/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\
\ /
/ The Pan Am Airline Computers (c)1994 "PART B" \
\ --------------------------------------------- /
/ \
\ By Red Knight /
/ \
\ A P/HUN Magazine Incorporation Productions /
/ \
\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/
Introduction & clearing up a confusion
--------------------------------------
Welcome to Part B of "The Pan-Am Airline Computers". I hope you have found the
first part intresting.
I would like to take this opportunity in clearing up a minor confusion that
some of you may have while reading the first part of this file.
There are 2 types of systems I talk about in the first part which are:
o Pan-Am main computer &
o The Panamac or PANAMAC
The Pan-Am main computer is used to store and view performance of the entire
network. Pan American has 3 main computer systems to serve the surrounding
states. These are located in Florida, Washington and NewJersey. There may
exsist one in California but we dont have enough proof to be sure.Although they
may have smaller terminals connected to these 3 major terminals and all the
material that is covered here also applies for these smaller terminals.
The Panamac are computers that are used by sales agents to book flights, give
information and the works. Although the Pan-Am main computer can also handle
all the tasks that the PANAMAC can. Here is what the the Pan Am network looks
like:
Example of a simplified Pan Am Network
--------------------------------------
Cartridge & The Panamacs will be in the same
building. Like the major Pan Am building
in Manhatten in Newyork.
_____________________________________________
Sub Terminals | |
| +------ & Other +---- Panamac
+-------|-+ airlines ______________ |---- Panamac
| Pan-Am | +----------+ + + |---- Panamac Sales Agents
| main |--| Sub |--|Cartridge Area|---|---- Panamac on each terminal
| computer| | Terminal | +______________+ |---- Panamac
+---------+ +----------+ |---- Panamac
| |______________ +---- Panamac
Sub Terminal Other Agencies
The cartridge area is where they insert physical cartridges for new rates
of travelling, new routes , cancellation of rountes etc. The Panamac uses
all this information supplied by the cartridge area so that the Sales agents
can answer our various questions and book us flights. The cartridge area
contains the main program for the Panamac's to run. All the information from
the cartridge area is passed to the sub terminal then to the main computer
The surrounding states may connect to one or many sub terminals then finally
leading to the main computer. Our main purpose here is to infiltrate the main
computer where all the information is stored and has control over the entire
network that it serves. I have heard from employees that Pan-Am has the latest
on ANI equipment and therefore please proceed with caution.
Another thing is that when you have successfully hacked the system and you dont
get the SOM ">" prompt then type in ">SOMTERM" and hopefully you will
end up with the SOM.
I hope this has cleared the confusion and now lets continue.
Part VIII
---------
Host Facts
----------
The Host facts field contains 2 types of entries:
Other Service Information (OSI) entries which give information about passenger
so that they can be offered proper assistance or recognition.
A passengers speaks (SPKS) only a language other than English or Meet and
assist (MAAS) and this passenger is elderly and needs assistance.
Into the OSI goes anything pertinent from age to language, that they should
know in order to talk to the passwngers as an individual.
All the entries in the FAX field begin with digit 4. The code "PA" os used
to send message to Pan Am only, This special information is entered as follows:
>4 OSI PA_MAAS PSGR ELDERLY ASSIT IN TRANSIT
A space is madatory only after PA then free form test is permitted. OSI
information will be transmitted to the airport so that the appropriate action
may be taken. In addition, special 4 chracter codes are to be used if the OSI
details are to be taken transmitted directly to the airport check system.
>4 OSI PA SPKS SPANISH ONLY
>4 OSI PA FRTV PA62634678J-STARK/AMR
If the passenger's description does not match one of the codes listed in the
system enter the information as free form test after the
"PA"
For eg.
>4 OSI OA VIP MAYOR OF N.Y
In addition there is a special format to indicate that a passenger is an infant
(INF) which include the age indicated in months (1yr=12MTS)
For eg.
>4 OSI PA INF DAVIDSON/JR MSTR 5MTHS
Note: If there are two or more infants traveling, seperate OSI entries must
be made for each other
Part IX
--------
Special Service Requirements (SSR) entries which require prior arrangements
for something special to be provided to the passenger at the airport or on
the plane.
Entries in this category arrange for a specific item. (e.g. special meal)
to be provided on a flight for the passenger, or to advice the Airport the
passenger is traveling with something which may require advance preparation:
e.g a large pet in cargo or a large amount of excess baggage. Since we are
requesting that a specific items be provided (e.g special meal be put
on the flight), the entry is made with an action code. At the same time, the
entry is related to a specific segment(s) in an intinenary and to a particular
passenger name(s) in the PNR. We need to look at an example. Here is a PNR:
1.1 SHAH/BUPENDRA 2.1EZRA/AMR
1 PA 66 P 19APR JFKBOM HS2 2145 0015
RCVD/RLOC-MR SHAH
FONE-NYC-D 212/555/1234/H
TKT-026FEBNYC00020
Mr. Shah wants a vegetarian meal. Here is the entry:
>4 A VGML FS1 S1 N1
Lets break this down:
4 - 4 field
A - Means add SCR
VGML - Vegetarian meal code
FS1 - Action Code (free sell ) + Number requested.
S1 - Related to Segment 1
N1 - Related to Name number 1
Look at this PNR carefully. The entry relates the special meal in this case
vegetarian to the first segment (S1) and to the first passenger, Mr. Shah,
who is name number 1 (N1). When re-displayed, the HA FAX field appears as
follows:
HA FAX-SSRVGML.PAHS01 PA0066P19APRJFKBOM 1SHAH/BUPENDER
Information about Pan Am policy and procedures governing some SSR entries can
be found in KISSR. Here is a display of the index:
SSR STATION INFORMATION
INDEX
BASSINETS B
SPECIAL MEALS S
WHEELCHAIRS W
In the KISSR you will find description and codes for all special meals and
facts about the current meal and wheelchair policy.
Not all SSR items may be freely sold (FS). The R.M describes the procedure
for requesting (needing) special service requirements. For example, request
(NN) on:
Special meals within 8 hours of departure
or
Excess baggage over 150 kilos (350 lbs)
Looks at this example:
Mr. C. Tuc in addition to his free allowance has baggage which will weigh
about 175 Kkilos. The entry will be:
>4A XBAG NN 175KGS S1 N2 . RECORDING EQUIPMENT
XBAG - This is the excess baggage code
NN - Action code
175KGS - Weight in Kilos
S1 - Segment number
N2 - Name number 2
- This separator which is compulsory
RECORDING EUIPMENT - Text
In this case there is also a description of the excess baggage. The description
or text is mandatory for this entry. The period(.) which acts as a separator
preceeds the text. All SSR entries regarding excess baggage must include a text
and may relate to only one passenger
When redisplayed, the HA FAX field now apprears follows:
SSR Name relating
-----------------
In from of each name is a name item number. You already know that PANAMAC
assigns numbers for each different surname in a PNR. Also, each passenger
has a passenger name number. In the FACTS example so far, the item number and
the passenger name number were the same.
A B C
1. 1AOKI/LSMRS 2. 1YAMADA/YRMRS 3. I/1YAMADA/GLENMSTR
1,2,3 are Name Item NBR & the A,B,C are passenger name numbers
When you relate an SSR fact, your entry really refered to the name item i.e
N2 refers to all the passengers in name item 2 (in this case only Mrs. Yamada)
If however the entire Yamada family had been travelling together as in the
following example the name item include more than one name:
1.1AOKI/LSMRS 2.3YAMADA/GOMR/YRMRS/LAMISS 5.1/1YAMADA/GLENMSTR
1 PA 82 Y 16 NOV HNLAX HS4 2300 0604
1 PA 81 Y 28 NOV LAXHNL HS4 1300 1702
If you SSR entry showed name relation to name N2, then the request would be for
all the passengers in NAME ITEM 2... Mr/Mrs/Miss Yamada/
To show a special request for only one passenger in a name item, use a slash
(/) after the name number. The slash acts to "separate" an individual
passenger from the name item may which may include multiple passenger.
For example: Mrs Yamada is name NBR 3. To confirm a baby meal on both flights
the entry would be:
>4A BBML FS1 S1/2 N3/
The N3 indicates the name number only
Change/Delete/Cancel
--------------------
If you are in the process of making an SSR entry and you have ended the
transaction, no action has yet been taken on the request, You can therefore
delete the entry. For example
>4 3 [change symbol]
You on the other hand while at home can user "*" which works the same way.
The 4 is the field, the 3 is the Fact ITEM number .
You cannot modify an SSR entry to correct it. If your entry is incorrect, you
must delete the entry and reenter the correct SSR fact itme.
In all instance, whether working on a new or retrieved PNR, cancellation of
an itinenary segement will automatically cancel the related SSR item.
For e.g. you have booked:
1.1BROWN/HARRYMR 2.1TOBAR/EMILEMR
1 PA 100 Y 13NOV JFKLHR HS2 1000 2140
Before ending transaction you notice you accidentally confirmed the wrong date.
After cancellation of the incorrect segment, the HA FAX SSR item will look
like this:
HA FAX
1.SSRKSMLPA(XX)02 PA0100Y13NOVJFKLHR 1BROWN/HARRYMR 1 TOBAR/EMILEMR
Cancelled SSR entries will automatically be removed from the PNR when you
End Trasaction. Now you would rebook the correct flight and the Kosher meals.
Part X
------
Other Airlines...General Facts
------------------------------
The GFAX or the General Facts, 3 filed contains the same (2) types of entries
as the Host Fax...OSI and SSR..Entries in the GFAX are included to outgoing
messages to other airlines upon ending trasaction. When an itinerary includes
space on another airlines, you must use the GFAX field to notify the other
airline about the special requirements or service information.
All entries in GFAX befin with the digit 3. To send "OSI" information to one
(1) other airlines, use the applicable carrier code. For instance, if the
passenger is an infant travelling on PA and AF, you notify Air France that you
booked an infant by sending an OSI message. The entry is:
>3 OSI AF INF JONES/MARK MSTR 5 MTS
This is in addition to an OSI entry in the 4 field to notify Pan Am at the
airport, Thus 2 entries with the same information are required.
>4 OSI PA INF JONES/MARK MSTR 5 MTS
If a passenger's itinenary include more than one other airline, use the letters
"YY" as the carrier code and make only one GFAX entry. A "YY" will send the
information to all the airlines in the itinerary.
>3 OS1 YY INF JONES/MARK MSTR 9 MTS
Change/Delete
-------------
The input to delete an OSI in the GFAX filed is the same as in HFAX.
>3 1 (change symbol)
To change an OSI entry in the GFAX field the format is the same. You delete,
then reenter the correct information.
>3 OSI AF.... (NEW INFO)
GFAX SSR Entries:
-----------------
SSR entries for other airlines are very similar to Pan Am HA FAX entries. The
entry begins with "3A", followed by the segment and name related request.
For e.g
>3A KSML NH1 S1 N1
Breakdown
3A - This is the GFAX special service request
KSML - Meal code
NH1 - Action code to request
S1 - Segment number
N1 - Name item number.
Any SSR entry to another airline is always on a request basis (NH)
The request message is forwarded to the applicable airline(s) and must await
a reply. Meanwhile, the passenger is adivised the Pan Am has requested the
special service from the other airline(s) involved.
Assume that you have made the following reservations:
1.1WILSON/ERMR
1 PA 218 Y 26FEB CCSJFK HS1 X 0940 1420
2 DL 1425 Y 26FEB JFKSLC HS1 1805 2040
The passengers desires a vegetarian meal and will be taking his dog (weight
30 lbs) with him. To book the SSRs on Pan Am the entries are:
>4A VGML FS1 S1 N1
>4A AVHI FS1 S1 N1 . DOG 30 LBS (AVIH = live animals in hold)
To book the SSRs on Delta Airlines the entries are:
Change/Delete
-------------
To cancel or delete items in the GFAX handle exactly as in HFAX.
Before end Transaction: >3 1 (change symbol)
On a retrieved PNR: >3 . 1 XX
Encode/Decode ARIMP Abbreviations
---------------------------------
"ARIMP" codes are abbreviated messages which are used to communicate within
the airline industry. These are listed in Panamac's "KI" information systems
and may be accessed using the following entries:
To find the code for a message (ENCODE), enter:
>KI COD _ (using first letter of subject)
To DECODE an abbreviated message, enter:
>KI DCO _ (using first letter of subject)
Part XI
-------
Advance Seat Assignments
------------------------
It is Pan Am's policy to assign seats prior to departure only when requested
by passengers. As you know many of us may want specific seat numbers or certain
area for e.g smoking,non-smoking,window seats,aisle.Seats have to be requested
when the booking is in progress.
Lets take an example. Lets say you have booked a seat for Mr. Davdison on
he has requested seat 3A which is in the non-smoking area and in the first
class (P) cabin. His entries looks like:
1.1DAVIDSON/PLDR
1 PA 30 P 19APR JFKLHR HS1 X 1200 1800
2 PA 40 P 20APR LHRNBO HS1 100 700
To book his request a Host Facts entry is made. For e.g:
>4A NSST NN1 S1 N1 . SEAT 3A
4A - Explained before
NSST - is code for Non Smoking Seat
NN1 - is the action code
S1 - Segment 1
N1 - Name 1
- Separtor which is compulsory
3A - This is the requested seat
If this seat is available then you will get a "*". A display of the PNR will
show the following:
1.1DAVIDSON/PLDR
1 PA 30 P 19APR JFKLHR HS1 X 1200 1800
2 PA 40 P 20APR LHRNBO HS1 100 700
HA FAX-SSRNNSTPANN01 PA0040P19APR JFKLHR 1DAVIDSON/PLDR SEAT 3A
If the seat is already taken then the output will be:
RE-CHECK AVAILABILITY/REJECTED DATA FOLLOWS/4SSRNSSPANN01 PA0030
P19APRJUNJFKLHR 1DAVIDSON/PLDR SEAT 3A
To print an availability display (seats available) seat map must be displayed.
Enter:
>AC /S2 *
AC - is the availability cabin
S2 - This is the segment 2
* - Display
You will get something like this:
-PA0040P019APR JGKLHR 747-121 ZONE MAR AVAILABLE 9
* MOVIE SHOWN BETWEEN JFKLHR
A B C D E F G H J K
P P 1 1 $
A* A* 2 2 C F
$ A* 3 3 A* A*
05----------
As you can see from the display that the requested seat is taken. The symbol
use here is "$". Now lets get into the explanation.
PA0040P19APR - Flight/Class/Date
JFKLHR - Board/Off points of the segment booked
747-121 - This indicated the equiment used on the flight
NMR - Zone requested "N" - No smoking
"M" - Movies
"S" - Smoking
"W" - Without movie
AVAILABLE 9 - Total number of seats still available to confirm.
MOVIE SHOWN BETWEEN JFKLHR - Information on which sector the movie will be
shown.
A* - Indicates that if given the option, confirm these seats to passengers
first. For e.g Seats 2B
3A B H J
$ - This indicates that it is taken. e.g Seat 1 J
2 A
- Blank indicates that seats dont exists on the aircraft
P - Seats behind a partition or bulkhead.
F - Special seating . People that require special seating ot handling
C - Compulsory seat usually assigned to F seats.
05-------- - This indicates the last row in the zone and /or compartment
in this case Premium, First Class.
Some other commands:
> AC/S1*S - Use this entry command if passengers request smoking
> AC/S1*W - Without movie ( No smoking is assured)
> AC/S1*WS - Without movie , Smoking specified.
Part XII
--------
When originating a PNR if a passenger decides to cancel and book a different
flight the seat confirmation will automatically be cancelled as in this
example (partial PNR display):
1.1BRESLIN/BMS 2.1CARTER/ASFR
1 PA 102 Y 26JUN JFKLHR 2100 0840
HA FAX-SSNSSTPAH02 PA102Y26Y26JUNJFKLHR 1IBRESLIN/BMS 1 CARTERASDR SEAT
33 AB
Segment 1 cancelled
X1
NEXT REPLACES 1
FLT//SEG FACTS CANCELLED
*R
1.1BRESLIN/BMS 2.1CARTER/ASDR
HA FAX-SSRNSSTPA(XK)02 PA102Y26JUNJFKLHR 1BRESLIN/BMS 1 CARTER/ASOR SEAT
33 AB
Should a passenger wish to verify the seat description and/or location of his
seat. There is an entry to display a seat map. The entry is:
>VSSPA106/31JULIAADLHR*27
VSS - is the Verify Seat Selection
27 - This is the row.
The response will be:
PA0106 1AD/LHR 31JUL
Y 747-121 ROWS 27 ZONES LAST ROW F/ 7 C/19 Y/57
A B C D E F G H J K
N M N M N M 21/NM N M N M N M 27/ N M N M N M
| |____ |
| | |
no smoking Movie ROW Number
Row 27 is a no-smoking seat, with a movie view, over the wing
Part XIII
---------
This past will teach you all about hotels. I dont plan to go into details on
this but will just make you familiar.
There are 4 catagories of hotels:
1. Intercontinental (IHC) the Grand Metropolitan Hotel chain
(XM Inventory stored in the system
2. Sheraton
(XM Inventory stored in the system)
3. Other hotels (Special Arrangement)
(XP Availability )
4. Unlisted Hotels
The XH and XM hotels have the actual inventory of thier rooms stored in
the system and together with XP hotels the three types give you immediate
availability. The hotels with whom Pan Am has a booking agreement are listed in
a City's Station Information. To display the hotel for a city the input is:
>KIBKKH
BKK is the 3 letter city code and H stands for Hotels. The response to this
would be something like:
BKK STATION INFORMATION
HOTEL INDEX
1000 KENYAN CONTINENTAL
1023 SHER BANKOK HOTEL
2351 * TAMARIN *
2342 ASIA
:
etc
The hotels are further identified in the hotel Index by a four digit number,
their name and location if other that the headline City it will be displayed
as "* TAMARIN *"
To determine of the hotel is "XH", "XM" or "XP" and to display details about a
hotel the input is:
>KI[Four digits Hotel Index]
Here is what the response may look like:
BKK HOTEL INFORMATION
1009 SIAM INTERCONTINENTAL
SIAM INTERCONTINENTAL
SIOUT PLACE 4290 HACKERS ROAD * TEL 000000 *
SIAMICH XH XH 0923
LHTL XH0923 H C PVKGBD0N
AS TL EP BHT EP P K D0N
04 00 01JAN-30DEC89
MODR SGLB 1840
DBLB 2000
TRPB 2390
: :
: :
GCR - JAN/JUN SGLB 1600 DBLD 1820
JUL/DEC SGLB 1600 DBLB 1820
NOTE LANAI ROOMS AND GROUND FLOOR ROOM ARE ON PERMANANT REQUEST
GUEST WILL BE MET AT AIRPORT BY HOTEL REPRESENTATIVE AND ASSISTED TO HOTEL
:
:
:
LOCATION - CENTERS OF CITY OFF SIAM AQ. WITH EASY
ACCESS TO ALL SECTIONS OF THE CITY
THREE MAIN FROM ROYAL BKK SPORTS CLUB
NATIONAL STADIUM.
TRANSPORTATION - 35 MIN BY TAXI ARPT
25 MIN BY TAXI TO DOCK
SERVICES- ROOM SVC 24 HRS LAUNDRY/VALET 24 HRS
SPORTS - POOL,GYM ROOM,SHOOTING
END
The sixth line contains the booking code (in this case XH0923)
This display has been shortened to make things easy.
Hotels are booked in 2 ways:
1) Short Selling them using HOTEL booking code
XH ........ >N1 DBLB XH1122-10OCT 15OCT MODR
XM ........ >N2 SGLB XM1355-05MAR 12 MAR MAXR
XP ........ >N1 TWNB XP3087-02JUL 9JUL MODR
2) The other way is a Segment entry for UNLISTED.
>0 HTL PA NH1 ROM 1N23-JUL-OUT30JUL DBLB MODR DORA
Part XIV
--------
Personell who can access the Pan Am main computer may also be able to call
out. I am not positively sure about this because this info was recently given
to me by a Pan Am employee. Enter as follows:
>HOLD NETCHANNEL 1
There may be many netchannels in the systems. If it is occupied then it will
give a "CHANNEL 1 BUSY" error.
Then it will prompt you for a call out password. This is different from your
login password.
Password : XXXXXXXXXX
Then the immediatly after that it will give a prompt "#" . This is where you
will be able to input digits to call out.
# (317)5552322
Part XV [Misc]
--------------
Airline Codes
-------------
Pan Am, and all other airlines, use a two-letter airline identification code
for reservation and ticketing purposes. There is no hard and fast rule as to
how the two-letter code is derived. These codes are assigned by IATA/ARC.
This list contains some of the worlds major airlines.
Hope this list will come in handy.
Airline Airline Code Airline Airline Code
------------------------------------ -----------------------------------
AER LINGUS EI AEROFLOT SU
AREOLINEAS ARGENTINAS AR AERO MEXICO AM
AIR AFRIQUE RK AIR CANADA AC
AIR FRANCE AF AIR INDIA AI
AIR NEW ZEALAND - INT. TE ALASKA AIRLINES AS
ALITILIA AZ ALOHA AILINES AQ
AMERICAN AIRLINES AA AUSTRIAN AIRLINES OS
AVENSA VE AVIANCA AV
BRITISH AIRWAYS BA BWIA INT. BW
CAAC - CHINA CA CATHAY PACIFIC AIRWAYS CX
CHINA AIRLINES CI CONTINENTAL AIRLINES CO
CP AIR (CANAIAN PACIFIC) CP DELTA AIRLINES DL
EASTERN AIRLINES EA EL AL LY
GULF AIR GF HAWAIIAN AIRLINES HA
IBERIA IB INDIAN AIRWAYS CORP. IC
JAPAN AIR LINES JL KLM ROYAL DUTCH AIRLINES KL
KOREAN AIR LINES KE LACSA LR
LAN-CHILE LA LUFTHANSA LH
LIAT LI MEXICANA MX
NORTHWEST NW OLYMPIC AIRWAYS OA
PAN AM PA PIEDMONT AIRLINES PI
QANTAS QF SABENA SN
SAS SK SAUDIA SV
SINGAPORE SQ SOUTH AFRICAN SA
SWISSAIR SR TAP (AIR PORTUGAL) TP
TWA TW UNITED AIRLINES UA
US AIR AL VASP AIRWAYS VP
VARIG RG
Conclusion
----------
Hope all have found this article of some intrest. My apologies for the lenght.
I have tried my best to include all major topics that may be usefull to the
hacker. I suppose now you know that booking flights is not that easy process.
So next time please dont start yelling at the poor sales agent for some minor
problem.
Using this system can be a lot of fun. Although one can create a major havoc
after infiltration. I urge you all not to do any of that sort. This system is
quite delicate and one should be very carefull when using it. All the reverse
command processes have been included in this article. I have purposely left out
some commands that proved to be harmfull to the system.
Under no circumstances am I responsible for this article's contents, for this
serves only as an educational tool.
I would like to thank Mr. C of the Pan Am Security Division for all his help.
If anyone wishes to get in touch with me, I can be contacted at the Hacker's
Den or at the Phoenix Project.
Best of luck!
Red Knight
@ Phun Magazine Inc.
Hackers Den88 (718)358/9209
DOWNLOADED FROM P-80 SYSTEMS 304-744-2253
Downloaded From P-80 International Information Systems 304-744-2253 12yrs+
