PPSTN - Provincial Public Safety Telecommunications Network - System Updates

[ve5wil]

I'm working on an Excel sheet including known key IDs, all TG (including tower) and all RID's known (including tower and reserved one) I'm taking info from the wiki's, and this thread. I will post my completed list when done so others can add or correct it if they wish. So far 5,734 RID's, and 1116 TG's. there is still a long way to go.

 

[ve5wil]

Talked to a guy at 15 Wing Serco radio shop - there are 18 PPSTN radios curently licensed between 15 Wing and 15 Wing Detachment Dundurn 13 Portables, a base, 4 mobile ( 3 cruiser and a quad). ids range from 2264451-2264468.

I hope this works- my composited Excel file combining the wikis and information in this thread. It should be editable by anyone.

PPSTN

docs.google.com

 

[ve5wil]

Thanks Ryan for cleaning up the sheets and for your contributions to it. Hopefully we can all keep this as an updated and accurate as possible reference-Wil

 

[ve5wil]

Would I be close in assuming

HDU MI 00000 00000 00000 Standard Unencrypted KID 0000 GID 14A2 would be the beginning of a transmission and

A ESW MI 00000 00000 00000 Unencrypted KID 0000 would be the continuation?

 

[Mobby1-Kenobby]

Yes, Wil

The first message sent contains the KID=0000
14A2=5282 Moose Jaw City 1 EMS Dispatch is unencrypted so KID is always 0000.
The following message/s will not have the KID at the begining.

Now you can get us some encryption KIDs.

Cheers!

 

[ve5wil]

i did find a key or part of one for TG 164. SDRtrunk shows Key:63 for that one

 

[Mobby1-Kenobby]

Ok, Wil
The raw message will be in HEX.
So the KID HEX is 0063=99?
Or are you showing 0063 as the DEC so the HEX is 003F?

Thanks

 

[ve5wil]

DEC is 63. Sdrtrunk is showing keys as dec. looked at the other keys that were identified, and figured the first part was HEX.

 

[wolffe]

2215013 is C305. Confirmed by voice.

Primrose Lake is not an inhabited place, so definitely no RCMP detachment there.

What is the frequency on that 00C site NE of Saskatoon?
Site 30C is showing as a peer of 19, 32, 34, 47

Site 38C is SW of Prince Albert (likely Muskoday FN)

Willing to bet you'd find a string of 00C sites from 30-37 filling in coverage gaps off the highway in smaller areas missed by the initial PPSTN construction.

Your quite right, Primrose should of been Pinehouse Lake (mistype on my part). The 4th and 5th numbers of the RID 2215013 - 50, puts the radio in the North Region. It has been seen to login on Tg 94.

The frequencies for the 00C sites are the exact same as the 00A site. So 0000A-00C - 030-030 uses the same frequencies as 0000A-00A - 030-030 site does.

More on the 321 prefixes

the following all start with 321

0069 - TG 64 - 1 hit
0083 - TG 45 - 4 hits
0085 - TG 45 - 5 hits
0086 - TG 45 - 4 hits
0110 - TG 74 - 16 hits
0121 - TG 64 - 4 hits
0136 - TG 70 - 1 hit
0139 - TG 64 - 1 hit
0142 - TG 62 - 2 hits
0163 - TG 80 - 1 hit
0169 - TG 64 - 1 hit
0191 - TG 178 - 171 hits
0193 - TG 178 - 12 hits
0195 - TG 178 - 79 hits

 

[wolffe]

New TGs that I have seen

6256 with 2263139 logon Site 34 Data
6266 with 2263092 logon Site 19
1112 a unknown Saskpower Tg with 2226248 joining

6136 has been quite active again, recent activity no longer on site 34, instead it is on site 19.

 

[wolffe]

Some of these have been posted already.

6209 AES KID 0015 - 2264385
6179 AES KID 6916 - 2265019
6179 AES KID 0001 - 2261972
6235 AES KID 6916 - 2264956
6000 AES KID 0001 - 2261454
6136 AES KID 6001 - 2264672
6063 AES KID 0001 - 2261604
6069 AES KID 0001 - 2279968

 

[ryan433pk]

Some of these have been posted already.

6209 AES KID 0015 - 2264385
6179 AES KID 6916 - 2265019
6179 AES KID 0001 - 2261972
6235 AES KID 6916 - 2264956
6000 AES KID 0001 - 2261454
6136 AES KID 6001 - 2264672
6063 AES KID 0001 - 2261604
6069 AES KID 0001 - 2279968

PPSTN

docs.google.com

Check out Wil's sheet. Best place to update that info.

 

[wolffe]

6084 AES KID 6916 - 2264852
6238 AES KID 6916 - 2264945
6206 AES KID 0014 - 2261288
45 AES KID 0039 - 2216404

 

[wolffe]

Check out Wil's sheet. Best place to update that info.

I wasn't able to download the file

 

[ryan433pk]

I wasn't able to download the file

You might need to request access

 

[ve5wil]

I wasn't able to download the file

You should be able to access that sheet now.

 

[ve5wil]

Looking at Wolffe's keys, it appears that some radios have multiple keys. - Regina PCC showed with a SERM key and Rid -

On another note - Regina city shows both a Motorola and P25 system . have they migrated to the P25 system, or are both overlapping somehow?

 

[ryan433pk]

Looking at Wolffe's keys, it appears that some radios have multiple keys. - Regina PCC showed with a SERM key and Rid -

On another note - Regina city shows both a Motorola and P25 system . have they migrated to the P25 system, or are both overlapping somehow?

Initially all ministry radios used the same key ID. this doesn't mean they are using the same actual key since these radios never overlap.
SERM/HTP likely have the same key since they are both dispatched by PECC.

Regina has migrated over to the P25 system. It was linked by a SmartX converter to the SmartZone system before but I believe that has been removed.

 

[kayn1n32008]

Looking at Wolffe's keys, it appears that some radios have multiple keys. - Regina PCC showed with a SERM key and Rid -

I would expect encrypted users to have, at minimum, 3 keys(assuming OTAR is in use)

1- UKEK used for OTAR
2- Agency specific key
3- Patch key, used when patching encrypted talk groups.

 

[wolffe]

There are a lot of portable radio and TGs being shuffled around, court portables and Sask Gov Events portables have been moving around with constant radio checks.

6118 has court portables on it
6120 has court portables on it

Sask Gov events portables are on court TG's

See where it all ends up

"City of Saskatoon radio test" is repeated with each radio and multiple "radio check" requests.