Category: 9-11

Introduction

The purpose of this article is to summarize Exercise Vigilant Guardian for the period September 3 through September 11, 2001, as captured on audio files at the Northeast Air Defense Sector (NEADS).  I have told the story of each day, separately, in a series of previous articles. That compilation allows us to make observations about the NEADS state of preparedness for the terrorist attack on the morning of September 11, 2001 (9-11)

NEADS–as does every military unit–trained as it expected to fight.  Exercise Vigilant Guardian 01 was one in a series of annual exercises that prepared NEADS for present and future operations.  NORAD officials described the exercise to the 9-11 Commission Staff as a preparation for war exercise

NEADS protected the East coast of the United States from attack.  Its focus was outward, as NORAD officials testified to the Commission.  The line of defense was the ADIZ, Air Defense Identification Zone.  NEADS activities during Exercise Vigilant Guardian were largely predicated on the ADIZ and the relationship of potential targets to it.

NEADS partner

NEADS activity, both real world and exercise, was routinely coordinated with its primary partner, the Federal Aviation Administration (FAA).  As revealed in Exercise Vigilant Guardian, however, that partnership was strictly with the FAA’s ARTCCs (Air Route Traffic Control Centers), specifically Boston, Washington, and New York Centers.

NEADS also routinely dealt with AMIS (Air Management Information System) at New York Center.  That AMIS-centric relationship was quickly and efficiently extended to Miami AMIS when NEADS expanded to cover for SEADS during Exercise Vigilant Guardian.

The Threat

The threat was any unknown or potential enemy track that penetrated the ADIZ.  Tracks over land, unless they were tagged as a special, were routinely dropped from the scopes of the surveillance trackers because they had no interest in them.

Any commercial flight that originated in the continental United States and was squawking was friendly, by definition.  Any Russian, Cuban, or Chinese commercial or military flight, real world or exercise, was immediately labeled a special track.

NEADS keep close track of DVFR (Defense Visual Flight Rules) flights (see AMIS link, above) and any such track was always reported to NEADS by the FAA Centers.

Such flights—cable checkers, fish spotters, hurricane hunters—typically exited the ADIZ for an extended period of time, often on the order of 10-12 hours.  The flights became problematic on their return if they did not check in with air traffic control or had forgotten to turn on their transponders.  DVFR flights were always of interest to NEADS, both exercise and real world.

Real World vs. Exercise

NEADS habitually distinguished exercise from real world activity, according to the audio files from the various positions on the SOCC (Sector Operations Control Center) floor.  NEADS was capable of operating in separate mode or “mixed mode” for scope display of tracks of interest.  According to the audio files, NEADS operated in mixed mode at least once during the period Sep 3-10, 2001.

On that occasion, NEADS was required to expand operations to cover for the Southeast Air Defense Sector (SEADS), for the exercise.  NEADS elected to make the expansion real world as well and went into mixed mode to do that.  NEADS had little difficulty keeping exercise and real world activity separate throughout the exercise, regardless of the mode of operation.

Essential Points

1.  NEADS was not encumbered by Exercise Vigilant Guardian, in fact just the opposite. A weapons director setting up her position summed it up best in an observation made when she became the Weapons Director for the Midwest mid-morning on 9-11.  She said, “Could you imagine what it would be like on a normal weapons day.”  She then elaborated that at least we have twelve-hour manning here and we are set up to press with twelve hours.  She also set up a scope for someone and turned the sim switches off and exercise bases off, a clear indication of NEADS distinction between exercise and real world.  09111134326 Captain Shelley Comment

Vigilant Guardian was a gradually escalating sequence of discrete events.  The last event before the attack ended at 0430 in the morning.  Thereafter, the SOCC floor was quiet with no exercise activity and little real world activity.  The crew changed, the Battle Cab formed up, and everyone was in place for the morning’s exercise event.  It never came.

Instead, Sergeant Jeremy Powell took a real world hijack call from Boston Center shortly before 0838 local time.  NEADS immediately sprang into action, soon became fully operational, and was able to quickly expand operations as needed without having to recall anyone.

2.  NEADS established and exercised habitual relationships with the FAA’s Air Route Traffic Control Centers. In an earlier article I described the only way NEADS could have tracked and possibly intercepted any of the four hijacked aircraft, given the lack of timely notification on AA 11 and AA 77 and no notification for UA 175 and UA 93.  That required Colonel Robert Marr, the protector of the National Airspace System in the Northeast, to be in close and continuous contact with the operator of the NAS, Benedict Sliney, at the FAA’s Air Traffic Control System Command Center (ATCSCC/Herndon Center).

That never happened that morning, The relationship was not tested, even notionally, during Exercise Vigilant Guardian.  Neither key individual knew of the others existence.

It is clear from the audio files that NEADS habitually worked directly with the individual ARTCCs.  Even when NEADS expanded to cover for SEADS and then WADS they immediately established contact with the ARTCCs in those areas.

That working relationship with the very same ARTCCs that reported to Herndon Center was particularly close with Boston Center, to the point that Exercise Vigilant Guardian controllers used the persona of a military specialist (Colin Scoggins) to place exercise calls to the NEADS SOCC.

In my work on Chaos Theory and 9-11 I refer to the relationship between NEADS and Boston Center as “strange attractors,” in the language of that theory.  They were not strangers to each other. What was “strange” was that relationship was not recognized until after the fact.

3.  NEADS exercised no relevant hijacking or terrorist scenarios, at least up to the morning of 9-11. There was a hijacking of a Cubana flight by persons seeking political asylum and asking to go to JFK airport.  That event was resolved by SEADS before the flight could be “handed off” to NEADS.

There was a terrorist threat to blow up an airplane over New York City, but it was not a hijacking.  The pilot was not aware that he had terrorists on board.  NEADS  was supposed to deny an FAA request to divert the aircraft to Bangor AFB.  The SOCC did not push back and the plane “exploded” after landing.

4.  NEADS did exercise rules of engagement. A rogue F-18 pilot had “shot” his wingman and was harassing civilian air traffic.  Shoot down authority was transmitted to the cockpit but was immediately withdrawn when the pilot “reported” that he was over a populated area.

5.  NEADS knew how to intercept targets, if established. Routinely, both exercise and real world, NEADS demonstrated that it had tactics, techniques and procedures in place to intercept targets.  The predicate always, however, was that they had a defined target to which the scrambled aircraft could be “paired” (linked).

The procedure was straight forward.  The Identification or Surveillance Technicians would identify a target either by observing it on a scope or via an alert from an outside agency, typically an FAA Center.  Once a numbered track was established the Identification Technicians had either two or five minutes, depending on the target and its location to determine it to be friendly or unknown.  If unknown after the set time expired then the MCC would order the Senior Director to scramble air defense fighters from Langley or Otis for real world and, typically from either Burlington or Atlantic City for exercise.  Once airborne, the fighters were controlled by a Weapons Director under the supervision of the Senior Director and vectored to intercept the target with specific instructions on how to proceed.  The process worked time after time after time, given the predicate, a defined target.

During the actual battle of 9-11 there was just one target established and tracked, B089 for Delta 1989, but it was not exploited.  There were no fighters immediately available.  There was one additional target established but not tracked, B032 for AA 77.  The Langley fighters were paired to it, but it faded before it could be exploited or forward told to CONR and NORAD.

There was no target established for either UA 175 or UA 93.  In lieu of a target  for AA 11 NEADS established a “Z” point based on the coordinates passed by ZBW to Major Deskins at 8:40 and the Surveillance Technicians “hit up” targets in a 25 mile radius.  That proved futile as AA 11 was to the south descending over Manhattan and into the north face of the World Trade Center North Tower.  There was no predicate,  Mohammed Atta turned off the best source of information, the transponder.

Background

In a series of previous articles we have listened to the voices of NEADS as they worked their way through Exercise Vigilant Guardian, day by day.  Here is a brief recap to set the stage.

Initially, NEADS responded to one major scenario on each exercise day.  On Sep 6, the scenario concerned a military C-130 that was behaving strangely.  On Sep 7, the scenario was a defecting Aeroflot plane.  On Sep 8, NEADS exercised counter narcotics procedures dealing with a split track out of Bermuda headed for Philadelphia.

On Sep 9, CONR raised the force protection condition to “Bravo.”  NEADS then dealt with a terrorist rogue aircraft that was a threat to the tankers at Bangor, Maine, the preferred FAA divert landing site.  NEADS did not push back and the plane exploded on the runway at Bangor.

On Sep 10, activity picked up.  NEADS was required to expand and cover for SEADS, both exercise and real world.  They then had to deal with simultaneous events.  One was a hijacked Cubana flight with persons on board seeking political asylum.  NEADS had to prepare for a handoff from SEADS, which did not occur.  In their own AOR they had to deal with a rogue F-18 pilot who shot his wing man and threatened air traffic.  NEADS exercised shoot down authority including what to do if the target was over a populated area.  The event ended uneventfully as the F-18 landed at BWI.

Exercise Day 9-11, Overview

Contrary to the impression of some researchers, NEADS was not engaged in Exercise Vigilant Guardian in the hours immediately prior to the terrorist attacks.  The exercise was a series of discrete events, not a continuum. There was one early morning requirement to expand and cover for WADS handing over responsibility for the entire East coast to SEADS.  NEADS resumed air sovereignty over the Northeast at 0832Z (0432 LOCAL)

There was no exercise activity and very limited real world activity after the resumption of air sovereignty until Boston Center called with news of a real world hijack.  Thereafter, there was still no exercise activity on the NEADS sector floor.  There were occasional anecdotal remarks about exercise and real world, and a clearance of exercise tracks from scopes, but no events, scenarios or injects. At 1403Z (1003 local) NORAD convened a conference call to terminate all exercise inputs.

The primary source evidence is conclusive that Exercise Vigilant Guardian at NEADS effectively ended at 0430 local time on 9-11 and was officially terminated at 1003 local time.  The Exercise was not a detracting variable that morning, in fact just the opposite.  The Battle Cab was manned in preparation for the days events and sufficient backup personnel were available in the break area to immediately expand operations on the sector floor.

But we are getting ahead of the story.  We begin the day’s activity with a double expansion.

Expansion

Previously, NEADS had expanded to cover for SEADS.  In today’s event NEADS expanded to cover for WADS.  It was a double expansion, however.  First, SEADS had to expand to cover for NEADS, then NEADS expanded to cover for WADS.  Both expansions were like the earlier expansion, exercise and real world.

The first notification concerning an expansion was a heads up from WADS that they had received a bomb threat.  0911042819 Heads up SEADS bomb threat The ID sections at both WADS and NEADS compared notes in anticipation and then the actual requirement was passed by WADS.  0911043332 Expansion required

The MCC then announced that it would be a dual expansion.  Even though he stated the expansion was for the exercise, real world responsibilities were also part of the dual expansion.  0911043403 MCC for the exercise The time was 0455Z (0055 local), shortly after midnight on 9-11.

The SEADS expansion went quickly with the net result that SEADS was guarding the entire East coast and WADS the West.  NEADS was off line until its expansion to the West was complete.  The MCC announced that SEADS had air sovereignty effective 0511z (0111 local).  0911045113 SEADS has air sovereignty The nation’s air defense was provided by SEADS and WADS.

It took longer for  NEADS to expand as they worked to bring the WADS radios on line and to resolve feeds from the aerostat radars on the Southern border.  It was a multi-step process. First, NEADS Maintenance had to assure that the AST had a clear air picture of WADS.  Then the transfer of radars began.  The first radar was transfered at 0520 (0120 local).  0911045724 Expansion started NEADS provided its status to WADS about nine minutes later, referencing the radios problem.  0911050849 Almost complete problem with radios

NEADS and WADS, together worked a potential target, a probable boat or beacon.  WADS advised that if NEADS could not solve the radio problem WADS would have to take the area back, immediately.  0911051346 NEADS WADS conversation

Ultimately, it turned out to be a simple problem, a contractor did not hit the reset button.  It is not stated whether that was intentional or part of the exercise.  0911052909 Just a button The MCC declared air sovereignty at 0546Z (0146 local).  The nation’s air defense was now provided by SEADS and NEADS.

The SEADS expansion took 16 minutes, the NEADS expansion took 26 minutes.  Once the two expansions were completed we no longer hear conversations, real world or notional, with Boston, New York, and Washington Centers.  What we do hear is NEADS with West coast responsibilities.

NEADS as WADS (Western Air Defense Sector)

The early morning of 9-11 was apparently C-130 day in CONR, for the exercise.  In the hand off to SEADS, NEADS had alerted them to an exercise track, a C-130 headed for Mildenhal.  In turn, they picked up a C-130 exercise track of their own, as WADS.

The NEADS procedures were similar in all respects to  previous notional scrambles during the exercise.  NEADS debated whether to scramble Portland or Fresno, the C-130, Coast Guard 1750, was out of Sacremento and was not  returning to base, as planned.  It was not responding to calls on normal Coast Guard frequency or on the guard frequency.  NEADS vectored the fighters to identify the target by type. The controller to fighter exchanges were typical of all NEADS-directed scrambles.  Here is a audio file with the resolution of the C-130 scenario.  “Railbird” was the exercise call sign for WADS.  Jonah was the call sign for the air defense fighters.  0911070349 Coast Guard C130 resolution

More importantly, that was the last exercise Vigilant Guardian 01 air defense event in which NEADS participated.  The time was 0726Z, 0326 local.  NEADS continued as WADS for most of an hour until a de-expansion which restored the normal CONUS air defense responsibilities.

Identification Technicians’ experience

The NEADS mode of operation, routinely verifying tracks approaching the ADIZ, caught at least two FAA Centers by surprise.  In this next clip we hear the FAA Los Angeles Center contact, real world, state that he has had more calls tonight than he had in the past four years.  0911062335 Los Angeles Center comment That conversation continued about an hour later.  0911072707 Los Angeles continued

Between those two calls there was a similar exchange with Oakland Center.  0911064644 Oakland Center

This call and the two Los Angeles center calls were not indicative of a NEADS problem on the East Coast.  The East Coast FAA centers, specifically New York, Boston and Washington, were used to NEADS calling to routinely check everyone.  The East Coast experience was that DVFR (Defense Visual Flight Rules) flights were always problematic.  Moreover, the East Coast experience, including SEADS, was that the proximity of Cuba to the ADIZ was always a concern.

Return to normal

The remaining exercise task was to restore normal operations.  That required NEADS to return air sovereignty to WADS and then gain air sovereignty back from SEADS.  Here, briefly, is how and when that happened.

First, WADS returned to its building and became mission capable.  That began the NEADS de-expansion, as announced by the MCC at 0802Z (0402 local).  0911074145 WADS mission capable prepare to deexpand

Fourteen minutes later WADS declared air sovereignty. 0911075739 WADS air sovereignty That left NEADS with no CONUS air defense responsibility, exercise or real world, until they could reclaim air sovereignty.  That declaration was made by the MCC at 0832Z (0432 local). 0911081143 NEADS air sovereignty Both de-expansions took about 15 minutes.  During that second 15 minutes NEADS had no air defense responsibilities, exercise or real world.

The Day Shift On Board

Things remained quiet on the NEADS sector floor thereafter until Boston Center called at 1238Z with news of a real world hijack.  NEADS was poised in anticipation of an exercise event that never came.  They quickly transitioned to the real world event as reported by the Commission and by Michael Bronner in Vanity Fair.

Following are some clips of interest to round out the story.  We start with voices and names familiar to researchers and historians conversant with the NEADS tapes.

First, even though the night shift was still on duty, we learn that Lt Col Ian Sanderson, the SOCC Director, was already in, as was, then, Major Deskins.  The time was 1100Z (0700 local)  0911103939 Sanderson Deskins This is the only time of which I am aware that we hear Sanderson’s voice.

By 0730, local, the day shift ID technicians had assumed duty.  Their pattern of work is evident in this next clip, a pattern that Los Angeles and Oakland Centers found remarkable several hours earlier.  The time was 0738, local, and NEADS was routinely dealing with unknown tracks.  The call was to “New York AMIS,” the same desk the ID Technicians would call a little over an hour later in the hunt for AA 11.

That link, not a link to the military specialist, was the established New York Center connection, primarily to deal with unknowns approaching or entering the ADIZ.  The connection to Boston Center was to the military desk.  Boston Center did not have the same over water responsibilities as did New York Center.  0911111753 ID Technician

Major Fox was on duty.  Recall that he had assigned himself to be the Senior Director.  He directed an “unknown rider” call on the potential target the ID Technician was working and also learned it was bad data.  He then announced that he had just come on duty.  0911111815 Major Fox

Major Nasypany, the MCC, was also on duty.  He called the night shift Director of Operations for the exercise to ask if he wanted a real world briefing; he did not.  0911111815 Major Nasypany

Have a nice/good day

Major Nasypany’s closing remark, “have a good day,” was not the first instance of such a comment.  The “good day”  tone was set at the moment NEADS assumed air sovereignty back from SEADS as each AST section said to the other, at 0432 in the morning, “have a nice day.”  0911081203 Have a nice day

About one hour and 15 minutes later Mohammed Atta and an accomplice passed through security at Portland, ME, and entered the National Airspace System (NAS) at 0545.  The attack had begun.

As Major Nasypany voiced his “have a good day” salutation two hours later, hijackers had boarded UA 175, were boarding AA 11 and UA 93, and were about to board AA 77.  It was not going to be either a good or nice day.

Introduction

In previous articles in this series we have listened to NEADS respond to one major scenario on each exercise day.  On Sep 6, the scenario concerned a military C-130 that was behaving strangely.  On Sep 7, the scenario was a defecting Aeroflot plane.  On Sep 8, NEADS exercised counter narcotics procedures dealing with a split track out of Bermuda headed for Philadelphia.

On Sep 9, CONR raised the force protection condition to “Bravo.”  NEADS then dealt with a terrorist rogue aircraft that was a threat to the tankers at Bangor, Maine, the preferred FAA divert landing site.  NEADS did not push back and the plane exploded on the runway at Bangor.

This article covers exercise activity on Sep 10, 2001.

Early Morning Activity

In a previous article I described early morning notional training at the Identification Technician (ID) position involving that position, a mentor/trainer, the MCC, and the simulation cell.  That training scenario involved a scramble on an unknown and then a divert to close with a deviating Cubana B747 that was NORDO.  The pilots confirmed the situation and the plane “landed” at Richmond, “away from the NCA.”

Later, about 1130Z (0730 local) the MCC left a voice mail morning brief for the command ground.  The report was short, “nothing significant.”  0910111643 Morning Brief

Exercise Pace Picks Up

Shortly thereafter the sector floor had to deal with an exercise unknown that could not be identified by the ID Technician. That scenario played out over 75 minutes.

The pace of play increased substantially and we have extensive audio available from the WD (Weapons Director/Controller) position and the Surveillance Technicians (trackers).  Here is the ID Technicians announcement of the unknown track.  0910111739 Track B054

Next we hear several exchanges between the MCC and the Weapons Director.  They decided to scramble Atlantic City and to make an “unknown rider” call on the guard frequency (in this case sim guard).  An unknown rider call is a procedure used to attempt contact with an unknown at a specific location.  In this audio file we hear a voice known to readers familiar with the audio files from 9-11.  Major Fox was the Weapons Director on the morning of Sep 10.  Given his role on 9-11 as the Senior Director and given his extensive exercise play the day before I will tell the rest of this scenario primarily in his voice.  0910111815 Scramble Atlantic City

We also learn in that clip that the NEADS call sign during exercise Vigilant Guardian was “Absence.”  Major Fox corrected himself immediately when he started to use “Huntress.”

In this next clip we hear language that would be replicated by Major Fox the next day.  He asked the MCC to state mission; it was ID by type and tail.  We also hear the phrase “Jersey Scramble.”  As Commission Staff learned, that was the standard scramble flight plan for Atlantic City, 090 for 90 (east heading for 90 nautical miles).  That standard plan was replicated with a slight variation at Langley for the real world alert fighters, 090 for 60.  And that was the exact flight plan entered into the FAA system on 9-11 by Andrews Tower to get the Langley fighters rapidly airborne to altitude over water.  This clip provides historians and researchers insight into the tactics, techniques and procedures in place at NEADS and exercised just one day prior to 9-11. 0910112023 ID by Type and Tail

The MCC canceled Atlantic City before the fighters were, notionally, airborne and scrambled Burlington instead. 0910112313 Scramble Burlington

Then Major Fox directed that the fighters come out at a higher altitude since they had so far to go.  He explained that they would put the fighters at “max subsonic” when they were airborne.  This audio is clear evidence of the standard air defense speed, a speed exercised on 9-10 and specified for the real world alert fighters on 9-11.  0910112553 Max Subsonic

During this scenario the trackers established a loop, a comms path, and their voices are heard on multiple channels.”Weapons” tasked them to hit up all tracks between Burlington and the unknown.  0910113320 Trackers at Work

NEADS then decided to place a second set of Burlington fighters on immediate.  The sim cell handled the request and said the pilots were in the building and the planes were cocked and ready to go.  As part of that procedure Major Fox took the time to provide a brief tutorial on telephone procedures at the SD and WD positions.  0910113503 Fox Tutorial

The Burlington “fighters,” Sunup 32 and 33, established contact with the Weapons Director, Major Fox.  He provided them specific instructions concerning mission and weapons status, and provided a BRA (bearing, range and altitude) to the target.  0910113925 Fox Directs Fighters

A few minutes later the flight lead reported that Sunup 33 was having compressor problems and that he was trying to restart.  0910114810 Fighter Problems

NEADS put the backup fighters at Burlington on Battle Stations. The situation with Sunup 33 was not resolved and the first pair of fighters was given a vector for Pease; the second set of fighters was scrambled.  0910114828 Sramble Sunup 34 and 35

While that situation was developing FAA’s Boston Center, Colin Scoggins simulated, reported that the Weather Service called and said they had lost a weather balloon somewhere near Brunswick.  0910114915 Scoggins Reports Balloon

Concurrently, NEADS was deciding whether to continue with a single fighter from the first scramble or with the second scramble, flight of two.  The Director of Operations opted for the latter.  On this next clip we hear those exchanges mixed with word from the MCC about the Scoggins report.  0910114928 DO Wants Them Together

Meanwhile, the Scoggins call continued and NEADS learned that Boston Center was not requesting military assistance.  0910115012 Scoggins Miltary Assistance Not Needed

NEADS was also dealing with the Burlington Command Post. That clip is important because in the background we hear the technicians discuss how log entries are made and gain some sense of the timeliness and accuracy of those entries.  0910115148 Log Entires Discussed

Weather was played real world for the exercise as we hear in this next clip.  0910115504 Weather is Real World

That caused a problem for the MCC since the unknown was a “little fast” for the winds aloft.  Even though the target was a suspected weather balloon the MCC determined that they would still have to “vis ID” it.  0910115742 Still Have to ID

NEADS apparently used this scenario to exercise regeneration of forces, the ability to maintain sustained operations.  Keeping in mind that Exercise Vigilant Guardian was, in part, preparation for war, regeneration capability was vital.  In this next clip we hear the MCC tasking Burlington Command Post (notional) to be prepared to launch a third and fourth set of fighters.  0910115900 Regeneration of Forces

On 9-11 the only east coast alert base capable of sustained air defense operations was Otis.  Otis did recall fighters on routine training to land and be armed to replace the Panta flight over New York City.  Langley had just four aircraft and three pilots available.  All three participated in the original scramble.  Langley was augmented by Andrews, ultimately.

The Burlington flight in distress did land at Pease AFB.  Thereafter, we hear Major Fox as Weapons Director controlling the second pair of Burlington fighters.  Although multiple conversations are heard the primary one is Fox going down his check list.  The language is technical and brief.  He informed the MCC that the check list was complete.  Note that the speed restriction, again, was max subsonic.  Near the end of the clip the Burlington fighters reported they were at .7 Mach.  0910120040 Weapons Director Check List

The Balloon Scenario End Game

The next few clips provide a detailed view of how NEADS controlled a scramble, once airborne.  First Major Fox provided an updated BRA to the target and acted as an air traffic controller concerning other traffic in the area.  0910121503 Fox as Controller

Once the fighters reported “feet wet” (over water) Fox ordered them to “strangle” (turn off) Mode 3 alpha charlie.  He confirmed they had radar contact with the target and gave them an updated BRA.  0910121633 Strangle Mode 3 He then confirmed that he and the fighters were tracking the same target.  0910121703 Contact is your Bogie

The fighters provided updates as the winds caused some concern at NEADS that the target was not a balloon.  Thereafter, Fox order the fighters to pursue.  0910121903 Sunup Go Pursuit

The final tactic used was to order the fighters to split, if necessary, to ID the target.  One fighter was to go no lower than 15,000 feet to maintain communications.  0910122137 Cleared to Split

The target was identified as a weather balloon and the fighters were ordered to return to base.  Major Fox immediately ordered the fighters to recycle Mode 3 and then mused, “how do we know if a weather balloon is friendly?”  0910122443 A Friendly Weather Balloon

Another Unknown

An hour later NEADS dealt with another unknown, one within the ADIZ.  The ID Technician did not resolve the identity within two minutes and Atlantic City was scrambled, again on a “Jersey Scramble.”  Even though the ID Technician had determined that the target might be an AT&T cable checker, NEADS continued the scramble process and, as with Burlington earlier, asked that an additional pair of fighters be placed on immediate status.

The resolution process was similar in most respects to the earlier Burlington pursuit of the balloon and was resolved when the fighters were able to gain communication with the AT&T plane and determined that all was well.

Here is the NEADS telephonic Form 61 report to CONR and NORAD, concurrently.  Note that the NEADS caller refers to cable checkers as a common occurrence.  0910132555 CONR NORAD Form 61 Report

I have spoken to that type flight in previous articles.  The AT&T flight is an example of a DVFR (Defense Visual Flight Rules) flight.  Such flights were a continuing concern to NEADS, as CONR and NORAD were informed. It is not surprising that  an exercise event was devoted to such a flight.

Waiting For Next Scenario

Fighter attrition was becoming an issue, one NEADS would have to track as the pace of the exercise accelerated.  There were continuing discussions about dispatching a maintenance team to Burlington to repair the fighter diverted there.  In addition, Atlantic City reported that one of the fighters who scrambled on the cable checker suffered a wheel assembly fire on landing and would be out of commission for several days.

Periodic real world activity was also dealt with, primarily a flight by Air Force Two from Andrews AFB to Lexington Kentucky, a B757.  There are two noteworthy clips, one concerning takeoff and concerning destination.  NEADS proactively called Washington Center concerning the departure.  0910133605 Washington Center AF 2 NEADS also proactively called Indy Center military desk to check on the arrival of Air Force Two.  Note how routinely NEADS dealt with two of the FAA Centers in its area of responsibility.  0910141352 Indy Military AF Two

Langley Training Question

Captain Craig Borgstrom from the Langley air defense alert detachment called with a training question.  They wanted to engage in local training with “hot pilots, cold birds.”  Here is that request.  0910144020 Langley Borgstrom Question

NEADS approved “hot pilot cold birds” training but wanted the alert fighters to remain uploaded, given the situation [unstated, but likely the ongoing Russian exercise].  Here is the answer.  0910144401 Langley Borgstrom Answer

My recall is that the Langley pilots told Commission Staff during interview that they had been scheduled to participate in local training on 9-11, something they often did in support of the Wing at Langley.

SEADS Evacuation, NEADS Expansion

At 1517Z (1117 local) NEADS learned that SEADS was evacuating for the exercise because of a fire in the battery room and that NEADS had to expand to take over SEADS area of responsibility.  The take over was treated as a real world expansion.  Here is the audio file with the notification and NEADS actions taken.  0910145650 SEADS Evacuation

The expansion was technical and the process of exchange was captured on the NEADS tapes.  For historians, that is available on Channel 2, DRM1, clip 150436.  The expansion took 19 minutes.  Here is the MCC’s announcement of the takeover.  0910152036 NEADS Assumes Control

Transponders Off, An Effective Hijacker Tactic

Here are two audio clips of NEADS coordinating with Miami AMIS, real world, concerning potential unknown tracks.  NEADS was just assuming responsibility for SEADS, to include Miami, an FAA entity not part of the NEADS normal ID checklist.  In just under two minutes two potential unknowns were resolved, the second one in a matter of seconds.  The reason the resolution was expeditious in both cases was that NEADS and Miami AMIS were seeing the transponder code.  0910154012 NEADS call to Miami AMIS 0910151437 Miami AMIS call to NEADS

A few minutes later NEADS resolved multiple tracks with Miami AMIS in just over a minute.  0910160906 Second NEADS Call to Miami AMIS

Multiple scenarios

After the expansion NEADS personnel worked to gain situational awareness concerning the task of covering for SEADS.  They discussed what to do if a real world scramble occurred and provided an update to the Battle Cab on the status of fighters at Homestead and Tyndall.  The ID and SD positions completed detailed coordination with their counterparts at Oakgrove (SEADS).

Because the expansion was both real world and exercise NEADS went to “mixed mode,” which meant that they were looking at tracks for both on the same scopes.  That was a net advantage as it turned out.  Canada East was trying to lateral tell an exercise track without success.  However, they were able to voice tell the track and provide a “Z” point in relation to a real world track.  Both tracks were Aeroflot flights.  Concurrently, there was a report of MiG 23s (Cuban) airborne (not clear whether exercise or real world) which required NEADS to respond.

Here is how NEADS responded to multiple scenarios beginning around 1540Z (1140 local) and continuing for at least two hours.  We being with the actions to take over from SEADS.

In this first clip the scramble policy was discussed.  0910151954 SEADS what if Then the MCC provided a fighter update to the Battle Cab.  0910152158 Homestead Tyndall

After the position level coordination between the ID and SD sections,  NEADS called Canada East for clarification on a live track of interest, an Aeroflot flight headed for JFK.  Here is that exchange.  0910160001 Aeroflot Special 20

A few minutes later the Sim Cell, simulating Canada East injected a deviating special 23 track, S426.  In these next two exchanges the exercise track was clearly distinguished from a live track. The problem was that the Canada East lateral tell was not showing up at the NEADS end. 0910161418 S426 Deviating 0910161646 Conversation Continued Special 27

NEADS ID then called Canada East to clarify the real world track and the exercise track.  The deviating exercise track was not responding to communications from Canadian air traffic control.  0910161948 NEADS clarifies both tracks with Canada

The ID Technician then made sure the Surveillance Technicians were aware of the situation.  A Surveillance Technician confirmed that NEADS was working in “mixed mode” because of the SEADS expansion and that the exercise lateral tell track was not displayed. The exercise track was Gander to Havana.  0910162400 ID cues Surveillance

The clarification between the two tracks was further extended to the Surveillance “loop.”  In a loop multiple trackers are controlled by a single entity.  In this next clip the AST position said “go 12,” acknowledging the tracker at scope 12.  Researchers  familiar with the NEADS tapes for the day of 9-11 will immediately recognize the lingo.  0910162805 Surveillance perspective

The next clip contains separate concurrent conversations, one by the MCC the other by AST.  AST provided guidance to his tracker since he had an extended area to cover.  In that conversation we learn that tracks over land were not of interest, but all tracks over water were, to include tracks over land that went “feet wet.”

(In my work on the Brothers to the Rescue project I learned that NORAD policy was that any mode 3 track that originated in CONUS was friendly by definition.  The surveillance conversation is a manifestation of that policy.)

The MCC, primarily in background, order a scramble from New Orleans on an unknown which was quickly determined to be a flight of F-15s (the Mice) returning.  That conversation was exercise related.  SEADS had no air defense alert fighters at New Orleans.

Here are both overlapping conversations.   0910163513 MCC and AST concurrent conversations

The MCC briefed the Battle Cab in detail suggesting a scramble from either Burlington or Atlantic City.  The Battle Cab was told where the deviating aircraft was, a “Zulu Point,” and was advised that the Canada East lateral tell was not coming through.  0910163820 Battle Cab briefed

Thereafter, the MCC called Canada East and arranged a work around, Canada East surveillance technicians would “voice tell” the track to their NEADS counterparts.  0910164050 Canada East Voice Tell

Separately, the Canada East SD/T called the NEADS MCC/T and passed specific information concerning the deviating flight, to include its projected path.  In the audio clip note the clear distinction between Mode 3 (transponder code) and Mode C (altitude) information passed by Canada East.  0910164153 Mode 3 Mode C

Immediately thereafter NEADS had to handle two exercise situations simultaneously, one in their sector, and one in the SEADS sector.  The NEADS sector issue involved the deviating flight, the SEADS sector issue involved a reaction to two Mig 23’s airborne from Cuba.

This next clip is an example of the ability of the MCC to “plug in” and listen to any position on the NEADS floor.  The overlapping conversations involved the SD and the MCC, concurrently.  The NEADS MCC consulted with the Battle Cab and the decision was to divert the Mice flight to a Zulu point south of Key West and to scramble Burlington on the deviating flight being handed off by Canada East.  0910164259 Two concurrent requirements

The concurrent work by the SD and the MCC, together and separately, continued.  In this next clip we learn that the Battle Cab directed that two additional Burlington fighters be brought up on immediate status.  Additional details about the deviating aircraft were provided including its route, Gander to Havana.  0910165124 Gander to Havana

Concurrently, S426, was voice told and NEADS assumed responsibility.  Here is the surveillance tracker exchange that made the transfer. 0910165122 S426 Voice Told Here is the formal announcement to the NEADS floor by the ID section.  0910165140 ID Announcement

NEADS was having difficulty with sim tracks double registering in the system.  That was a known problem that day.  In this clip Sergeant Powell asked the AST specifically about the number of tracks he was seeing, especially live tracks.  The AST spoke to the double register problem which did not concern Powell.  He challenged the number of real tracks and was told what he was seeing crossing Canada was normal.  Here is that exchange.  0910165455 Density of real tracks

Shortly thereafter, real world, NEADS was informed of the departure of Air Force One for Florida.  Here is that notification from FAA’s Washington Center (ZDC).  This clip demonstrates that there was a working relationship between NEADS and ZDC.  0910165524 President departs for Florida Here is an immediate Air Force One update from Calvert Sector to NEADS.  0910165815 AF1 Update Calvert Sector The ID technician passed the tracking data to Surveillance who immediately acquired the track.  0910165917 AF1 passed to surveillance

NEADS continued to work the two issues vectoring the Burlington fighters to do a covert intercept of the deviating Aeroflot flight and establishing coverage in the SEADS area.  Concerning the latter, there was one tracker exchange which provides additional evidence that NEADS was focused on over water and considered tracks over land, unless they had been designated special, to be friendly.  Here is that exchange.  0910170858 Over land not a Special

Over an hour after the deviating Russian flight was declared a Special 27 NEADS was granted intercept authority, to go in using hand signals to try and determine the intentions of the pilot.  Here is the audio file for those instructions.  0910172008 Intercept Authority Concurrently, an ID Technician asked Boston Center (simulated) what kind of military assistance they wanted.  The sim cell was evasive and left NEADS to their own devices.  0910172008 Military Assistance Requested The ID Technician then shortly called the sim cell again to confirm that the flight was, in fact, civilian.  0910172116 Confirmed Civilian

Thereafter the scenario in the SEADS area was resolved leaving the NEADS staff free to deal with the deviating Russian flight.  0910172246 RTB

The Russian flight was not cooperating.  NEADS grappled with what to do and where to divert, if necessary.  0910172426 Concord’s Close The Russian pilots simply waved, passengers took pictures of the fighters and communications could not be established. 0910172609 Taking Pictures

NEADS was running out of options.  The next tactic mentioned was “wing rock, follow me.”  There was still no radio contact with the flight even though one of the fighters (notional) was just outside his window. 0910172850 Wing rock follow me The pilots were alerted and told to maintain tactical position and stand by for “the words,” meaning a specific authority or direction to do something.  0910172924 Stand by for the words

The instructions were modified a bit and the fighters were directed to divert the flight out to sea, if able, working through [FAA] Center. 0910172941 Divert out to sea

NEADS continued to also work with Boston Center and learned they were still not talking to the flight.  0910173130 Check with Boston Center

NEADS insisted the fighters confirm that they had used both “loss of coms” and “loss of nav” hand signals and directed them to continue to divert the aircraft away from land.  It was heading for Boston.  0910173219 Heading toward Boston Specific instructions were then passed to the Surveillance section to report any change in altitude.  0910173412 Report any change in altitude

The Russian flight continued on a steady course for Boston at altitude.  The NEADS floor reaction, humorous at times, continued to push the air defense fighters for information and confirmation that they had followed procedures.  NEADS then decided on a divert base, if possible; Westover. 0910173430 Divert is Westover

NEADS real world responsibilities continued and they received a call from FAA’s Jacksonville Center that Air Force One was it its air space.  0910173442 AF1 in Jacksonville Center airspace

Meanwhile, at some point, NEADS determined the deviating aircraft would continue south and they considered possible divert bases and also what to do with the Burlington fighters.  There apparently was no tanker support and NEADS asked the fighters if they could make it to Langley.  In this next clip Major Fox’s voice is again heard as the Weapons Director.  0910174538 Make it to Langley

NEADS then worked with Langley to scramble fighters to replace the Burlington fighters, recover the Burlington fighters, and put a second set of Langley fighters on immediate status.  Concurrently, SEADS reconstituted its capability and recovered its radars one at a time from NEADS, the reverse of the earlier expansion progress.  This next audio clip provides insight into those multiple activities.  0910174721 Deexpansion and Scramble Langley

SEADS assumed air sovereignty in its area of responsibility at 1819Z (1419 local).  NEADS continued to try and divert the Russian civilian aircraft and Major Fox  worked to adjust the work schedule.  In an earlier article in this series concerning Vigilant Guardian we learned that he was arranging the work schedules for his Flight (Delta Flight, as I recall) for the exercise.  In this clip Fox is hear saying he will cover the SD (Senior Director) position tomorrow morning. 0910175910 Fox will be SD on 9-11

After SEADS took their area back NEADS dropped out of mixed mode display and as their sim picture separately restored they checked sim comms to determine if there was anything new with the Russian flight.  There was nothing new.  Here is Major Fox’s sim call to the fighters.  0910180349 Nothing new

SEADS and NEADS compared notes on the expansion and return to normal.  NEADS conducted expanded operations, exercise and real world, for two hours and thirty-five minutes.  Here is the SEADS/NEADS comparison.  0910180508 NEADS SEADS Compare notes

A few minutes later, the Burlington fighters, Sun Up, checked in to advise the Russian flight had turned slightly.  NEADS estimated it was heading for Atlantic City and the fighters were advised not to let it over fly that location.  The MCC, in consultation with the Battle Cab, then scrambled Atlantic City.  0910181114 Scramble Atlantic City

NEADS, in consultation with the Burlington fighters, decided they would recover to Atlantic City.  They were relieved by the Atlantic City fighters.  Once airborne, the Atlantic City fighters checked in with NEADS and provocatively asked for permission to fire across the bow of the Russian flight.  Major Fox ignored that gambit by the exercise cell, but would later return to the issue.  0910182736 Atlantic City fighters check in

NEADS was puzzled about what to do with the Russian flight and what threat it posed.  The MCC at one time thought about the NCA (Washington DC), but then recognized that the plane had proceeded south.  The Battle Cab asked the Burlington and Atlantic City fighters if they had noticed anyone on board the plane wearing military uniforms or if the plane had reconnaissance bubbles that had not been reported.

As the plane continued south Major Fox gave the Atlantic City fighters explicit instructions to not allow the flight to overfly Oceana and Langley and they added, “you are weapons safe,” closing the loop on the earlier request for permission to fire across the bow.  0910184256 Weapons Safe

Whether by accident or by design of the exercise, NEADS briefly lost data on the Russian flight.  The MCC immediately called the Coast Guard (simulated) and the sim cell reconstituted the data as a result.  Meanwhile, the SEADS ID section, planning ahead, called for information on the wayward flight.  0910183826 SEADS ID call

At the Weapons Director position Major Fox thought that a pilot fuel report was suspiciously low.  He asked the fighters how they were configured and then suggested that they tap on their fuel gauges and provide a correct status.  They did as directed and reported more fuel than before.  The MCC found that exchange amazing.

More seriously, the Battle Cab was planning a turnover of responsibility for the Russian flight to SEADS.  As that was happening word came in of a bomb threat at WADS.  It was uncertain if they were evacuating but the implication for NEADS was clear, they might have to expand coverage as they did earlier for SEADS.  0910185317 WADS bomb threat

Nearly two and one-half hours after the Special 27, deviating Russian commercial flight, was voice told to NEADS from Canada East, NEADS formally handing the track and the Atlantic City fighters to SEADS.  Here is that clip including the notification to the NEADS MCC.  0910190542 Handoff to SEADS It remains to be seen if NEADS will learn the ultimate disposition of both the track and the fighters.

Looking ahead, NEADS will, in turn, receive a track and fighters from SEADS, a hijacked Cubana flight with armed persons on board seeking asylum.  NEADS, knowing that the pace of the exercise was accelerating and not knowing what was ahead had already put Atlantic City on alert to provide two additional sets of fighters.  Here is that exchange with the sim cell.  0910185737 Atlantic City on further alert

What’s Next?

As NEADS personnel waited for the next exercise inject they took time to clear up the WADS bomb threat issue and learned that the event was over; there would be no expansion.  0910191246 WADS bomb threat over

Shortly before, they received a real-world Cubana track from SEADS, a flight from Havana to Montreal.  Shortly after, Canada East called about the same track.  Here is the SEADS notification.  0910191116 Cubana flight real world

NEADS had also followed up with SEADS to make sure the Atlantic City fighters were being lateral told back to NEADS.  In the course of that conversation SEADS asked if NEADS had gone to twelve (twelve hour shifts).  The answer was no, that was scheduled for Wednesday, Sep 12.  Here is that exchange.  0910191845 Working Twelve

During what was likely a shift change, we hear about the resolution of the Atlantic City fighters and the first mention of a possible Cubana hijack.  In this next clip we learn that SEADS was to provide a tanker for the Atlantic City fighters so that they could return home.  We also learn that, according to the FO (Fighter Officer, a Battle Cab position) there was a potential hijack of a Cubana flight.  The requirement discussed was to have SEADS lateral tell the track.  0910193357 Hijack first mention

SEADS was lateral telling the Cubana flight, track C106, but the track dropped.  NEADS called SEADS to restore the lateral tell and in the process received detailed information.  The flight plan was Havana to Shannon.  Three hijackers were seeking political asylum and the pilot was planning to head for JFK.  SEADS had fighters in trail.  In this next clip note the deliberate, check-list, approach to the hijacking, which was, according to SEADS, squawking the hijack code, 7500.  The track had been reclassified a Special 15.  0910195332 SEADS report to NEADS

The MCC was briefed and she discussed what to do next.  The decision requirement was in the Battle Cab (Fighter Officer) and the NEADS floor speculated a requirement to scramble Atlantic City.  In this next clip we learn that for the first time in the exercise tanker support will be available, at 2100Z.  0910200022 MCC briefed

A few minutes later on the Guard (emergency) Channel for the exercise NEADS received a distress call.  Guard was, and is, constantly monitored, by NEADS, and the other CONR sectors, real world and exercise..  On the NEADS recording system, for those familiar with the NEADS audio files, that was channel 24, in this case DRM2, channel 24.  A caller with a military call sign, Split 23, reported that he had been shot by Split 22.  Here is that emergency call.  0910201045 May Day Call

On the first rebroadcast NEADS responded immediately.  In that audio clip we learn that Split 22 was an F-18 and that Split 23’s intentions were to recover to Oceana.  0910201107 MCC Immediate Response

The Senior Director then learned that Split 22 could not escort Split 23.  The shooting was deliberate and Split 23 declared Split 22 to be a “Rogue F18.”  0910201213 Split 22 Rogue F18

Thereafter, the Senior Director, Captain Shelley, was faced with two concurrent events, each requiring a scramble.  How she handled that situation is important primary source information concerning 9-11.  It depicts explicitly how NEADS handled concurrent multiple events on 9-10 during the exercise and how they would have done so on 9-11.  It also establishes that the exercise was an advantage for NEADS, as NORAD stated and as Scott established when he wrote his trilogy of articles.  NEADS did not have to recall anyone, they had sufficient assets on hand because of the exercise to handle multiple events.  Their process and procedures were simple, as you are about to hear.  They expanded operations using additional scopes and additional manpower.

The beginning of that multi-event story is best told in Captain Shelley’s own voice as we listen to her grapple with the situation.  I’ve broken up the audio file in manageable segments.

Shelley dealt first with the rogue F18 asking for an additional Senior Director to assist.  She then dealt with the hijack. This is implicit evidence of the mind set prevalent through out NORAD and FAA prior to 9-11 that managing a hijack would be an extended event to assist the pilot in reaching an intended destination.

We start with the Guard May Day calls separately recorded, in context, on a different channel.  Shelley had just learned that the Burlington fighters who landed at Atlantic City had recovered back to Burlington.  She was arranging for their return to status when the May Day calls came in.  0910200848 May Day calls in context She quickly delegated responsibility for the Rogue 18 issue and got that under control.  0910201328 That’s Under Control

Shelley had things organized within a few minutes and she turned her attention to managing both situations.  Two scrambles had been ordered, Langley (not the dedicated air defense fighters) for the Rogue F18, and Bangor for tanker support.  She received guidance from the MCC, Major Anderson, to hold off on a scramble from Atlantic City concerning the hijacked Cubana flight.  0910201548 We’re Almost Done Here

The rogue F18 became a menace to air traffic and Washington Center (sim) made a series of two calls to NEADS.  NEADS advised they knew about the aircraft and that their checklist said to take no action unless requested by the controlling agency.  0910201932 Washington Center report

Washington Center called back asking for assistance.  NEADS had determined there was no controlling agency and reported that the F18 “was doing its own thing,” and that they “would take care of business.”  0910202144 Rogue aircraft doing own thing

NEADS then checked with SEADS on the status of its returning Atlantic City fighters and the hijacked Cubana flight.  They learned (incorrectly) that the fighters would recover at Langley and that the Cubana flight was still destined for JFK but had turned toward land toward the Myrtle Beach area.  NEADS later learned that the Atlantic City fighters had enough fuel to return home.  0910202553 SEADS Cubana Update

NEADS then received a call from a hurricane hunter that was going to penetrate the ADIZ and wanted to make sure NEADS knew who he was.  NEADS immediately asked if the call was real world or exercise. It was a real world flight.  0910202612 NOAA42

NEADS continued to work both events simultaneously.  They were told that Split 23, the wingman who had been shot, had landed safely at Langley.  For the rogue F18 they received specific rules of engagement.  For the Cubana hijacked flight they observed that it had gone “feed dry” (was overland) and considered canceling the tanker scramble from Bangor and the fighter scramble from Atlantic City.  They were also tasked to determine how much fuel the rogue fighter had and estimate its “play time.”  In this next clip we hear both situations being handled concurrently in overlapping conversations.  0910203211 ROE

The overlapping conversations continued.  The SD reported to the MCC that Split 22 had 30 minutes “play time.”  Concurrently, the Weapons Directors understood that the hijacked Cubana flight might land at Charleston; they immediately worked to put the Bangor scramble on hold.  0910203451 30 Minutes Play Time

The Rules of Engagement were passed to the Langley (not the Hooligans) fighters.  In this next audio clip we hear the passage of that authority from the SD to the Weapons Team and then to the pilot.  The exchange is explicit evidence of how NEADS would engage any target, to include proper authentication. It is how they would have engaged on 9-11 if ordered to do so.  (I speculate that on 9-11 they would also have been provided precise tactical instructions and very specific guidance on weaponry to use.)  The audio also reveals that there was a civilian airliner in the area.  Weapons worked with the ID technician to positively identify that track.  0910203711 Cleared to Engage

Rogue F18, the end game, how NEADS would have operated on 9-11

The rogue F18 landed at Baltimore (BWI) on his own volition.  The NEADS audio files reveal the explicit steps the Sector took to deal with shoot-down authority in a populated area against a target that was also a potential threat to the NCA.

Here is that story and we begin with a legitimate diversion by the sim cell as a distraction, a call from Cape May (sim) Search and Rescue.  Here is how the SD, Captain Shelley handled that situation.  0910204105 Cape May SAR

The first step taken by NEADS was to direct the pilots to broadcast a warning on the guard frequency.  0910204415 Broadcast on Guard

The second step was to determine the threat and the fuel state of the fighters.  0910204608 Threat and Fuel State

The third step was to determine the results of the call on guard.  0910204725 Guard call results

The fourth step was to determine what was on the ground in the vicinity.  The fighters were again given engagement authority because the rogue F18 had turned toward the NCA.  That authority was soon withheld when the fighters reported they were over a populated area.  The solution was to force the F18 out over the water.  The pilots then reported that it looked like he was going to land at Baltimore.  0910204828 Ground Situation

The fifth step was to let the F18 land so long as he stayed in the landing pattern.  If he deviated they were cleared to engage.  0910204951 Monitor landing

Once he landed the sixth step was to provide further instructions to the fighters.  0910205220 Landed what next

The seventh step was to ask through FAA (sim) that the pilot be apprehended.  An ID Technician made that call as the MCC coordinated events.  The SD was told the runway was closed but if anything took off the fighters were cleared to engage.  0910205628 Guard against takeoff

The eight and final step was to ensure that airport security had the situation under control.  The ID Technician made the call to Baltimore (sim).  0910205808 F18 surrounded

That left one loose end, the disposition of the Cubana hijacked flight.  The AST informed the new MCC that the Special had landed at Shaw Air Force Base.  The event was apparently resolved by SEADS and it never became an issue for NEADS.  0910210330 Landed at Shaw

Quiet Time

The NEADS floor was quite during the evening hours.  However, there were five administrative events that expand on our knowledge of NEADS operations.

First we hear a request to make a PA announcement concerning Force Protection Bravo.  Recall that NEADS had been at Bravo for sometime for exercise Vigilant Guardian.  An announcement was supposed to be made every two hours, according to the request.  The requestor was told that things were relatively quiet and to go ahead.  This is primary source validation that Force Protection was an integral part of exercise Vigilant Guardian.  0910223235 FP Bravo Announcement

Next is a point out, real world, on a Cubana flight by FAA’s Cleveland Center to the NEADS ID Section.  This clip verifies the close working relationship between NEADS and not just FAA’s Boston, New York, and Washington centers but interior CONUS centers, as well.  I will have more to say about that relationship in a Vigilant Guardian 01 summary article, currently in draft.  0910225456 Cleveland Center Within an hour, NEADS received a similar call from Washington Center concerning a scheduled Aeroflot flight, Dulles to Moscow.  0910234421 Washington Center

Third is a real world annoucement that NEADS was partial mission capable.  This had to do with a command and control link (TADIL) that was being worked by NEADS technicians.  The issue was briefed to the MCC for his information and approval.  The announcement also demonstrates a consistent NEADS practice to clearly separate real world and exercise events.  0910230150 Real World Announcement A few minutes later, the MCC announced that the NEADS SOC was fully mission capable [full duplex].  0910231920 Mission Capable

Fourth was a conversation which confirmed the NEADS three-shift status, they had not yet gone to twelve-hour shifts.  The caller asked if Major Nasypany was coming in on “mids” and was told that Charlie Crew as coming in and that Nasypany [Alpha Crew] we be in first thing in the morning.  0910231330 Nasypany status

Fifth, the Wing at Otis called to advised that both alert aircraft were on status.  One had been taken off status for a systems check.  The caller advised that the alert fighters had been configured for the ATO (air tasking order for the next day,9-11).  We know from testimony and documents collected by the 9-11 Commission that the air defense fighters on 9-11 carried additional fuel and armament because of the Russian air exercise.  That configuration would have been specified in the ATO.  0910234648 Otis Status Real World

The end of the day

The rest of the day was uneventful as of 0400Z (2400 local)  There was one additional update from Washington Center of an Aeroflot flight.  And NEADS later handed the flight off to another sector.

Charlie crew ended the day with an intelligence briefing.  Shortly before midnight the MCC made the announcement.  0911033620 Intel Briefing

My assessment is that the briefing pertained to the Russian exercise, an exercise that had Ben Sliney’s attention at the FAA’s Herndon Center the next morning.  081709 Oakland Sliney Russian Missile Shot There is no evidence that NEADS ever talked to Herndon Center during Exercise Vigilant Guardian.

That next morning, September 11, 2001, Ben Sliney National Operations Manager and operator of the National Air System, and Colonel Robert Marr, NEADS Commander and defender of the National Air System on the East coast, would fight a losing battle against a double envelopment terrorist hijack attack.  Demonstrably, neither Sliney or Marr was aware of the others existence.  The only thing they had in common was an interest in the Russian exercise.

Introduction

NEADS used the off-hours time during Exercise Vigilant Guardian to, at least in part, conduct position training, using the existence of a simulation cell to assist.  That training occurred at the Identification  (ID) position in the early morning hours of Sep 9 and again on Sep 10.  For the latter, we have available nearly sixty continuous minutes of audio.   The audio files, channel 5, DRM1, 051712 and 055500,  and channel 4, DRM1, 051246, provide a real time window into the fabric of life on the NEADS floor.  Notably, the scenario included a NORDO (no radio) aircraft, the same situation that would occur a day later with AA 11.  This training vignette provides a specific example of how a NORDO aircraft might have been handled.

A Note for Historians

For historians and researchers, the Commission accession number is RDoD3012647NEADS2of2GSABox110, as archived by NARA.  Together with a companion file, RDoD312646NEADS1of2GSABox110, it constitutes the second delivery of the NEADS tapes by DoD to the Commission.  The files are in .wav format and exist in segments by time and channel.  The audio file set for each Zulu (Universal Coordinated Time) day comes with an Access database.  It is helpful to print out a “call view” version of the files for each day for ease of reference.  The individual day printouts will exceed 100 pages, much more for the day of 9-11.  Audio files of a few seconds duration, 20 seconds or less, can generally be ignored.  They are typically dial tones or extraneous noise or static.  However, it is helpful to listen to them during periods of active exercise activity.

Training Commences

As we pick up the story there are four main players, the trainee, Mark, the trainer/mentor, the MCC (off mike) and a single person in the simulation cell acting as all external agencies and entities.  The trainer is Master Sergeant Maureen “Mo” Dooley, who will be the leader of the ID effort during the attack on the morning of 9-11.

A personal comment.  The Commission staff found Sergeant Dooley to be professional, dedicated, and helpful.  On our second visit to NEADS she was, literally, waiting in the door for us to return.

The training for Mark begins on channel 4.  We hear Sergeant Dooley ask if he was ready, it took him over a minute to respond positively, “OK, use and abuse.”  Earlier Dooley provided encouragement,  “OK Mark, water my eyes, baby.”  Here is that nearly two minute continuous clip.  0910051246 Water My Eyes

Next Mark had to identify a track lateral told to NEADS from SEADS.  Here is his call to SEADS simulated to obtain the initial information.  0910051500 Call to SEADS

That introduced a notional track, a Cubana B747, which departed Havana for Shannon, Ireland.  After some preliminary discussion Mark then announced the track to the NEADS sector floor.  The trainee confirmed with Sergeant Dooley that it was peacetime, exercise-wise.  Dooley confirmed that, but said they might do a “short war” like yesterday.  0910051712 Cubana Special 23

The trainee was also dealing with other tracks, two of which he identified as friendly, but there was a third track, B361, which he had to declare an unknown.  Here is that determination and declaration.  0910052512 Unknown For Exercise

The trainee ultimately determined the unknown to be friendly and told the MCC to stand down [a scramble].  Dooley corrected him and he then made the required floor announcement.  Concurrently he learned that the Cubana flight was deviating for unknown reason.  Note the profane exchange between Dooley and the sim person when she laughs at his attempt to explain an established air route.  0910053112 Unknown Resolved Cubana Deviating

The Cubana Flight

The trainee then turned his attention to the Cubana flight and asked the MCC if it was possible to use the fighters scrambled on the unknown to check it out.  He also determined that FAA was not requesting military assistance.  Dooley, in background, identified the plane as NORDO, confirmed by FAA simulated.  The trainee started a two minute timer because the plane had “hit the line,” penetrated the ADIZ.  Here is that sequence of events.  0910053600 Military Assistance Not Requested

The technician was running out of time and attempted to call Washington Center, the sim cell did not answer, probably intentionally to force a decision by the trainee which he made.  He declared the deviating Cubana flight to be an unknown and announced that to the sector floor.  He had no choice his two minutes were up.  Here is that audio clip.  0910053812 Had to go Unkown

As the technician made his calls he learned that Washington Center wanted the flight intercepted with hand signals to find out what was going on.  He reported that to the MCC.  Here is that audio clip.  0910054012 Intercept and Hand Signals

The trainee then worked one additional track with a five minute window to accomplish his work.  He made multiple calls to simulated agencies and determined the track to be an AT&T cable checker and declared him to be friendly in a floor announcement.  Cable checker flights are another example of the DVFR (Defense Visual Flight Rules) category that was discussed in the exercise article for Sep 9.  Such aircraft exit the ADIZ, stay out for an extended period, and then return, sometimes as an unknown.  Here is the notification to the MCC and the floor announcement.  0910055212 AT&T Cable Checker

NEADS simulated using fighters already airborne to confirm the NORDO situation with the Cubana flight.  By direction of the MCC the trainee advised FAA that the plane should land at Richmond to avoid the DC area.  While that was being determined Dooley can be heard in background critiquing some of the trainee’s actions.  Here is that last clip.  0910055500 Critique and Conclusion

Assessment

The entire training session is an excellent vignette on how NEADS handled tracks of interest.  The standard was, as specified in the training session, that the ID section had five minutes to determine the identify and status of a track of interest.  They had two minutes if the track penetrated the ADIZ.  The technician can be heard continually verbalizing what he is doing, and Sergeant Dooley’s voice can be heard in background coaching him throughout the training session.

The other NEADS positions

A different channel, channel 4, DRM 1, picked up the activity at the MCC position in response to the the training session for the ID technician.  The series of audio clips are self explanatory, given the training scenario previously discussed.

Note that Major Nasypany, the MCC on the morning of 9-11, was on duty.  Note also that the Battle Cab (Director of Operations position) and the Senior Director were both simulated.

We pick up the other end of the story with a recommended scramble on the unknown.  The notional fighters (Langley) were redirected to the Cubana flight 17 minutes later and were on station nine minutes after that.  It then took three minutes to obtain CONR approval to close for hand signals.  Within four minutes the status of the NORDO Cubana flight had been determined and the DO directed that Richmond be the landing site to keep the aircraft “away from the NCA.”

Here are the series of audio clips over 33 minutes that complete the record of the Cubana NORDO flight training scenario.  The titles are explanatory, I’ll let the voices of the day tell the rest of the story.

0910052652 Recommend Scramble on Unknown;  0910052722 Scramble Langley;  0910053517 Track Went Friendly; 0910053814 Request to Divert Fighters; 0910053957 Insight for Fighter Sim Track Nasypany; 0910054012 Intercept and Hand Signals; 0910054311 Langley Diverted May Be Special 23; 0910054500 Weather OK Fighters Cleared in; 0910055139 Recommend Scramble on Cable Checker; 0910055238 Fighters if Cubana Fall Back; 0910055433 CONR Needs to Approve; 0910055512 CONR Approved Hand Signals; 0910055729 SD Report to MCC; 0910055900 Closed for Hand Signals; 0910055940 Keep Away from NCA

In previous articles in this series we have listened to NEADS respond to one major scenario on each exercise day.  On Sep 6, the scenario concerned a military C-130 that was behaving strangely.  On Sep 7, the scenario was a defecting Aeroflot plane.  On Sep 8, NEADS exercised counter narcotics procedures dealing with a split track out of Bermuda headed for Philadelphia.

In this article we will examine NEADS activities on Sep 9.  The exercise does not begin until shortly before 1000 hrs, local time.  There was some exercise-related position training during the early morning at the ID position, but none of that was related to any scenario or sim cell activity.

During the night, CONR had sent a message raising the Force Protection Condition level to “Bravo.”  NEADS did not receive that message.  We start with that story and with preparation for a DEFCON (Defense Condition) change, an indication of “transition to war,” the stated purpose of the exercise.

DEFCON and Force Protection Levels

An indication of an expected DEFCON change came from the ID technician who informed the MCC that the checklist was complete.  Here is the audio clip of that early morning advisory.  0909060511 DEFCON Checklist Complete

The first indication that there had been a CONR-directed Force Protection Condition change to “Bravo” came in a call from CONR following up on their message of the night before.  0909104231 CONR call FP Bravo

That was news to the person at the MCC desk who took the call and he said “hold on.”  NEADS tracked down that they had not received the message and that CONR had not put the change on the chat log.  NEADS asked that the message be faxed and it was.

NEADS took check-list notification action.  In this clip we hear Major Nasypany (MCC on duty on the morning of 9-11) passing the change along to the uniformed guard force.  0909110112 Nasypany passed FP Bravo message

Someone then directed Major Nasypany to notifiy all the Joint Surveillance System (JSS) radar sites.  0909110413 Notify JSS sites

That simple order was not easy to carry out.  We learn in this next clip that no one was quite sure how to comply with an exercise direction with no intended recipient.  Although not explicit, it is likely the task was simply simulated.  The important point is that the radar sites were not involved in exercise Vigilant Guardian.  0909110445 How to handle JSS

Major Nasypany then completed his own checklist notifications.  He made a broadcast announcement to the operations floor, he called the Command Group, and he called Colonel Marr at home.  The person answering the phone at the Command Group was the Chaplain; it was a Sunday.  0909110453 Checklist Notifications

Real World Instructive Event

Around 0800 EST, Boston Center called with an advisory on a DVFR flight of some nine hours duration, a Cessna.  According to Colin Scoggins: “DVFR stands for Defense Visual Flight Rules – When aircraft are outside of the ADIZ, the Air Defense Identification Zone, they are required to obtain a beacon code from Flight Service or directly from NEADS.  each Flight Service that was adjacent to an ADIZ used to have a select amount of DVFR Codes, normally between 4 and 7 beacon codes, these codes would be issued to someone who leaves the ADIZ and then returns.”  Typically, in the ZBW area, these would be fish spotters, whale counters or perhaps hurricane trackers, according to Scoggins.

In this case, the DVFR flight departed from Hyannis and was scheduled to return there.  Once such a flight exits the ADIZ it then becomes a flight of interest to NEADS on its return, hence the routine notification by FAA centers to NEADS (or SEADS or WADS).  Here is the audio of the ZBW notification to NEADS. 0909114859 DVFR Cessna

I interviewed multiple Mission Crew Commanders from SEADS when I worked on an investigation of the Cuban shootdown of two Brothers To The Rescue (BTTR) aircraft.  BTTR flights were the prototypical DVFR flight.

Routinely, the Mission Crew Commanders told me that DVFR flights were the biggest cause of scrambles being ordered, many never taking off.  The DVFR flights were, in air defense lingo, called “mom and pop” or “doctors/dentists” flights, ones that went out for extended periods and forgot to check in upon re-entering the ADIZ.

Back to the Story

The night’s and morning’s activities were summed up by the oncoming MCC in his briefing to Col Marr.  Marr is informed about the Force Protection Condition change and is also informed the flying is expected to be limited since Tropical Storm Erin off the Virginia coast had been upgraded to Hurricane Erin.  Note that Marr immediately asked about the impact on the Langley air defense fighters.  0909123101 Colonel Marr Morning Brief

And that is how things stood as NEADS awaited the first exercise scenario which would come shortly before 1000 hours EDT.  It was an air terrorist scenario.

Terrorist Scenario

A simulated call came in from Boston Center, purportedly from Colin Scoggins.  Boston reported that they had learned from the FBI that Heathrow [London] reported that the Palan Resistance Movement had two members aboard United flight 558 who intended to detonate a bomb over New York City.  The caller was careful to say that this was a terrorist event, not a hijack.  The plane was approaching Boston air space from New Brunswick.

I asked Colin Scoggins to listen to this clip.  That is not his voice, the NEADS sim cell used his name probably because he was a known Boston Center Contact.  Colin said it was unusual for NEADS to use specific names in exercises, rather the reference should have been to Boston Center. 0909133749 ZBW Scoggins Call

NEADS can be heard discussing the event in background conversations and then ZBW called again about five minutes later with a specific request to divert the plane to Bangor or Westover.  They did not want the plane to land at its destination, JFK.  NEADS asked the relevant question, how come it’s not considered a hijack?  It is not clear that the pilot or crew even know of the threat.  FAA is talking to the pilot, he has not squawked a hijack code.  NEADS then asked the next relevant question, does ZBW want a fighter escort?  The answer was no, they just wanted the plane diverted.  The sim cell was feeding the sector floor enough information to get their thought processes started.  Here is the audio of the second ZBW call.  0909134231 ZBW wants to divert

The NEADS ID Technician started her search for information and called the sim cell, first asking for Scoggins.  The answer confirmed that the sim cell was acting for him.  When the technician said she was actually trying to reach Canada East she was told to call the real Canada as they were a player in the exercise.  0909134442 Call to Sim Cell

It is clear in this sim cell conversation that the intent was for push back on Bangor since it was a tanker base.  0909134513 Sim Cell Bangor Discussion

The Technician then called her counterpart at CANR East and learned that they were tracking the aircraft and that the track had just been forward told to NEADS, track S163.  0909134602 Call to CANR East

Meanwhile in the sim cell it is evident that they wanted push back and would “take out some tankers” if not.  Here is that brief clip.  0909135206 Take out some tankers

The MCC then provided a morning briefing to the acting Commander, NEADS.  He elected to accept only real world information and leave the exercise information to the Battle Cab.  In the course of that conversation we learn who was in the Battle Cab that morning, the FO (Fighter Officer) and the DO (Director of Operations), Colonel [likely Lt Col] McNeely.  Here is that morning brief.  0909135446 Morning Brief to Acting CO

Behind the scenes the trackers were well aware of the high interest track and checked with the sim cell about coordinating with Canada.  This clip provides additional insight into the work and the language of the NEADS sector operations center.  0909135553 Track Talk with Sim Cell

Canada East called with additional information and advised that Canadian military assistance was not being requested.  Further, it did not appear that the terrorists had taken over the airplane.  NEADS was advised that the plane was about to enter its area.  The scenario has been in progress for about 25 minutes. Here is that call.  0909140217 Update from CANR East

Coordination with Canada then took place with a handoff projected within the next 30 nautical miles.  The tactics techniques and procedures being exercised are the following of a track of interest and handing it off from one one Region (CANR) to another (CONR/NEADS).  The Technician then made sure that the MCC was fully aware.  Here are those exchanges in the same audio clip.  0909140223 Getting Ready for Hand Off

The Canadian MCC called his counterpart at NEADS as the handoff neared to coordinate.  He informed her that the track had not been forward told to NORAD.  Both Canada East and NEADS had been discussing making the track a “Special 16.” [I don’t have documentation as to what this is, but a hijack would have been a “Special 15.”]  The NEADS MCC stated that NEADS would forward tell the track.  She was also quick to challenge her counterpart when he referred to the aircraft as “hijacked.”  “Are we confirming that it is a hijack?”  He responded, “it is not a hijack.”  Here is that exchange.  0909140423 MCC to MCC Coordination

The technicians challenged the MCC on the designation of “16” and not “15.”  She told them that FAA did not yet consider the plane to be hijacked, but NEADS was to work the hijack checklist anyway.  Here is that exchange.  0909140614 Special 16 vs Special 15

The MCC left her mike open for an extended period allowing us additional insight as to how NEADS handled this situation.  One of the first things she did was ask the ID section to recontact Boston.  0909140616 Contact Boston

She then engaged in a brief discussion with probably the Battle Cab and an extended discussion with “Grover” (most likely Lt Col Cleveland, in the sim cell).  We learn that the FO [fighter officer] was coming up with a plan.  She identified for us that a “Special 16” track was a terrorist rogue track and the check list for it was the same as for a hijack track.  Her conversation with Grover is explicit that he knew the scenario.

NEADS realized that the plane may be landing in Bangor and she instructed the ID section to contact Boston and tell them that was not a good idea [force protection issue, I speculate].  Here is an excellent over five-minute look into the thought process of the MCC on duty and, by extension, NEADS.  0909141016 MCC Extended Discussion

At the end of the last clip you can faintly hear the ID Technician dialing the sim cell for Boston.  The warning not to land was too late, the plane landed at Bangor at 1437Z.  Here is the technician’s call.  0909141536 Landed Bangor

In this next clip we hear the MCC’s reaction and learn that the scenario appears to now be a force protection issue.  Flushing (moving) the aircraft at Bangor was discussed as was moving the plane, itself.  0909141616 MCC Post Mortem

The ID Technician called Bangor (sim cell) to pass on the force protection requirement.  During the course of that call both the ID Technician and Bangor learned that the plane had exploded.  Here is that call.  0909141657 Plane Exploded

The Scenario Continued

In this next clip we hear Boston Center, simulated, informing NEADS about the plane’s status.  NEADS was told that the plane exploded on impact [touchdown] and that no assistance was needed. Six to eight hours were needed for runway repair.  0909141807 Update from Boston Sim Cell

The MCC continued her post mortem and we learn that the danger at Bangor was the tankers that staged from there.  However, no planes at Bangor were damaged in the explosion.  The MCC was reminded she was told to divert the plane that exploded to Otis.  There is a faint background voice saying that on a previous clip.  The MCC acknowledged that she missed that.  We also learn that NEADS considered that there was no biological threat as the heat of the explosion would have dissipated any biochemical materials.  Here is that continued discussion at the MCC position.  0909142006 Continued MCC Discussion

A few minutes later the MCC received a status report from Bangor.  There may have been damage to one tanker.  Here is that report.  0909142743 Bangor Status Report

The final audio file relevant to the scenario was a call by the MCC to Bangor (Sim Cell) to verify time needed for runway repairs, casualties, damage to other planes and whether or not the bomb was nuclear or bio-related.  Here is that call.  0909145949 MCC Final Bangor Update

Assessment

The terrorist rogue flight was a force protection threat scenario, not a hijack scenario.  CONR had increased the protection level to “Bravo” during the night.  The FAA-simulated exercise input specifically stated that FAA wanted to divert the aircraft to Bangor or Westover. Bangor was a tanker base and the MCC, given force protection “Bravo,” should have picked up that Bangor was not an acceptable option.  She did not and the scenario played out with a Bangor landing and explosion.

There was no further activity that morning and as of 1630Z (1230 local) the only other exercise activity of any note was an exercise input reporting that the wife of a NEADS member had received a kidnap threat at home.  That became a force protection check list drill.

The scenario lasted for about 30 minutes and involved several telephone kidnap threats to dependents of NEADS personnel. One audio clip will suffice to provide perspective.  In this clip I have suppressed (set db level to 0) the names of the personnel involved outside of the on duty team.  0909165308 FP Example

Runaway Blimp

About 1845 New York Center (ZNY simulated) reported that a blimp lost power over Giants Stadium and was drifting away.  ZNY requested NEADS scramble fighters to assist.  Here is the initial call to NEADS.  0909182728 Runaway Blimp

ZNY called again seven minutes later and was told that NEADS would help.  0909183430 New York calls again

NEADS apparently discussed the issue off mike and determined that this was not their mission, it was search and rescue.  NEADS informed ZNY 15 minutes after the initial call of the declination to assist.  0909184223 NEADS says no

NEADS did alert Canada East and in that exchange we learn that the air defense fighters cannot intercept a very slow moving target.  There is an interesting MCC to MCC exchange about exactly what and where Giant’s Stadium was located.  0909184740 NEADS alerts Canada East

Both the Bangor scenario and the blimp scenario ended routinely.  Concerning Bangor, NEADS got a sim cell call that 8000 feet of runway were usable by 1930Z (1530 local).  As for the blimp, NEADS reported to ZBW (sim) at about the same time that they had lost radar contact in the vicinity of Beth Page.  Later, ZNY simulated reported that that the blimp crashed into the ocean.  0909205213 Blimp crashed in ocean

Later, CONR called for an update, they had been asked by the Air Warning Center at NORAD.  The NEADS response provides specificity on the division of responsibility with FAA.  “It was over land and FAA covers all of that,” in reference to notifying search and rescue.  Here is that update.  0910002835 Update to CONR

NEADS routine, items of interest

During a shift change the off going MCC briefly mentioned the Russian exercise by simply giving a location and stating that they were not hiding anything.  That is where they said they would be.

The new shift continued its internal discussion about the split drug-related track from the day before, defending their decision to declare both tracks to be Special 17.

At about 2030Z (1630 local) two watchstanders discussed the upcoming work schedule.  They determined that Tuesday morning (Sep 11) would be normal, Wednesday would be 12-hour shifts, and then back to normal on Thursday.  Here is that brief exchange.  0909202254 Work Schedule

Other exercise activity

Other than the two primary events, the terrorist force protection threat and the runaway blimp, everything else on Sep 9 was administrative in nature.  For example, there was a simulated heart attack experienced by a member of the watch team.  That became a check-list activity.  There was also a false report on the chat log that SEADS had an air conditioner outage and that NEADS had to take over for them.  The MCC quickly tracked that down by calling his counterpart at SEADS.  It was apparently the work of a disgruntled employee at SEADS.

There was one additional real world fact revealed.  Not only did NEADS/NORAD special track all Aeroflot and Cubana flights they also special tracked Chinese commercial flights.

As of 0400Z Sep 10, 2001 (2400 local) things were quiet on the NEADS floor.

Look for an article concerning Sep 10 in the next few days