knox box tones

The General forum is where users can discuss any topic regarding Motorola communications equipment - hardware, software, etc. There are also several focused forums on this board, so please take the time to ensure that your questions doesn't fall into one of those categories before posting here!

Moderator: Queue Moderator

Post Reply
DAL-COM
Posts: 213
Joined: Sat Jan 25, 2003 10:03 pm

knox box tones

Post by DAL-COM »

Can anyone suggest an inexpensive (<$300) tone encoder that can generate Knox box tones?
Thanks
User avatar
KG6EAQ
Batboard $upporter
Posts: 1862
Joined: Mon Jan 14, 2002 4:00 pm

Post by KG6EAQ »

Don't know where to get one and not to sound like a total jerk but what legal use do you have for one? Anyone that has spent the money to setup this system would already have the encoder....
-Robert F.
KG6EAQ
User avatar
nmfire10
Batboard $upporter
Posts: 4109
Joined: Sat Jun 29, 2002 4:41 pm

Post by nmfire10 »

KG6EAQ wrote:Don't know where to get one and not to sound like a total jerk but what legal use do you have for one? Anyone that has spent the money to setup this system would already have the encoder....
Ditto.
"I'll eat you like a plate of bacon and eggs in the morning. "
- Some loser on rr.com

eBay at it's finest:
Me: "What exactly is a 900Mhz UHF CB?"
Them: "A very nice CB at 900Mhz speed!"

:-?
User avatar
The Pager Geek
Posts: 1250
Joined: Fri Jun 21, 2002 10:31 pm
What radios do you own?: Disney FRS

Post by The Pager Geek »

Knox box tones are modified DTMF tones. You will have to get your specific dual tones for each digit, then try to decode them in order to regenerate them... nothing I know of is "ready-made" to do this.

See above 2 posts for further comments...

tpg
RADIOMAN2002
Posts: 1102
Joined: Thu Apr 04, 2002 4:00 pm
What radios do you own?: More than I can count

K

Post by RADIOMAN2002 »

Other than being the actuall licensed(yes they do license each departments tones seperately) I don't belive there is any way to generate them,They are modified DTMF and special timing is required. I too have been looking to do it. I have about 25 of them under contract, and its a real pain to get my County Fire Control to constantly repeat the tones till I find a problem in the box or the radio,
User avatar
ExKa|iBuR
Suspended TFN
Posts: 1157
Joined: Thu Jun 06, 2002 8:53 am

Post by ExKa|iBuR »

I was waiting for someone else to ask.

But.

What is a Knox Box?


Where I live, the fire department sends out what sounds like DTMF over their radios as well... I remember someone telling me that those tones are used to access a key??

M
User avatar
JAYMZ
Posts: 2778
Joined: Sun Sep 09, 2001 4:00 pm
What radios do you own?: Radar Range

Post by JAYMZ »

I don't think it's the same thing that is being discussed here but a knox box in the fire service(at least around here) is a box of keys for an apartment complex, nursing, or other commercial building. The fire department gets a couple of copies of the master key to get into the knox box... thus gaining access to the whole building. Most businesses or building supers don't like it when you take a halagen tool to a door jam for a smoke investigation.
JAYMZ

"Mom and dad say I should make my life an example of the principles I believe in. But every time I do, they tell me to stop it."
Calvin
User avatar
Bob
Posts: 1006
Joined: Wed Sep 05, 2001 4:00 pm

Post by Bob »

Yes, it is the same thing. Some boxes use key access, and some boxes use tone access. it was briefly discussed here not too long ago:
http://batboard.batlabs.com/viewtopic.p ... t=knox+box

You can also find Knox Box info at: http://www.knoxbox.com/
User avatar
nmfire10
Batboard $upporter
Posts: 4109
Joined: Sat Jun 29, 2002 4:41 pm

Post by nmfire10 »

We have tone activated Knox Sentra-Locks in our apparatus that releases the key for the boxes on the buildings. It is not information that will ever be given away to anyone but Radio Service and the manufacturer. The key that it releases is not a copiable key either.
"I'll eat you like a plate of bacon and eggs in the morning. "
- Some loser on rr.com

eBay at it's finest:
Me: "What exactly is a 900Mhz UHF CB?"
Them: "A very nice CB at 900Mhz speed!"

:-?
User avatar
ExKa|iBuR
Suspended TFN
Posts: 1157
Joined: Thu Jun 06, 2002 8:53 am

Post by ExKa|iBuR »

Well, what would it take for someone to make a recording of the tones over the air with say, an FT50, and re-play them over the air...the box wouldn't know the difference...


I'm confused though. Do the tones open a box inside the fire truck to get the key, or do the tones open the actual box on the building to get the key?


M
User avatar
KG6EAQ
Batboard $upporter
Posts: 1862
Joined: Mon Jan 14, 2002 4:00 pm

Post by KG6EAQ »

They open the box on the truck. That box contains the key for the one on the buildings.
-Robert F.
KG6EAQ
User avatar
nmfire10
Batboard $upporter
Posts: 4109
Joined: Sat Jun 29, 2002 4:41 pm

Post by nmfire10 »

NorthYork20 wrote:Well, what would it take for someone to make a recording of the tones over the air with say, an FT50, and re-play them over the air...the box wouldn't know the difference.

1. Box will not open without the truck being on
2. Each truck has a different tone
3. Everyone will hear the tones go out over the air without being requested.
4. Someone will then notice you running up to the truck, jumping in, and then running away. The box only stays unlocked for so long.
5. We all have axes and haligan bars and are very protective.
"I'll eat you like a plate of bacon and eggs in the morning. "
- Some loser on rr.com

eBay at it's finest:
Me: "What exactly is a 900Mhz UHF CB?"
Them: "A very nice CB at 900Mhz speed!"

:-?
mastr
Posts: 262
Joined: Mon Jan 13, 2003 9:12 am

Post by mastr »

The recording method might work, if the speed of the playback was very precise. It would certainly be worth a try as a legitimate service tool. I believe that it is safe to assume that DAL-COM would not be posting this question in an open forum if he intended to steal the contents of the "knox box".
User avatar
nmfire10
Batboard $upporter
Posts: 4109
Joined: Sat Jun 29, 2002 4:41 pm

Post by nmfire10 »

mastr wrote:I believe that it is safe to assume that DAL-COM would not be posting this question in an open forum if he intended to steal the contents of the "knox box".
This may be true. However, when asked without any legitimate reason given, it is like asking "Hey, who will tell me where the key to town hall is hidden?"
"I'll eat you like a plate of bacon and eggs in the morning. "
- Some loser on rr.com

eBay at it's finest:
Me: "What exactly is a 900Mhz UHF CB?"
Them: "A very nice CB at 900Mhz speed!"

:-?
Jonathan KC8RYW
Posts: 1747
Joined: Fri Dec 28, 2001 4:00 pm

Post by Jonathan KC8RYW »

nmfire10 wrote:
mastr wrote:I believe that it is safe to assume that DAL-COM would not be posting this question in an open forum if he intended to steal the contents of the "knox box".
This may be true. However, when asked without any legitimate reason given, it is like asking "Hey, who will tell me where the key to town hall is hidden?"
Try under the front mat.
73 DE KC8RYW
Random Motorola Part Number:
SYN1894B - V3m Sprint-branded Battery Cover
DAL-COM
Posts: 213
Joined: Sat Jan 25, 2003 10:03 pm

Post by DAL-COM »

It is not hard to find the tone chart for Knox equipment on the Web. I have also learned that several manufacturers of consoles offer Knox tone encoding. One of my fire dept customers is interested in using Knox boxes, but I don't believe their dispatch supports it. I was curious to know if anyone had found an inexpensive encoder, but apparently not. I will check with Midian and Comm-spec.
GMC
Posts: 150
Joined: Sun Sep 09, 2001 4:00 pm

Post by GMC »

What console do they have????
2wayguy
Batboard $upporter
Posts: 193
Joined: Sat Dec 22, 2001 4:00 pm

Knox Box

Post by 2wayguy »

I just installed one last week that used QCII off of a CDM1250. But in addition to the proper tones it also required the use of an electronic key fob at the same time the tones activated the box..
User avatar
AngelFire_91
Posts: 345
Joined: Fri Sep 21, 2001 4:00 pm

Post by AngelFire_91 »

Our department use a what sounds to be like a packet burst followed by the Knox tones. Our box's are located on the officers side right smack in the middle of his dashboard. I would assume the Packet burst is Acquiring the specific box's attention (so to say) and then the tones open that specific box. Good luck ever getting a hold on the packet information, and then we have the tones to beat. 8) Our box's only have four keys in them, they are the N, S, E, and W, keys. any guess as to why they are labled that.......You got it; North, South, East, West key's as to what part of the city your in it opens the Knox box on the building. That was our old system, Now we are using ASTRO radios and the Knox Channel is Astro Encrypted. So good luck ever hearing the Knox packet or tones anymore inless your in the rig.


Also a couple of us guys down at the station one night had an old Box not being used anymore so we tried to see if we could break into it. Let's just say it's not easy at all, we eventually had to get the magnisium cutting torch out of the truck and burn our way into it. It still wasn't a cake walk.
Kevin
tom IL
Posts: 168
Joined: Thu Nov 07, 2002 3:11 pm

Post by tom IL »

How much does one of these units cost? All of the depts I have seen that use Knox boxes keep the key in a combo lock box that they buy at the hardware store (quality boxes but all you need is the combo). Is the intent of the tones to keep a record of when they key is taken out?
OX
Posts: 1321
Joined: Tue Sep 04, 2001 4:00 pm

Post by OX »

The purpose is to allow Emergency Personnel to enter a locked building without busting out a window or door.

I've seen two scenarios:
1) Each Battalion Chief and Fire Inspector carries a Knox key so that when there is an incident that requires entry to the building, they can have easy access. In this case you have to actually trust your PS officials in that they won't just walk in and clean you out.

2) Each rig is equipped with a secure box with an electronic lock. The electronic lock is connected into the rig's radio. Inside the box is a Knox key (typically). Upon arrival at an incident that requires entry into a secure building, the dispatcher can authorize the rig's box to unlock by encoding a series of tones and/or data (I've only heard of the tone version but someone has mentioned a data packet goes out as well).

With the Knox key, the official can unlock the knox box on the building and have use of the building master key. This is typical of my area, I'm shure some areas differ. Also, there is a tampered version of the Knox Box (for the building) that can be hooked into the building security alarm to notify when someone has opened the box and/or ripped the box from the wall.
firemed9
NOT ALLOWED TO BUY/SELL/TRADE
Posts: 181
Joined: Sat Dec 29, 2001 4:00 pm
What radios do you own?: Motorola, Kenwood, Icom

Post by firemed9 »

Knox boxes are indeed either key access or tone access. the tone access varies on department needs. You can order them with either a QC-II tone, DTMF tone, or knox has its on encoder which sends a packet out that is box specific. that is the most common method for the knox boxes. Each box setup is set up to a code that is determined between the sales associate that has contracted the install (or their authorized dealer), and the fire chief of the department. the radio shop is contacted if there is question if the equipment being used in dispatch can work with the system being installed. Most reps are familiar with the most common dispatch systems, and they can do most if not all the work without anyone from a radio shop.
These tones, however, are supposed to be kept on an extreme need to know basis. Some departments do keep a box on the truck with the master key for the boxes, other departments actually have them installed on the buildings they need to access. you see this more often in smaller towns.
Higgy
Lieutenant, FF/EMT-Paramedic
Protective Services Officer


"Train as if your life depends on it, because it does."

No Trespassing. Violators will be shot. Survivors will be shot again
GMC
Posts: 150
Joined: Sun Sep 09, 2001 4:00 pm

Post by GMC »

ALMOST always the tone type systems are installed on rig, and the master key type are installed on the buildings. By the way I have also seen the tone systems installed on ambulances for certain narcotics that could only be accessed upon orders of the med control or hospital that they get there orders from .

Gary
RADIOMAN2002
Posts: 1102
Joined: Thu Apr 04, 2002 4:00 pm
What radios do you own?: More than I can count

More

Post by RADIOMAN2002 »

Getting into it more deeply, there are 2 ways of operating, as with our department, we have appx 25 Knox-box security key holders installed on our engines and chiefs vehicles. The old version has a key sticking out of it that can be removed for security purposes, this key is required to unlock a second key, when the box receives the proper sequence of tones. The newer version has a key fob that must be placed over the sensor creating the same situation as the key above. Once the security key has been removed it is used to open the box located outside the building you want to get into.
Now with a service key you CAN open the unit and we have tested it, so we know that the security key, the on that opens the box attached to the building, which contains that building's key can be removed with some fiddeling. So I have now made a signout log for that key anytime I need it for repair, I must sign it out from the deparments, main office and return it by the end of the day, My protection and the departments.
User avatar
Burner
Posts: 56
Joined: Tue Jan 08, 2002 4:00 pm

Post by Burner »

Chief officers in my department have the tones in their HT1250's under a separate zone to utilize for training and if communications is busy or if we are in an area that other interference hampers the tones. We feel this is better than just giving out a backup key, We have no problem releasing the key from the sentralock
User avatar
Twisted_Pear
Batboard $upporter
Posts: 510
Joined: Thu Sep 06, 2001 4:00 pm

The tone frequencies

Post by Twisted_Pear »

Just type in "knox box dtmf tones" on Google. Look under rec.radio.scanner for a post by Rich Carlson.

Off the top of my head....I'm sure you can locate sound recording software to generate the dual tones by frequency. What you do afterwards is up to you to think of.

-Wayne
Cowthief
Fail 01/90
Posts: 1900
Joined: Wed Sep 05, 2001 4:00 pm

Knox Box tones

Post by Cowthief »

Hello.

I, for one, have broken the knox box.

The way to open the box is to record the tones, then play them back, on the repeater output, at very low power, this way no one else will 'hear' the tones.
The lock, made by mechanical devices company MEDECO, is NOT copy proof, the bi-axial simply needs a 3 axias cutter, and the correct blank.

I post this, not so much to inform the crooks, they will figure this out soon enough, but in the hopes that the system be made "more" secure.
I have "broken" the MEDECO, as well as Abloy, and Papaz locks, have " cracked" several bank safes, in Texas, there were a LOT of failed banks in the 80's.
My average time, to pop a car, from square one, with alarm, is around 90 seconds.
I know, strange hobby.
The type 4 seal that is put on some government loads that are transported by truck, takes me around 30 minutes to remove and reinstall.

Point being, never think anything is secure.

Thank You.
User avatar
nmfire10
Batboard $upporter
Posts: 4109
Joined: Sat Jun 29, 2002 4:41 pm

Re: Knox Box tones

Post by nmfire10 »

Cowthief wrote: I post this, not so much to inform the crooks, they will figure this out soon enough, but in the hopes that the system be made "more" secure.

And just like FRS, no bad people will hear you say this because of the PL on the Bat Board, right?
"I'll eat you like a plate of bacon and eggs in the morning. "
- Some loser on rr.com

eBay at it's finest:
Me: "What exactly is a 900Mhz UHF CB?"
Them: "A very nice CB at 900Mhz speed!"

:-?
litsnsirn
Posts: 46
Joined: Tue Feb 26, 2002 4:00 pm

re

Post by litsnsirn »

I think that Zetron makes an encoder, but I'm not sure, I remember after getting some new ones needing to have Zetron burn a new prom.

I used to get everyone at work riled up because I used to spread around that I used the Knox box to get into my friend's(actually a /\/\ engineer, at the time) apartment all the time. What I didn't say was that the process was to climb up onto the gas meter, one foot on the Knox box, stand and pull yourself up onto the balcony. Worked like a charm.
User avatar
MO_TRASHER
Posts: 205
Joined: Thu Apr 18, 2002 11:13 am

Post by MO_TRASHER »

I think everyone is on the mark here. Our shop put in some boxes for a local FD a couple years ago. The dispatchers punch out a key on the Centracom and it dumps the DTMF sequence and POOF!! key is released.
If memory serves, it's standard phone co DTMF tones (at least it is for my customer) about 10 digits long?? We tested them at the shop using a signal generator with DTMF encoding. I can't remember the on-off intervals, but it seemed pretty quick.

My $.02 Good Day!!
The 'Trasher
N3UHD
PCIA #38104
...If it ain't broke, don't fix it....
"Motorola hasn't built a radio so well that it can't be broken"
Check Out: http://www.lowerytech.net/forum
Join the fun!
Someday this'll be a REAL Site!.......
http://www.busrad.com
User avatar
nmfire10
Batboard $upporter
Posts: 4109
Joined: Sat Jun 29, 2002 4:41 pm

Post by nmfire10 »

Ours use DTMF, whether it is standard or some proprietary modified version, I have no idea. It is a very rapid DTMF as well. A neighboring town uses it as well and theirs is a very slow DTMF of some kind.
"I'll eat you like a plate of bacon and eggs in the morning. "
- Some loser on rr.com

eBay at it's finest:
Me: "What exactly is a 900Mhz UHF CB?"
Them: "A very nice CB at 900Mhz speed!"

:-?
OX
Posts: 1321
Joined: Tue Sep 04, 2001 4:00 pm

Post by OX »

I haven't heard the tones lately but I thought they sounded like the access tones used in a Blue Box (similar to DTMF but the tone grid was modified).
RADIOMAN2002
Posts: 1102
Joined: Thu Apr 04, 2002 4:00 pm
What radios do you own?: More than I can count

tones

Post by RADIOMAN2002 »

From my conversations with Knox there are at least 2 versions of tones, standard DTMF and a series know as F-1. F-1 is DTMF with different tones within the dual tone . kinda like the old motorola 2+2 format of the 70's.
Ett1033
Posts: 112
Joined: Tue Nov 27, 2001 4:00 pm

Post by Ett1033 »

If you are using Knox Sentraloks, they have several settings and codes that each agency might have set up different. Some are encrypted, so recording the DTMF would not work. They sell an encoder for 795.00 that will connect into your console and release accordingly. If your dept. uses Sentralok, they will sell you the encoder, if not, you may have to purchase a system. The encoders, however, need professional installation. Find more info at Knox website.
Post Reply

Return to “General Motorola Solutions & Legacy Radio Discussion”