AirNav Comstation Teardown

[Anmer]

Looked today and I see  that Radarbox24 site has added ATC audio so suspect Airnav will be taking both positions and audio from each Comstation and sharing it on Radarbox24.

Quite possibly.  But who will be responsible for the "broadcasting" of ATC audio in those countries who don't allow it?  AirNav or the ComStation host?

[mt007]

Hi Anmer,
I think this boxes have this purpose:
work like a little server.
Received signals from planes and send DATA to Airnav server.

For what?
For send information to radarbox24 website, voice include.
If you personally can't have access to data so i see only that objective.
But is a risk, because no one buy this type of box.
Regards,

[Triple7]

I think this product has been incorrectly named. It should be called the Constation. 

Tim

[IanH]

Information sent to me by a user:

The Comstation has SSH on port 22, ftp on port 21 and a status page on port 80 with some basic linux information. It seems to be running Ubuntu and provides no access to any live data. Hosters get elite account on their webpage. It has MLAT and VHF (liveatc similar) capabilities. Also seems to record locally - I assume that is why FTP is running but not really secret as they have added voice to their webpage.

[birdie]

I think this product has been incorrectly named. It should be called the Constation. 

Tim

You can't be far from wrong.

CONstation is a more appropriate name.

[birdie]

received this from airnav to collect data for them, they provide the equipment free, including proper antenna capable of mode-s/GPS/acars/vhf, however there is no output for end user to collect data. its goes straight to airnav. i've connected up the USB and installed some serial drivers, i can connect to the box but it just repeats its product name and serial number.

i decided id tear it down and show you whats inside because i have not seen nor heard of this box before and some of you will know more about it then i do.

http://imgur.com/a/jDHsl#0

EDIT:
Mainboard pic in album is blurry. heres better

http://i.imgur.com/QoiVD6e.jpg

How did you managed to get yourself conned to receive & install the CONstation ?

AirNav don' dare to approach me because they knew I will consign the CONstation to my cat's litter bin for them to pooh & pee on. LOL

[birdie]

Looked today and I see  that Radarbox24 site has added ATC audio so suspect Airnav will be taking both positions and audio from each Comstation and sharing it on Radarbox24.

Quite possibly.  But who will be responsible for the "broadcasting" of ATC audio in those countries who don't allow it?  AirNav or the ComStation host?

Please tip off the relevant Authorities of those countries which ILLEGALLY broadcast the ATC Audios via AirNav CONstation..

[GregoryGHarding]

sorry guys I've been away for awhile, and here i come back and my topic is hosted on the main page. pretty awesome, glad i can give some people the heads up on what to expect. as said by someone else, the box collects mode-s mlat capable, and collects VHF frequencies determined by the closest airports information. the feeder isn't held accountable for collecting in areas where its illegal, because it is all radarbox's equipment doing the collecting and remaining inside their systems, probably an excuse as to why they don't allow feeders access their own data other than loading up rabarbox24.com.

if you have any other questions eel free to post here

[GregoryGHarding]

received this from airnav to collect data for them, they provide the equipment free, including proper antenna capable of mode-s/GPS/acars/vhf, however there is no output for end user to collect data. its goes straight to airnav. i've connected up the USB and installed some serial drivers, i can connect to the box but it just repeats its product name and serial number.

i decided id tear it down and show you whats inside because i have not seen nor heard of this box before and some of you will know more about it then i do.

http://imgur.com/a/jDHsl#0

EDIT:
Mainboard pic in album is blurry. heres better

http://i.imgur.com/QoiVD6e.jpg

How did you managed to get yourself conned to receive & install the CONstation ?

AirNav don' dare to approach me because they knew I will consign the CONstation to my cat's litter bin for them to pooh & pee on. LOL

i applied as a feeder to receive free equipment, i received an email saying ive been accepted. i asked for information on their equipment, they told me what the box was capable of, what the antenna was capable of. and i didnt bother to ask if sharing was possible, because hell.. everyone else give you access.

in the end i don't have any problems running this equipment from them because i basically got a free antenna to conduct my hobbies with. threw a splitter on that bitch, and a few dongles, and im collecting my own mode-s / acars / etc. while running their box in the corner. its not illegal to collect unencrypted OTA transmissions where im located so its no big deal. though i was a little disappointed at first when i asked them for the echo/share port, and they directed me to the website homepage to see flights.

[birdie]

i applied as a feeder to receive free equipment, i received an email saying ive been accepted. i asked for information on their equipment, they told me what the box was capable of, what the antenna was capable of. and i didnt bother to ask if sharing was possible, because hell.. everyone else give you access.

in the end i don't have any problems running this equipment from them because i basically got a free antenna to conduct my hobbies with. threw a splitter on that bitch, and a few dongles, and im collecting my own mode-s / acars / etc. while running their box in the corner. its not illegal to collect unencrypted OTA transmissions where im located so its no big deal. though i was a little disappointed at first when i asked them for the echo/share port, and they directed me to the website homepage to see flights.

I feel sorry for you being disappointed. What do you expect from FREE Equipment ?

AirNav dared to STEAL Data from their Customers who PAID for the RadarBox to feed the website and then charge their Customers who paid for the RadarBox for access to data .

Summarised in One word = THIEF !

( Note: To those whom i have Pi$$ed off with this AirNav Sabre-rattling "Broken Record ' thing - please excuse me ).

[Anmer]

( Note: To those whom i have Pi$$ed off with this AirNav Sabre-rattling "Broken Record ' thing - please excuse me ).

Let's stay on topic and stick with discussing the ComStation.

[GregoryGHarding]

can we get an SMF plugin to count spam posts and preserve actual posts? lol

[GregoryGHarding]

id like to see AIS messages converted to Mode-S so we can plot aircraft and ships in the same web interface for example Virtual Radar Server

[iamnothere]

Some info about this box , I edit the MD5 key SHA, SSH key etc .

Host is up (0.032s latency).
Not shown: 995 closed ports
PORT    STATE SERVICE     VERSION
21/tcp  open  ftp         Pure-FTPd
| ssl-cert: Subject: commonName=www.nomissoft.com/organizationName=NOMISSOFT GmbH/stateOrProvinceName=Some-State/countryName=AT
| Issuer: commonName=www.nomissoft.com/organizationName=NOMISSOFT GmbH/stateOrProvinceName=Some-State/countryName=AT
| Public Key type: rsa
| Public Key bits: 1024
| Not valid before: 2012-11-19T23:08:32+00:00
| Not valid after:  2012-12-19T23:08:32+00:00
| MD5:   ...............................................................
|_SHA-1:.............................................................
|_ssl-date: 2015-12-12T15:51:18+00:00; 0s from local time.
22/tcp  open  ssh         OpenSSH 6.1p1 Debian 4 (protocol 2.0)
| ssh-hostkey: 1024 ........................................................... (DSA)
| 2048 ................................................................................ (RSA)
|_256 ................................................................................. (ECDSA)
80/tcp  open  http        Apache httpd 2.2.22 ((Ubuntu))
|_http-favicon: Unknown favicon MD5: .....................................................................
|_http-methods: No Allow or Public header in OPTIONS response (status code 200)
|_http-title: AirNav Systems Radarbox Comstation Setup
139/tcp open  netbios-ssn Samba smbd 3.X (workgroup: RADARBOX)
445/tcp open  netbios-ssn Samba smbd 3.X (workgroup: RADARBOX)
Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel

Host script results:
| nbstat:
|   NetBIOS name: ANRBxxxxxxx, NetBIOS user: <unknown>, NetBIOS MAC: <unknown>
|   Names
|     ANRBxxxxxx<00>       Flags: <unique><active>
|     ANRBxxxxxx<03>       Flags: <unique><active>
|     ANRBxxxxxx<20>       Flags: <unique><active>
|     \x01\x02__MSBROWSE__\x02<01>  Flags: <group><active>
|     RADARBOX<1d>         Flags: <unique><active>
|     RADARBOX<1e>         Flags: <group><active>
|_    RADARBOX<00>         Flags: <group><active>
| smb-os-discovery:
|   OS: Unix (Samba 3.6.9)
|   NetBIOS computer name:
|   Workgroup: RADARBOX
|_  System time: 2015-12-12T15:51:18+00:00
| smb-security-mode:
|   Account that was used for smb scripts: guest
|   User-level authentication
|   SMB Security: Challenge/response passwords supported
|_  Message signing disabled (dangerous, but default)
|_smbv2-enabled: Server doesn't support SMBv2 protocol

NSE: Script Post-scanning.

[GregoryGHarding]

have you gotten root access