PPSTN - Provincial Public Safety Telecommunications Network - System Updates

ve5wil

Member
Feed Provider
Joined
Dec 19, 2002
Messages
246
Reaction score
50
Location
Moose Jaw
looks like 15 Wing Military Police finally found out they can encrypt.
2264465-67 coming up encrypted
 
Joined
Feb 3, 2015
Messages
412
Reaction score
217
Hi, all

In the last three days I have seen talk-group 84 Meadow Lake, Loon Lake, Pierceland, Green Lake region patched to talk-group 215.
See the screenshot and link to the news report.

215 Link TG to K-Div.png
 

ve5wil

Member
Feed Provider
Joined
Dec 19, 2002
Messages
246
Reaction score
50
Location
Moose Jaw
I'm noticing something since last week using Unitrunker. A lot of traffic is coming up listing "0" as source, SDRrunk is catching the id's. I haven't updated Unitrunker yet (2.1.0.108). I've reset the dongle, and rebooted the computer. Even cleared a few hundred GB of data off the hard drive. It doesn't appear that the status bar is moving at all.
 
Joined
Feb 3, 2015
Messages
412
Reaction score
217
Hi, all

Once again it's time for another update.

RR member ve5wil reported what he was seeing on the PPSTN 00A radio site at Moose Jaw in his post #346 on October 26, 2025.
Nothing was in fact wrong with Wil's Unitrunker 2 settings or his RTL-SDR device.

What had occurred?
The PPSTN 00A site 084 had been taken down and replace with the PPSTN 00A site 053 from Pilot Butte.
At this time the new location of 00A site 84 is unknown.
The PPSTN site at Pilot Butte is now system 00C site 50.
More system 00C radio sites are now in the Regina area and they are 043, 044, 047 Lajord, 049, west of the Lajord site and 101.
The PPSTN RR data base has been updated with some of this information.

Why was Wil seeing Unitrunker 2 showing only zero for all the RCMP DOCC and PA Dispatcher RIDs?
The control channel messages sent by 00A site 84 and 00C site 50 do not contain any dispatcher RID data.
All other PPSTN radio sites are still unchanged and still sending dispatcher RID data on their control channels.
Other RR members monitoring L3-Harris 25-P1 and P2 radio site control channels have also been reporting dispatcher RIDs as zero.
At some point I will have a look at the data being sent on the voice channels from the Pilot Butte site.

As for Wil, he is only going to continue to see those dispatcher RIDs as zero on 00A site 053.
Wil could try to monitor another radio site control channel that is still sending the dispatcher RIDs.
Knowing when MOSS and CICC are in use can be very helpful.

As for me I have recently deleted the Signal app from my phone because it is being used just like Unitrunker.
Utilizing Unitrunker we can see the RIDs that are communicating with each other utilizing encryption.
Signal had my phone number and the phone numbers of those I was communicating with and this meta data was used
to see when and who I am communicating with. A Signal call/text is also encrypted and is similar to private I-call/RID
to RID call on an encrypted P25 trunked network.

I have since installed the Session app on my phone for increased privacy.
I have also been utilizing Proton mail for it's increased privacy.

Cheers.
 
Joined
Feb 3, 2015
Messages
412
Reaction score
217
Hi, all

I have been taking a look at a several decoding logs from various PPSTN radio sites.
It appears that both the Pilot Butte and Moose Jaw radio sites may have dedicated data channels at some point.
96 00 00 40 (00 00) (00 00) FF FF 3C 01 This is a SNDCP Data Channel Announcement Explicit - Channels: RX: 0-0000(138.00000) TX: 0-0000(138.00000) - DAC Group: 65535
In the above packet you can see the octets in brackets are blank, so no TX or RX channel numbers are present at this point in time.
138.00000 is just the base frequency to which the channel numbers are added to get the correct frequencies in use.

In addition to this there are also the following two Harris A4 messages.
The first 81 message is the same on both the Pilot Butte and the Moose Jaw sites. This same message is also seen on other L3-Harris P25-P1/P2 networks.
In the second 8F message we can see the octets in brackets are not the same, and this is also true for other L3-Harris P25-P1/P2 networks.

81 A4 11 0D FF FF FF FF FF FF F7 9D Harris Unknown OSP
8F A4 0A (A5 C0) 0A 00 00 00 00 1C 91 Harris Unknown OSP
Above (A5 C0)=42432
81 A4 11 0D FF FF FF FF FF FF F7 9D Harris Unknown OSP
8F A4 0A (A4 00) 0A 00 00 00 00 1A C0 Harris Unknown OSP
Above (A4 00)=41984

The data channel announcement and both of the Harris unknown messages are not seen in the logging files from other PPSTN radio sites.
The two Harris A4 messages will only be "seen" by Harris radios and not by the Motorola radios.
It is the differences between the 8F Harris messages that just may help to reveal their use.

In the first two examples below you will see both Unitrunker 2 and Pro96com logging the same events at the same time.

Unitrunker 2 logging:
PPSTN system 00C Pilot Butte site 50 (32)
12:18:27.875 032 C 37 FD 00 32 00 0C 81 3B 00 00 28 59 Network Status Broadcast (Extended) WACN 0000A Sys 00C TX 0-0C6(138.99000) RX 0-2B5(141.46500)(data, voice, registration)
12:18:27.875 032 C -00 00 A0 00 C6 02 B5 70 43 2A 54 50
12:18:27.908 032 7 -A9 00 32 32 00 AE 00 02 9D 04 52 43 Secondary Control Channel Broadcast Explicit Sub 32 Site 32 TX 0-0AE(138.87000) RX 0-29D(141.34500) (backup control channel only)
12:18:27.943 032 7 -96 00 00 40 00 00 00 00 FF FF 3C 01 SNDCP Data Channel Announcement Explicit Opt 00 AA=0 RA=1 DAC FFFF (nsapi 0, packet)
12:18:27.976 032 7 -81 A4 11 0D FF FF FF FF FF FF F7 9D Harris Unknown OSP
12:18:28.009 032 7 -8F A4 0A A5 C0 0A 00 00 00 00 1C 91 Harris Unknown OSP

Pro96com logging:
PPSTN system 00C Pilot Butte site 50 (32)
37 FD 00 32 30 0C 81 3A 00 00 30 E5 11/09/2025 12:18:27 Multi-Block RFSS Status Broadcast 1 - SysID: 00C Status: Connected Follow: 1
32 32 00 C6 02 B5 70 00 B2 81 C3 10 11/09/2025 12:18:27 Multi-Block RFSS Status Broadcast 2 - RFSS: 50 Site: 50 Control tx: 0-0198(138.99000) Control rx: 0-0693(141.46500) Cap: Data, Voice, Registration
37 FD 00 32 00 0C 81 3B 00 00 28 59 11/09/2025 12:18:27 Multi-Block Network Status Broadcast 1 - SysID: 00C Follow: 1
00 00 A0 00 C6 02 B5 70 43 2A 54 50 11/09/2025 12:18:27 Multi-Block Network Status Broadcast 2 - WACN: 0000A Control tx: 0-0198(138.99000) Control rx: 0-0693(141.46500) Cap: Data, Voice, Registration
A9 00 32 32 00 AE 00 02 9D 04 52 43 11/09/2025 12:18:27 Explicit Alternate Control - RX Channel: 0-0174(138.87000) TX Channel: 0-0669(141.34500) Cap: Backup control channel only
96 00 00 40 00 00 00 00 FF FF 3C 01 11/09/2025 12:18:27 Data Channel Update - Status: Available - Channels: RX: 0-0000(138.00000) TX: 0-0000(138.00000) - DAC Group: 65535
81 A4 11 0D FF FF FF FF FF FF F7 9D 11/09/2025 12:18:27 Unknown Op=01 Mfg A4(Harris)
8F A4 0A A5 C0 0A 00 00 00 00 1C 91 11/09/2025 12:18:28 Unknown Op=0F Mfg A4(Harris)


Now we will take a look at Unitrunker 2 logging:
PPSTN system 00C Moose Jaw site 53 (35) Wil's data.
22:11:52.781 035 C 37 FD 00 35 30 0A 81 3A 00 00 E4 24 RFSS Status Broadcast (Extended) Sys 00A Sub 35 Site 35 TX 0-0ED(139.18500) RX 0-2DF(141.67500)(data, voice, registration)
22:11:52.781 035 C -35 35 00 ED 02 DF 70 00 05 91 EF 39
22:11:52.881 035 7 -A9 00 35 35 00 D5 00 02 C7 04 9C 12 Secondary Control Channel Broadcast Explicit Sub 35 Site 35 TX 0-0D5(139.06500) RX 0-2C7(141.55500) (backup control channel only)
22:11:52.915 035 7 -96 00 00 40 00 00 00 00 FF FF 3C 01 SNDCP Data Channel Announcement Explicit Opt 00 AA=0 RA=1 DAC FFFF (nsapi 0, packet)
22:11:52.949 035 7 -81 A4 11 0D FF FF FF FF FF FF F7 9D Harris Unknown OSP
22:11:52.982 035 7 -8F A4 0A A4 00 0A 00 00 00 00 1A C0 Harris Unknown OSP

At this point I would like to thank RR member ve5wil for bringing this important information to our attention
and for providing his Unitrunker 2 logging file data.

Cheers to Wil and keep up the good work!
 
Joined
Feb 3, 2015
Messages
412
Reaction score
217
Hi, all

I have managed to sort through some tower site data found in my logs.
By simply comparing old tower site data with new tower site data I have found the following:

The new system 00C site 43=(2B) Montmartre has replaced system 00A site 69=(45) previously at that location.
The new system 00C site 47=(2F) Milestone has replaced system 00A site 54=(36) previously at that location.
The new system 00C site 49=(31) location is unknown, but it is a neighbor to the Regina, McLean and Fort Qu'Appelle sites.
The new System 00C site 101=(257) location is unknown, but it is a neighbor to the Regina and Pilot Butte sites.

-Neighbors to site 05 Regina in 2015 compared to 2025.
#Format: Tower ID, Tower ID Hex, System ID, Channel, Frequency, Tower Name
1717,"T1111",00a,"01-0187",0.00000,"Regina 800 MHz"
101,"T0101",00c,"00-0066",138.33000,"New Unknown site"<----------See!
5252,"T3434",00a,"00-0150",138.75000,"McLean"
5555,"T3737",00a,"00-0120",138.60000,"Craven"
5858,"T3A3A",00a,"00-0216",139.08000,"Piapot FNR"
4343,"T2B2B",00c,"00-0216",139.08000,"New Montmartre is also neighbor to McLean site"<----------See!
6666,"T4242",00a,"00-0225",139.12500,"Francis"
4747,"T2F2F",00c,"00-0261",139.30500,"New Milestone site"<----------See!
4949,"T3131",00c,"00-0105",138.52500,"New Unknown site is also neighbor to McLean and Fort Qu'Appelle"<----------See!
5050,"T3232",00c,"00-0198",138.99000,"New Pilot Butte site"<---------See!
181181,"TB5B5",00a,"00-0042",138.21000,"Pasqua"
183183,"TB7B7",00a,"00-0180",138.90000,"Avonlea"

-Neighbors to site 50 New Pilot Butte and old Pilot Butte compared 2015 to 2025.
#Format: Tower ID, Tower ID Hex, System ID, Channel, Frequency, Tower Name
505,"T0505",00a,"00-0249",139.24500,"Regina"
1717,"T1111",00a,"01-0187",0.00000,"Regina 800 MHz"
101,"T0101",00c,"00-0066",138.33000,"New unknown site"<--------See!
5252,"T3434",00a,"00-0129",138.64500,"McLean"
5454,"T3636",00a,"00-0261",139.30500,"Old Milestone is gone"<---------See!
5555,"T3737",00a,"00-0120",138.60000,"Craven"
5858,"T3A3A",00a,"00-0216",139.08000,"Piapot FNR #75"
4343,"T2B2B",00c,"00-0216",139.08000,"New Montmartre is also neighbor to Regina and McLean in 2025"<--------See!
4747,"T2F2F",00c,"00-0261",139.30500,"New Milestone"<----------See!
6868,"T4444",00a,"00-0198",138.99000,"Stoughton"
6969,"T4545",00a,"00-0108",138.54000,"Old Montmartre is gone"<----------See!
7070,"T4646",00a,"00-0189",138.94500,"Qu'Appelle"
7171,"T4747",00a,"00-0261",139.30500,"Fort Qu'Appelle"

-Neighbor to site 52 Mclean in 2025.
4343,"T2B2B",00c,"00-0216",139.08000,"New Montmartre is also neighbor to Regina"<----------See!

-Neighbors to site 70 Qu'Appelle in 2015 compared to 2025.
#Format: Tower ID, Tower ID Hex, System ID, Channel, Frequency, Tower Name
202,"T0202",00c,"00-0255",139.27500,"Sintaluta)"
5252,"T3434",00a,"00-0150",138.75000,"McLean"
5050,"T3232",00c,"00-0198",138.99000,"New Pilot Butte"<-------------See!
5353,"T3535",00a,"00-0174",138.87000,"Old Pilot Butte is gone to Moose Jaw.<-------------See!
5454,"T3636",00a,"00-0261",139.30500,"Milestone is gone"<------------See!
5858,"T3A3A",00a,"00-0216",139.08000,"Piapot FNR #75"
4343,"T2B2B",00c,"00-0216",139.08000,"New Montmartre is also neighbor to Regina and McLean in 2025.<----------See!
6666,"T4242",00a,"00-0225",139.12500,"Francis"
6969,"T4545",00a,"00-0216",139.08000,"Montmartre is Gone"
7171,"T4747",00a,"00-0261",139.30500,"Fort Qu'Appelle"
7272,"T4848",00a,"00-0234",139.17000,"Balcarres"
7373,"T4949",00a,"00-0156",138.78000,"Indian Head"

-Neighbors to site 71 in 2015 compared to 2025.
#Format: Tower ID, Tower ID Hex, System ID, Channel, Frequency, Tower Name
909,"T0909",00a,"00-0117",138.58500,"Goodeve"
1010,"T0A0A",00a,"00-0120",138.60000,"Ituna"
5252,"T3434",00a,"00-0129",138.64500,"McLean"
5353,"T3535",00a,"00-0174",138.87000,"Pilot Butte is gone to Moose Jaw. <------------See!
5858,"T3A3A",00a,"00-0108",138.54000,"Piapot FNR #75"
5959,"T3B3B",00a,"00-0123",138.61500,"Southey"
6161,"T3D3D",00a,"00-0132",138.66000,"Lestock"
4949,"T3131",00c,"00-0105",138.52500,"New Unknown site is also Neighbor to site 52 McLean in 2025<----------See!
7070,"T4646",00a,"00-0165",138.82500,"Qu'Appelle"
7272,"T4848",00a,"00-0177",138.88500,"Balcarres"
7373,"T4949",00a,"00-0111",138.55500,"Indian Head"

-New Neighbor to site 52 Mclean in 2025.
4343,"T2B2B",00c,"00-0216",139.08000,"New Montmartre is also neighbor to Regina"<----------See!

-New Neighbor to Moose Jaw site in 2025.
Adjacent Site Status Broadcast WACN 0000A Sys 00C Sub 2A Site 42=(2A)"new unknown site" TX 0-0A5(138.82500) RX 0-294(141.30000)

With some luck I should be able to locate system 00C sites 49 and 101.

Cheers.
 
Joined
Feb 3, 2015
Messages
412
Reaction score
217
Hi, all

I guess that I should have looked more closely at the RR data base.

The new neighbor to the Moose Jaw site is located at Chamberlain.
Adjacent Site Status Broadcast WACN 0000A Sys 00C Sub 2A Site 42=(2A)"Chamberlain" TX 0-0A5(138.82500) RX 0-294(141.30000)

I found these in a logging file that was provided to me by another RR member, two years ago and both are not found in the RR data base.

The 00C site 30=(Hex 1E) is a peer site to the 00A sites at Langham, Sunset Estates and Saskatoon, so locating this site should be easy.
The 00C site 23=(Hex 17) is a peer site to the 00A site at Blackstrap.

Checking the peers/neighbors will show the control channel for these two sites and then we will know the voice channels used.

Cheers.
 
Joined
Feb 3, 2015
Messages
412
Reaction score
217
Hi, all

The atmospheric conditions are close to ideal for decoding data from more distant radio sites.
Site 61 Lestock is almost 50 miles from me and is booming in at a decode rate of 70%. Pro96com never shows a decode rate of greater
Than 75% even when parked right next to a radio site. The Nokomis 00C site 04 is a neighbor to this site.
00C4 (4)004 (4)NokomisMount Hope138.090c138.450c138.555c138.780c



Lestock site 61 decode .png
Cheers.
 
Joined
Feb 3, 2015
Messages
412
Reaction score
217
CBSA Enforcement and Intelligence Team Talk-group ID 6134

2262771 CBSA-IEB Specialized tactical surveillance unit.
2264618 CBSA-IEB
2264562 CBSA-IEB Team Leader.
2264565 CBSA-IEB
2264583 CBSA-IEB
2264707 CBSA-IEB


 
Joined
Feb 3, 2015
Messages
412
Reaction score
217
Hi, all

Today was the first time seeing a Saskatchewan Marshals Service SMS unit on both site 71 and 72.
Unit appeared to be traveling east bound with RCMP traffic services units.

Cheers
SMS unit login site 71.pngSMS unit login site 72.pngSMS unit on site 71.pngSMS unit on site 72.png
 
Last edited by a moderator:

mciupa

Canadian DB Admin
Moderator
Joined
Nov 5, 2002
Messages
8,850
Reaction score
2,264
Location
I'm here a lot
We have been provided a list of unidentified locations for the 00C tower locations. We are no longer permitted to assign unknown locations to the database, however a RM or "county" location is acceptable. If you are within range of monitoring of any of these and can identify with a name preferably, but RM at least it would be appreciated and we can add them to the database.

I have added the list to the PPSTN Wiki
 
Top