F 00
VC: 0DD5 00D2 0299 11DB > DD 50 D2 53 28 ED 80
VC: 0DAA 0A5D 0731 0BE6 > DA AA 5D E6 25 F3 00
NAC 0x000 TDMA DUID 00 00227 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0A4E 038E 07A5 2510 > A4 E3 8E F4 B2 88 00
VC: 0297 01FC 07A6 2FB6 > 29 71 FC F4 D7 DB 00
VC: 0D28 0B3B 0244 0D2B > D2 8B 3B 48 86 95 80
VC: 0D7D 06E3 062F 23F3 > D7 D6 E3 C5 F1 F9 80
NAC 0x000 TDMA DUID 06 00229 Scram VCH MAC_VOICE:: 2_VOICE_FRAME
VC: 0240 089D 0276 10D6 > 24 08 9D 4E C8 6B 00
VC: 06EC 01CB 0311 05FB > 6E C1 CB 62 22 FD 80
NAC 0x000 TDMA DUID 00 00231 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0F75 0FC4 0729 344B > F7 5F C4 E5 3A 25 80
VC: 09C2 07DC 0275 3D88 > 9C 27 DC 4E BE C4 00
VC: 0AFD 0B8E 0083 178D > AF DB 8E 10 6B C6 80
VC: 09B4 09FE 01F6 1ACA > 9B 49 FE 3E CD 65 00
NAC 0x000 TDMA DUID 00 00233 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 034B 0DE6 0476 2AE4 > 34 BD E6 8E D5 72 00
VC: 065D 040E 01F3 2EEB > 65 D4 0E 3E 77 75 80
VC: 098B 037A 031D 3BEA > 98 B3 7A 63 BD F5 00
VC: 0662 0F93 05AD 0D80 > 66 2F 93 B5 A6 C0 00
NAC 0x000 TDMA DUID 03 00236 Scram SACCH MAC_ACTIVE:: GROUP_USER_MSG Group: 00035 Source: 04362344 ServOps: 44
NAC 0x000 TDMA DUID 00 00237 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 079C 0557 019A 128F > 79 C5 57 33 49 47 80
VC: 03DD 0A31 02F4 1A66 > 3D DA 31 5E 8D 33 00
VC: 0651 01AF 0351 0956 > 65 11 AF 6A 24 AB 00
VC: 0B41 0EF7 02BC 3FE9 > B4 1E F7 57 9F F4 80
NAC 0x000 TDMA DUID 00 00239 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0599 0615 0206 2CB2 > 59 96 15 40 D6 59 00
VC: 04D1 0CDB 01A1 3D59 > 4D 1C DB 34 3E AC 80
VC: 0F7D 06B3 0739 244A > F7 D6 B3 E7 32 25 00
VC: 03DC 090C 04AE 089D > 3D C9 0C 95 C4 4E 80
NAC 0x000 TDMA DUID 06 00241 Scram VCH MAC_VOICE:: 2_VOICE_FRAME
VC: 00EF 0D36 03B6 26F2 > 0E FD 36 76 D3 79 00
VC: 0B2F 071B 0103 37C3 > B2 F7 1B 20 7B E1 80
NAC 0x000 TDMA DUID 00 00243 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0981 033D 0766 3FEF > 98 13 3D EC DF F7 80
VC: 08C0 0294 0049 0B27 > 8C 02 94 09 25 93 80
VC: 0251 0FC4 0423 307C > 25 1F C4 84 78 3E 00
VC: 09D8 0C2C 0793 1C99 > 9D 8C 2C F2 6E 4C 80
NAC 0x000 TDMA DUID 00 00245 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0991 0B11 0205 2A83 > 99 1B 11 40 B5 41 80
VC: 0887 00B9 000B 3E6B > 88 70 B9 01 7F 35 80
VC: 0FB5 0942 0530 0829 > FB 59 42 A6 04 14 80
VC: 0BA2 09E1 0024 0BD5 > BA 29 E1 04 85 EA 80
NAC 0x000 TDMA DUID 03 00248 Scram SACCH MAC_ACTIVE:: GROUP_USER_MSG Group: 00035 Source: 04362344 ServOps: 44
NAC 0x000 TDMA DUID 00 00249 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0734 0A14 0069 20E1 > 73 4A 14 0D 30 70 80
VC: 07DA 0CF7 03CC 041C > 7D AC F7 79 82 0E 00
VC: 089F 0700 0191 23EE > 89 F7 00 32 31 F7 00
VC: 068D 04AE 06C5 1D50 > 68 D4 AE D8 AE A8 00
NAC 0x000 TDMA DUID 00 00251 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 04B8 0EB3 0014 1F3F > 4B 8E B3 02 8F 9F 80
VC: 0104 0FF4 079F 294A > 10 4F F4 F3 F4 A5 00
VC: 04FC 0565 059A 349A > 4F C5 65 B3 5A 4D 00
VC: 01D1 0424 035D 07C2 > 1D 14 24 6B A3 E1 00
NAC 0x000 TDMA DUID 06 00253 Scram VCH MAC_VOICE:: 2_VOICE_FRAME
VC: 080F 0E6C 03E1 325F > 80 FE 6C 7C 39 2F 80
VC: 062B 0891 036D 2F8E > 62 B8 91 6D B7 C7 00
NAC 0x000 TDMA DUID 00 00255 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 07C9 0C81 02B5 2182 > 7C 9C 81 56 B0 C1 00
VC: 07FE 0159 032A 2C54 > 7F E1 59 65 56 2A 00
VC: 0F66 0475 04B5 2BFF > F6 64 75 96 B5 FF 80
VC: 0CCE 0F10 07A3 289D > CC EF 10 F4 74 4E 80
NAC 0x000 TDMA DUID 00 00257 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0DDB 0214 0039 3479 > DD B2 14 07 3A 3C 80
VC: 0B06 0E4C 0226 045C > B0 6E 4C 44 C2 2E 00
VC: 0EE3 091E 00BB 0AF9 > EE 39 1E 17 65 7C 80
VC: 08CC 078B 0475 2B91 > 8C C7 8B 8E B5 C8 80
NAC 0x000 TDMA DUID 03 00260 Scram SACCH MAC_ACTIVE:: GROUP_USER_MSG Group: 00035 Source: 04362344 ServOps: 44
NAC 0x000 TDMA DUID 00 00261 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0BBF 0A5F 0272 32D2 > BB FA 5F 4E 59 69 00
VC: 0E8F 0C66 0444 2176 > E8 FC 66 88 90 BB 00
VC: 0550 0286 0161 259E > 55 02 86 2C 32 CF 00
VC: 058D 0309 065A 360C > 58 D3 09 CB 5B 06 00
NAC 0x000 TDMA DUID 00 00263 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0A16 00DD 012B 27B3 > A1 60 DD 25 73 D9 80
VC: 0CEC 0C94 0107 1704 > CE CC 94 20 EB 82 00
VC: 021C 08E2 075C 2719 > 21 C8 E2 EB 93 8C 80
VC: 0C99 0599 04FC 146B > C9 95 99 9F 8A 35 80
NAC 0x000 TDMA DUID 06 00265 Scram VCH MAC_VOICE:: 2_VOICE_FRAME
VC: 0552 0D27 00B3 3794 > 55 2D 27 16 7B CA 00
VC: 083C 0AFC 0080 0C6E > 83 CA FC 10 06 37 00
NAC 0x000 TDMA DUID 00 00267 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0D3A 05FC 04C0 300B > D3 A5 FC 98 18 05 80
VC: 041D 05E8 0437 214B > 41 D5 E8 86 F0 A5 80
VC: 06E7 0C21 07DB 2084 > 6E 7C 21 FB 70 42 00
VC: 0F10 074F 07A3 33FA > F1 07 4F F4 79 FD 00
NAC 0x000 TDMA DUID 00 00269 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0092 07A8 0024 0D14 > 09 27 A8 04 86 8A 00
VC: 040A 0A3D 0736 0C44 > 40 AA 3D E6 C6 22 00
VC: 05D2 028D 00A7 1996 > 5D 22 8D 14 EC CB 00
VC: 08CA 0A48 05D1 0D21 > 8C AA 48 BA 26 90 80
NAC 0x000 TDMA DUID 03 00272 Scram SACCH MAC_ACTIVE:: GROUP_USER_MSG Group: 00035 Source: 04362344 ServOps: 44
NAC 0x000 TDMA DUID 00 00273 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0349 023E 01CA 193A > 34 92 3E 39 4C 9D 00
VC: 0362 0BAC 0635 11DD > 36 2B AC C6 A8 EE 80
VC: 09FD 011A 046A 175B > 9F D1 1A 8D 4B AD 80
VC: 060D 08BD 07D4 25E9 > 60 D8 BD FA 92 F4 80
NAC 0x000 TDMA DUID 00 00275 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0898 0611 03CE 3573 > 89 86 11 79 DA B9 80
VC: 06D8 0D01 06B8 16AE > 6D 8D 01 D7 0B 57 00
VC: 030A 0565 0514 2AE8 > 30 A5 65 A2 95 74 00
VC: 0A85 00B2 0649 0C07 > A8 50 B2 C9 26 03 80
NAC 0x000 TDMA DUID 06 00277 Scram VCH MAC_VOICE:: 2_VOICE_FRAME
VC: 0A60 099D 0498 2644 > A6 09 9D 93 13 22 00
VC: 0D88 06A1 0554 2B96 > D8 86 A1 AA 95 CB 00
NAC 0x000 TDMA DUID 00 00279 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0ED6 0D01 07A4 382C > ED 6D 01 F4 9C 16 00
VC: 040F 039F 0604 1C2A > 40 F3 9F C0 8E 15 00
VC: 0D40 04BA 02DE 2A83 > D4 04 BA 5B D5 41 80
VC: 0D1A 0E3B 07B1 368F > D1 AE 3B F6 3B 47 80
NAC 0x000 TDMA DUID 00 00281 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 099B 00AD 072B 0F3F > 99 B0 AD E5 67 9F 80
VC: 0459 0D77 02EA 0CFF > 45 9D 77 5D 46 7F 80
VC: 0908 0E47 0049 2BC9 > 90 8E 47 09 35 E4 80
VC: 0E11 032A 075E 2D70 > E1 13 2A EB D6 B8 00
NAC 0x000 TDMA DUID 03 00284 Scram SACCH MAC_ACTIVE:: GROUP_USER_MSG Group: 00035 Source: 04362344 ServOps: 44
NAC 0x000 TDMA DUID 00 00285 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 07CE 072F 000D 1C8A > 7C E7 2F 01 AE 45 00
VC: 027A 0529 0413 37BB > 27 A5 29 82 7B DD 80
VC: 029E 078F 0137 135B > 29 E7 8F 26 E9 AD 80
VC: 09C9 01EA 012F 33AC > 9C 91 EA 25 F9 D6 00
NAC 0x000 TDMA DUID 00 00287 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0063 0AF8 013A 04C0 > 06 3A F8 27 42 60 00
VC: 09C2 067A 03B1 3045 > 9C 26 7A 76 38 22 80
VC: 0F37 049D 01B0 11D5 > F3 74 9D 36 08 EA 80
VC: 02D4 01B3 055E 0E0A > 2D 41 B3 AB C7 05 00
NAC 0x000 TDMA DUID 06 00289 Scram VCH MAC_VOICE:: 2_VOICE_FRAME
VC: 0A55 02B2 074E 2A0B > A5 52 B2 E9 D5 05 80
VC: 042A 0DB5 06AB 0892 > 42 AD B5 D5 64 49 00
NAC 0x000 TDMA DUID 00 00291 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0C48 0C26 02EE 1E88 > C4 8C 26 5D CF 44 00
VC: 0B19 0D2C 04C8 09A5 > B1 9D 2C 99 04 D2 80
VC: 0719 05F3 034E 1F20 > 71 95 F3 69 CF 90 00
VC: 02C6 0FFA 046D 252B > 2C 6F FA 8D B2 95 80
NAC 0x000 TDMA DUID 00 00293 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 05BC 08BE 0727 3DF5 > 5B C8 BE E4 FE FA 80
VC: 09D5 0430 0626 1A1F > 9D 54 30 C4 CD 0F 80
VC: 0CB9 01E1 0391 2C05 > CB 91 E1 72 36 02 80
VC: 0938 029C 0131 0054 > 93 82 9C 26 20 2A 00
NAC 0x000 TDMA DUID 03 00296 Scram SACCH MAC_ACTIVE:: GROUP_USER_MSG Group: 00035 Source: 04362344 ServOps: 44
NAC 0x000 TDMA DUID 00 00297 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 0799 0512 0353 3870 > 79 95 12 6A 7C 38 00
VC: 00A4 0C11 05BE 2656 > 0A 4C 11 B7 D3 2B 00
VC: 046A 0255 03E7 0C72 > 46 A2 55 7C E6 39 00
VC: 083C 0129 0677 3823 > 83 C1 29 CE FC 11 80
NAC 0x000 TDMA DUID 00 00299 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 05D5 01AB 05BE 1CBF > 5D 51 AB B7 CE 5F 80
VC: 0F1B 0504 01AE 25A8 > F1 B5 04 35 D2 D4 00
VC: 0720 0056 004A 1D14 > 72 00 56 09 4E 8A 00
VC: 0F78 02D9 0694 048F > F7 82 D9 D2 82 47 80
NAC 0x000 TDMA DUID 06 00301 Scram VCH MAC_VOICE:: 2_VOICE_FRAME
VC: 06C7 06ED 0159 2118 > 6C 76 ED 2B 30 8C 00
VC: 02A8 09E9 05C1 3FB1 > 2A 89 E9 B8 3F D8 80
NAC 0x000 TDMA DUID 00 00303 Scram VCH MAC_VOICE:: 4_VOICE_FRAME
VC: 08CF 0890 0750 14A6 > 8C F8 90 EA 0A 53 00
VC: 0857 02EF 0215 3250 > 85 72 EF 42 B9 28 00
VC: 0D6E 0CED 04BE 0FDE > D6 EC ED 97 C7 EF 00
VC: 0AD5 0697 0747 39B8 > AD 56 97 E8 FC DC 00
NAC 0x000 TDMA DUID 09 00305 Scram FACCH MAC_ACTIVE:: GROUP_USER_MSG Group: 00035 Source: 04362344 ServOps: 44
NAC 0x000 TDMA DUID 03 00308 Scram SACCH HANG_TIME:: GROUP_USER_MSG Group: 00035 Source: 00000000 ServOps: 44
NAC 0x000 TDMA DUID 09 00309 Scram FACCH HANG_TIME:: V_GRP_CH_GRNT
NAC 0x000 TDMA DUID 09 00311 Scram FACCH HANG_TIME:: V_GRP_CH_GRNT
NAC 0x000 TDMA DUID 13 00313 Unk Burst
NAC 0x000 TDMA DUID 15 00315 Clear FACCH BadCRC!
NAC 0x000 TDMA DUID 09 00340 Scram FACCH HANG_TIME:: V_GRP_CH_GRNT
NAC 0x000 TDMA DUID 09 00342 Scram FACCH HANG_TIME:: V_GRP_CH_GRNT
NAC 0x000 TDMA DUID 09 00344 Scram FACCH HANG_TIME:: V_GRP_CH_GRNT
NAC 0x000 TDMA DUID 08 00346 Unk Burst
NAC 0x000 TDMA DUID -1 00348 Unk Burst
NAC 0x000 TDMA DUID 09 00376 Scram FACCH MAC_ACTIVE:: GROUP_USER_MSG Group: 00035 Source: 04362358 ServOps: 44
NAC 0x000 TDMA DUID 03 00379 Scram SACCH MAC_ACTIVE:: GROUP_USER_MSG Group: 00035 Source: 04362358 ServOps: 44
NAC 0x000 TDMA DUID 09 00380 Scram FACCH MAC_ACTIVE:: GROUP_USER_MSG Group: 00035 Source: 04362358 ServOps: 44
__________________
Joe Cardani, W3FOY
Owner, PhillyScanner Yahoo Group and Greater Orlando Communications Group
Reply With Quote
  #1449 (permalink)  
Old 11-13-2017, 2:15 PM
Member
  Premium Subscriber
Premium Subscriber
 
Join Date: Jun 2010
Location: Hesperia California
Posts: 141
Default

How do you capture the traffic i have encrypted phase 1 in my area
Reply With Quote
  #1450 (permalink)  
Old 11-13-2017, 4:41 PM
Member
  Premium Subscriber
Premium Subscriber
 
Join Date: Mar 2007
Location: Talbot Co, MD
Posts: 609
Default

Quote:
Originally Posted by ansul1001 View Post
How do you capture the traffic i have encrypted phase 1 in my area
You would either need the modifications that jcardani made, or the code that I'm currently working on. Either way, it's not something that you can turn on without changing the c++ op25 library code.
Reply With Quote
  #1451 (permalink)  
Old 11-13-2017, 5:42 PM
Member
   
Join Date: Jul 2002
Location: Sydney, Australia
Posts: 415
Default

Yep - that was a result of design by committee. There were two separate committees doing the FMDA CAI spec and the encryption encryption specifications. The encryption guys decided on a 64 bit MI/IV while the FDMA team had already designed the CAI around 72 bits, so two bits went unused.

Quote:
Originally Posted by boatbod View Post
Seems like the encryption I see on my system is using 64bits out of the posisble 72bit MI.
Reply With Quote
  #1452 (permalink)  
Old 11-13-2017, 5:43 PM
Member
   
Join Date: Jul 2002
Location: Sydney, Australia
Posts: 415
Default

G'day Joe,

Yep, all is well! Been trying to find time to fix up the hosting for my wiki, but I didn't think that anyone actually read it and I'm amazed that someone noticed it was offline!

Cheers,
Matt


Quote:
Originally Posted by jcardani View Post
Hi Matt,

Your website has been down for a while, everything OK?

thanks!
Reply With Quote
  #1453 (permalink)  
Old 11-13-2017, 8:08 PM
Member
  Premium Subscriber
Premium Subscriber
 
Join Date: Mar 2007
Location: Talbot Co, MD
Posts: 609
Default

Quote:
Originally Posted by MattSR View Post
Yep - that was a result of design by committee. There were two separate committees doing the FMDA CAI spec and the encryption encryption specifications. The encryption guys decided on a 64 bit MI/IV while the FDMA team had already designed the CAI around 72 bits, so two bits went unused.
LOL

Now that reminds me of the days when I was involved with C7/SS7 telephony signaling network design. Before they were renamed the ITU-T, the standards body was called the Comite Consultatif International de Telegraphique et Telephonique or CCITT. Most people laughably referred to them as the "Coffee and Croissants Interrupted by Technical Trivia" crowd.
Reply With Quote
  #1454 (permalink)  
Old 11-13-2017, 8:22 PM
Member
   
Join Date: Jul 2002
Location: Sydney, Australia
Posts: 415
Default

lol - now that's a good one!

I just re-read my post, and there's an extra "encryption" in there and I meant to say that two bytes (16 bits) wen unused, instead of 2 bits!
Reply With Quote
  #1455 (permalink)  
Old 11-14-2017, 5:29 PM
jcardani's Avatar
Member
   
Join Date: Jan 2002
Location: Orlando, FL & Ocean City, NJ
Posts: 1,224
Default

Hi Graham,

Can you receive the Joint National Capital Region 380 MHz P25 Phase 1 system from your location or any other 380 Military system? That may work for testing Phase 1 trunked systems if there are no other Phase 1 public safety systems that are receivable. Also check out any VHF or UHF conventional P25 in the government allocations.


Quote:
Originally Posted by boatbod View Post
By all means send me a pm and I'll drop you my email address.

My biggest holdup with phase 1 (as always) is lack of phase 1 traffic with which to test. Every now and again an older radio affiliates and I get a chance to test stuff, but mostly my local system is phase 2 only.
__________________
Joe Cardani, W3FOY
Owner, PhillyScanner Yahoo Group and Greater Orlando Communications Group
Reply With Quote
  #1456 (permalink)  
Old 11-14-2017, 6:33 PM
Member
  Premium Subscriber
Premium Subscriber
 
Join Date: Mar 2007
Location: Talbot Co, MD
Posts: 609
Default

Quote:
Originally Posted by jcardani View Post
Hi Graham,

Can you receive the Joint National Capital Region 380 MHz P25 Phase 1 system from your location or any other 380 Military system? That may work for testing Phase 1 trunked systems if there are no other Phase 1 public safety systems that are receivable. Also check out any VHF or UHF conventional P25 in the government allocations.
I'll take a look, thanks.
Reply With Quote
  #1457 (permalink)  
Old 11-14-2017, 6:48 PM
jcardani's Avatar
Member
   
Join Date: Jan 2002
Location: Orlando, FL & Ocean City, NJ
Posts: 1,224
Default

Forgot to mention there should be a site across the river at the naval academy in Annapolis
__________________
Joe Cardani, W3FOY
Owner, PhillyScanner Yahoo Group and Greater Orlando Communications Group
Reply With Quote
  #1458 (permalink)  
Old 11-14-2017, 7:56 PM
Member
   
Join Date: Oct 2010
Location: Kansas City, MO
Posts: 36
Default

I have a few that run fully encrypted within range here, if anyone wants me to test anything.

Sent from my SM-N920P using Tapatalk

Last edited by tecc1229; 11-14-2017 at 8:05 PM..
Reply With Quote
  #1459 (permalink)  
Old 11-14-2017, 9:20 PM
Member
   
Join Date: Sep 2002
Location: Toronto, Ontario
Posts: 4,137
Default

Quote:
Originally Posted by MattSR View Post
The encryption guys decided on a 64 bit MI/IV while the FDMA team had already designed the CAI around 72 bits, so two bits went unused.
8 bits, one byte.


Quote:
Originally Posted by MattSR View Post
I meant to say that two bytes (16 bits) wen unused, instead of 2 bits!
8 bits, one byte.
Reply With Quote
  #1460 (permalink)  
Old 11-14-2017, 9:24 PM
Member
   
Join Date: Jul 2002
Location: Sydney, Australia
Posts: 415
Default

I'm typing faster than I am thinking.

You are correct of course. 72 bits - 64 bits = 8 bits, or one byte.
Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -5. The time now is 9:08 AM.


Powered by vBulletin® Version 3.8.2
Copyright ©2000 - 2017, vBulletin Solutions, Inc.
All information here is Copyright 2012 by RadioReference.com LLC and Lindsay C. Blanton III.Ad Management by RedTyger
Copyright 2015 by RadioReference.com LLC Privacy Policy  |  Terms and Conditions