Oak Ridge DOE New P25 System

Status
Not open for further replies.

zachgallop

Member
Joined
Dec 20, 2010
Messages
361
Location
Knoxville, TN
I have noticed for a little while that the ORNL Smartzone System was acting strange. But tonight I decided to program in the system with a control Channel of 406.975 as a P25 System. So far I have received two Phase II talkgroups with mixed encryption use.
 

zachgallop

Member
Joined
Dec 20, 2010
Messages
361
Location
Knoxville, TN
Lots of encryption on this new system seem to be mostly picking up Security and Fire TGIDS. Haven't tried to listen in busy part of the day for the old system. There's another control channel of 409.425. Seems to be simulcast system
 

rkm1215

Member
Premium Subscriber
Joined
Nov 24, 2006
Messages
451
Location
Knoxville
408.7125c should be TVA. I'll confirm this week, but check your system IDs carefully.

Sent from my LGL22C using Tapatalk
 

milf

Careful, I CAN hear you!
Premium Subscriber
Joined
Dec 18, 2002
Messages
13,645
Location
Indianapolis, IN
Yes, check your SysID, and log Site ID, etc...
Unitrunker, Pro96Com are your friends, and Analyze on the X36HPs.
 

zachgallop

Member
Joined
Dec 20, 2010
Messages
361
Location
Knoxville, TN
Back to the Oak Ridge DOE P25 Phase II radio system. They have two sites so far I have found so far. One is 406.975 MHz and the second is 408.1875. Almost all talkgroups are Phase II except one. I will submit talkgroups as I get stuff.
 

zachgallop

Member
Joined
Dec 20, 2010
Messages
361
Location
Knoxville, TN
I have some fire talkgroups confirmed. Those control channels are two different site frequencies . The system has been online since June of 2017 as far as I know.
 

W4ELL

Member
Feed Provider
Joined
Feb 11, 2005
Messages
622
Location
Maryville, Tennessee
I have listened to this off and on from Maryville. Mostly encrypted Phase II but I have heard some chatter in the clear (also Phase II). Most notable, a discussion about access to the graphite reactor. (I think it has become a tourist attraction).

I want to throw DSD+ on it to see what I can find. Just from my logs in ProScan, I have gathered some info that isn't quite DB ready but I thought I would post some of it here:

Frequencies (not sure which sites they belong to yet):
407.575
408.175
409.425
409.8875

Talkgroups:
1101
1105
3012
3101
3102
3201
3217
4105
4107
4201
5001
5102
5106
5201
5301
5401
 

zachgallop

Member
Joined
Dec 20, 2010
Messages
361
Location
Knoxville, TN
Talkgroup:
32XX-Seem to be ORNL Facility Ops
3205-Hyper Flux Istope Reactor?
43xx-Y12 Facility Ops
4308-Y12 Shuttle Buses?
4101-Y12 Fire Tac 1 (Main)
4102-Y12 Fire Tac 2
3101-ORNL Fire Tac 1 (Main)
3102-ORNL Fire Tac 2
There is also some 65xxx talkgroups used for Emergency Response Pagging
Some of these seem to be called Command talkgroups. I had some more semi confirmed like a year ago. I will see if I can find them. I think there is some National Park Service Talkgroups as well, I heard them on the system alerting about lightning. The encrypted talkgroups seem to be selectable encryption.
 
Last edited:

zachgallop

Member
Joined
Dec 20, 2010
Messages
361
Location
Knoxville, TN
I have listened to this off and on from Maryville. Mostly encrypted Phase II but I have heard some chatter in the clear (also Phase II). Most notable, a discussion about access to the graphite reactor. (I think it has become a tourist attraction).

I want to throw DSD+ on it to see what I can find. Just from my logs in ProScan, I have gathered some info that isn't quite DB ready but I thought I would post some of it here:

Frequencies (not sure which sites they belong to yet):
407.575
408.175
409.425
409.8875

Talkgroups:
1101
1105
3012
3101
3102
3201
3217
4105
4107
4201
5001
5102
5106
5201
5301
5401
Actually the far majority is in the clear. There is a lot of channels so it might take me awhile to make a list. I apparently submitted the wrong control channel. There no 406.1875 it is 408.1875 .So the. two sites are 406.975 and 408.1875. It was a typo. Most traffic is on that site. Try trying during the work day hours, you will get a lot of that site. Also, The system is not just for Oak Ridge National Lab (the name was changed to that). It is for everybody East Tennessee Technology Park (K25), Y12 National Security Complex, and ORNL. National Park Service also uses it. Pretty much anybody on the reservation.So I feel that something like Oak Ridge DOE NNSA (P25) or Oak Ridge DOE Reservation (P25) would be better. Y12 I am pretty sure runs the radio system. Can anybody confirm that?
 
Last edited:

surfacemount

Member
Joined
Jul 5, 2011
Messages
157
Location
Knox / Roane / Loudon counties, Tennessee
Because part of the old K25 site has been made a National Park, I would be more willing to believe Y12 threw the new Rangers, was housed at AMSE, a couple of older radios, than I would GSMNP or other park Ranger types being given a TG on their system.

Lightning is a major major issue at Y12, as is high winds, you'll hear both coming from the PSS (Plant Shift Superintendents') Office.

In addition to ETTP, Y12, and ORNL, townsite and a couple of other entities are on that system, now.

If we are voting on names, DOE ORO (Oak Ridge Operations) makes sense to me. Not everything is NNSA out there, and there are places off the main reservation where communications take place.
 

W4ELL

Member
Feed Provider
Joined
Feb 11, 2005
Messages
622
Location
Maryville, Tennessee
As I have listened to this system, I have heard about 50/50 encryption/clear comms although, I do agree that the encryption seems to be selectable.

It looks like the 2 sites are as follows (according to DSD+):

SysID=00A LRA=1 RFSS=1 Site=1 CC=406.975
SysID=00A LRA=10 RFSS=10 Site=10 CC=408.1875

406.975 is Site 1-1

Site 1 frequencies:
406.975 CC
407.575
408.175
409.425
409.8875


408.1875 is Site 10-10

Site 10 frequencies:
408.1875 CC
409.6875
409.775

I am barely getting Site 10 so I'll need to make a trip this weekend with my laptop to confirm.
 

zachgallop

Member
Joined
Dec 20, 2010
Messages
361
Location
Knoxville, TN
Clear Talkgroups:
4332
4330
4308-Y12 SHUTTLE
3206
4304
4311
4331
2011-Park Service ?
65146-Pagging Park Service?
4101-Y12 FD TAC1
4322
2203
4102-Y12 FD TAC2
4321
2210
2212
4334
4319
2204
2207
4304
3214
3101-ORNL FD TAC1
3205-HYPER FLUX REACTOR
4328
2204
4306
4321
4303
4108-POWER/ELECTRICIAN?
4309
3219-ORNL SHUTTLE?
2211
2214
2206
4326
4329
4318
4301
4320
3216
2211
4314
4317
2209
4327
4312
65200-FIRE EMS PAGE
3102-ORNL FD TAC.2
4315
4313
3217
4201
65183-Y12 FD PAGING
65180-Y12 FD PAGING COMMAND 1?
Encrypted Talkgroups:
5406
5405
5407
5201
5301
5102
5403
5401
5501
5014
65182-SECURITY PAGING?
5002
 
Joined
Dec 22, 2016
Messages
242
Location
RadioReference Forums
Security Police

Actually the far majority is in the clear. There is a lot of channels so it might take me awhile to make a list. I apparently submitted the wrong control channel. There no 406.1875 it is 408.1875 .So the. two sites are 406.975 and 408.1875. It was a typo. Most traffic is on that site. Try trying during the work day hours, you will get a lot of that site. Also, The system is not just for Oak Ridge National Lab (the name was changed to that). It is for everybody East Tennessee Technology Park (K25), Y12 National Security Complex, and ORNL. National Park Service also uses it. Pretty much anybody on the reservation.So I feel that something like Oak Ridge DOE NNSA (P25) or Oak Ridge DOE Reservation (P25) would be better. Y12 I am pretty sure runs the radio system. Can anybody confirm that?
Is that the talkgroup that Whackanut guards use? Are they still in charge out there?
 

W4ELL

Member
Feed Provider
Joined
Feb 11, 2005
Messages
622
Location
Maryville, Tennessee
I finally got in range of the 408.1875 (Site 10) with a scanner and can confirm that it is 100x more active than the other site and almost totally in the clear. The 406.975 (Site 1) has way less activity and there is way more encryption on it for sure.

Edit: Just from eyeballing it while scanning, it looks like this site (10-10) has 21 frequencies (or more) also.
 
Last edited:

zachgallop

Member
Joined
Dec 20, 2010
Messages
361
Location
Knoxville, TN
Is that the talkgroup that Whackanut guards use? Are they still in charge out there?
Not sure. Maybe somebody else could answer that.Their Security-Police Contractors must use several encrypted capable talkgroups (the 5xxx ones or one of those units). I think Y12 Protective Force is separate from ORNL. Two separate vehicle designs.Just like their fire department. ORNL has Security Police with the Blue Strip and Y12 is the NNSA badge on the Door with Y12 Protective force in the back. Their uniforms are the same. For K25 or ETTP, Oak Ridge Fire took over their services.
EDIT: Apparently WSI (formerly Whackanut) (also GS4 Solutions) lost their contract when the breach happened and National Strategic Protective Services LLC, or NSPS became the contractor for ETTP, ORNL, the Federal Building, and the rest of the Oak Ridge Reservation.B&W Y12 took over Y12'S security Force after the breach.
 
Last edited:
Joined
Dec 22, 2016
Messages
242
Location
RadioReference Forums
PM

Not sure. Maybe somebody else could answer that.Their Security-Police Contractors must use several encrypted capable talkgroups (the 5xxx ones or one of those units). I think Y12 Protective Force is separate from ORNL. Two separate vehicle designs.Just like their fire department. ORNL has Security Police with the Blue Strip and Y12 is the NNSA badge on the Door with Y12 Protective force in the back. Their uniforms are the same. For K25 or ETTP, Oak Ridge Fire took over their services.
EDIT: Apparently WSI (formerly Whackanut) (also GS4 Solutions) lost their contract when the breach happened and National Strategic Protective Services LLC, or NSPS became the contractor for ETTP, ORNL, the Federal Building, and the rest of the Oak Ridge Reservation.B&W Y12 took over Y12'S security Force after the breach.
PM sent
 
Joined
Dec 22, 2016
Messages
242
Location
RadioReference Forums
Range

I finally got in range of the 408.1875 (Site 10) with a scanner and can confirm that it is 100x more active than the other site and almost totally in the clear. The 406.975 (Site 1) has way less activity and there is way more encryption on it for sure.

Edit: Just from eyeballing it while scanning, it looks like this site (10-10) has 21 frequencies (or more) also.
How far is it's range?
 

zachgallop

Member
Joined
Dec 20, 2010
Messages
361
Location
Knoxville, TN
1101-Might be the Radio Shop Ops. On my recordings OROC (Dispatch) was discussing about 3xx series unit about the Alarm not arming on the Chesnut Ridge Radio Room door. Might be where one of their repeaters are. Also I am guessing OROC Dispatch is at Battleship aka Oak Ridge Federal Building.
 
Status
Not open for further replies.
Top