Context of '(8:38 a.m.-8:43 a.m.) September 11, 2001: NORAD Personnel Mistake Hijacking for Part of an Exercise'

This is a scalable context timeline. It contains events related to the event (8:38 a.m.-8:43 a.m.) September 11, 2001: NORAD Personnel Mistake Hijacking for Part of an Exercise. You can narrow or broaden the context of this timeline by adjusting the zoom level. The lower the scale, the more relevant the items on average will be, while the higher the scale, the less relevant the items, on average, will be.

Robert Marr, who on 9/11 will be the battle commander at NORAD’s Northeast Air Defense Sector (NEADS), gains experience in military training exercises. After flying on active duty for nearly 18 years, in 1994 Marr leaves the service. For 20 months, he works as the captain of a Lear 36 business jet that is contracted as part of a simulated “target force,” hired to stage attacks on the United States. In 1996 he returns to NEADS as the director of exercise and analysis. In this post, Marr no doubt gains further experience around military exercises. In 1998, he is named vice commander of NEADS, and in 1999 he will be promoted to become the commander of NEADS. [Post-Standard (Syracuse), 3/27/2005; Spencer, 2008, pp. 5-6] Marr’s particular experience around military exercises is notable, since NEADS will be in the middle of a major training exercise on the morning of 9/11 (see (6:30 a.m.) September 11, 2001). [Newhouse News Service, 1/25/2002]

NORAD begins Operation Northern Vigilance. For this military operation, it deploys fighters to Alaska and Northern Canada to monitor a Russian air force exercise in the Russian Arctic and North Pacific Ocean, scheduled for September 10 to September 14. The Russian exercise involves its bombers staging a mock attack against NATO planes that are supposedly planning an assault on Russia. [BBC, 2001, pp. 161; NORAD, 9/9/2001; Washington Times, 9/11/2001] The NORAD fighters are due to stay in Alaska and Canada until the end of the Russian exercise. At some time between 10:32 a.m. and 11:45 a.m. on 9/11, Russian President Vladimir Putin will call the White House to say the Russians are voluntarily halting their exercise. [Washington Post, 1/27/2002] It is unknown from which bases NORAD sends fighters for Operation Northern Vigilance, and how many US military personnel are involved. However, in December 2000, it took similar action—called Operation Northern Denial—in response to a “smaller scale” Russian “long-range aviation activity in northern Russia and the Arctic.” More than 350 American and Canadian military personnel were involved on that occasion. [Canadian Chief of Defense Staff, 5/30/2001, pp. 6 pdf file; NORAD, 9/9/2001]

The North American Aerospace Defense Command (NORAD), which is responsible for detecting and responding to any attack on the mainland United States, is in the early stages of a major training exercise called Vigilant Guardian that is to take place off the shores of the northeastern US and Canada. The exercise is not scheduled to really take off until the following day, September 11 (see (6:30 a.m.) September 11, 2001), but simulated intelligence briefings and meetings are now being held to set the stage for the mock engagements to come. According to author Lynn Spencer, Vigilant Guardian “is the kind of war game that the Russians usually respond to, even in this post-Cold War era.” The Russians have in fact announced that they will be deploying aircraft to several of their “Northern Tier” bases on September 11. Russian jets have penetrated North American airspace during previous NORAD exercises, and Colonel Robert Marr, the commander of NORAD’s Northeast Air Defense Sector (NEADS), has prepared for them to do so again during the current exercise. If this happens, armed US fighter jets will intercept the Russian aircraft and escort them back to their own territory. In case there is any confrontation, Marr has ordered that his alert fighter jets be loaded with additional fuel and weapons. According to Spencer, on September 11, all alert fighters will be “loaded with live missiles in anticipation of any show of force that might be needed to respond to the Russians.” [Spencer, 2008, pp. 3-5] NORAD has already announced that it is deploying fighters to Alaska and Northern Canada to monitor a Russian air force exercise being conducted in the Russian Arctic and North Pacific Ocean throughout this week (see September 9-11, 2001). [BBC, 2001, pp. 161; NORAD, 9/9/2001] According to the 9/11 Commission, the Vigilant Guardian exercise will in fact postulate “a bomber attack from the former Soviet Union.” [9/11 Commission, 7/24/2004, pp. 458]

NORAD’s war room in Cheyenne Mountain, ColoradoNORAD’s war room in Cheyenne Mountain, Colorado [Source: Val Gempis]Lieutenant Colonel Dawne Deskins and other day shift employees at NORAD’s Northeast Air Defense Sector (NEADS) in Rome, NY, start their workday. NORAD is conducting a week-long, large-scale exercise called Vigilant Guardian. [Newhouse News Service, 1/25/2002] Deskins is regional mission crew chief for the Vigilant Guardian exercise. [ABC News, 9/11/2002]
Exercise Includes Simulated Attack on the US - Vigilant Guardian is described as “an exercise that would pose an imaginary crisis to North American Air Defense outposts nationwide”; as a “simulated air war”; and as “an air defense exercise simulating an attack on the United States.” According to the 9/11 Commission, it “postulated a bomber attack from the former Soviet Union.” [Newhouse News Service, 1/25/2002; Filson, 2003, pp. 55 and 122; 9/11 Commission, 7/24/2004, pp. 458] Vigilant Guardian is described as being held annually, and is one of NORAD’s four major annual exercises. [GlobalSecurity (.org), 4/14/2002; Filson, 2003, pp. 41; Arkin, 2005, pp. 545] However, one report says it takes place semi-annually. [Aviation Week and Space Technology, 6/3/2002] Accounts by participants vary on whether 9/11 is the second, third, or fourth day of the exercise. [Code One Magazine, 1/2002; Newhouse News Service, 1/25/2002; Ottawa Citizen, 9/11/2002] Vigilant Guardian is a command post exercise (CPX), and in at least some previous years was conducted in conjunction with Stratcom’s Global Guardian exercise and a US Space Command exercise called Apollo Guardian. [US Congress, n.d.; GlobalSecurity (.org), 4/14/2002; Arkin, 2005, pp. 545] All of NORAD is participating in Vigilant Guardian on 9/11. [Aviation Week and Space Technology, 6/3/2002]
Exercise Includes Simulated Hijacking - Vanity Fair reports that the “day’s exercise” (presumably Vigilant Guardian) is “designed to run a range of scenarios, including a ‘traditional’ simulated hijack in which politically motivated perpetrators commandeer an aircraft, land on a Cuba-like island, and seek asylum.” [Vanity Fair, 8/1/2006] However, at NEADS, most of the dozen or so staff on the operations floor have no idea what the exercise is going to entail and are ready for anything. [Utica Observer-Dispatch, 8/5/2004]
NORAD Fully Staffed and Alert - NORAD is currently running a real-world operation named Operation Northern Vigilance (see September 9-11, 2001). It may also be conducting a field training exercise calling Amalgam Warrior on this morning (see 9:28 a.m. September 11, 2001). NORAD is thus fully staffed and alert, and senior officers are manning stations throughout the US. The entire chain of command will be in place and ready when the first hijacking is reported. An article later says, “In retrospect, the exercise would prove to be a serendipitous enabler of a rapid military response to terrorist attacks on September 11.” [Aviation Week and Space Technology, 6/3/2002; Bergen Record, 12/5/2003] Colonel Robert Marr, in charge of NEADS, will say: “We had the fighters with a little more gas on board. A few more weapons on board.” [ABC News, 9/11/2002] However, Deskins and other NORAD officials later are initially confused about whether the 9/11 attacks are real or part of the exercise (see (8:38 a.m.-8:43 a.m.) September 11, 2001).

Shortly after air traffic controllers ask Flight 11 to climb to 35,000 feet, its transponder stops transmitting. A transponder is an electronic device that identifies a plane on a controller’s screen and gives its exact location and altitude. Among other vital functions, it is also used to transmit a four-digit emergency hijack code. Flight control manager Glenn Michael later says, “We considered it at that time to be a possible hijacking.” [Christian Science Monitor, 9/13/2001; MSNBC, 9/15/2001; Associated Press, 8/12/2002] Initial stories after 9/11 suggest the transponder is turned off around 8:13 a.m., but Pete Zalewski, the air traffic controller handling the flight, later says the transponder is turned off at 8:20 a.m. [MSNBC, 9/11/2002] The 9/11 Commission places it at 8:21 a.m. [9/11 Commission, 6/17/2004] Colonel Robert Marr, head of NEADS, claims the transponder is turned off some time after 8:30 a.m. where the Flight 11 hijack was first detected a.m. [ABC News, 9/11/2002]

According to Terry Biggio, the operations manager at the FAA’s Boston Center, the center initially thought Flight 11 “was a catastrophic electrical failure and… was diverting to New York” (see (8:21 a.m.) September 11, 2001). [Federal Aviation Administration, 10/19/2002] However, at about 8:24 a.m., controllers heard two radio transmissions from it, with the voice of a hijacker declaring, “We have some planes” (see 8:24 a.m. September 11, 2001). Pete Zalewski, who is handling Flight 11, says that after the second of these: “I immediately knew something was very wrong. And I knew it was a hijack.” He alerts his supervisor. Lino Martins, another Boston air traffic controller, says, “the supervisor came over, and that’s when we realized something was serious.” [Christian Science Monitor, 9/13/2001; MSNBC, 9/11/2002; 9/11 Commission, 6/17/2004] However, two senior FAA officials—Bill Peacock and David Canoles—later say that the hijacker transmissions were not attributed to a flight, so controllers didn’t know their origin. [Washington Times, 9/11/2002] An early FAA report will similarly refer to them as having come “from an unknown origin.” But right away, the center begins notifying the chain of command that a suspected hijacking is taking place (see 8:25 a.m. September 11, 2001). [Federal Aviation Administration, 9/17/2001 pdf file] However, some reports claim that controllers decided Flight 11 was probably hijacked earlier than this, by about 8:20 a.m. (see (8:20 a.m.) September 11, 2001).

The FAA’s Boston Center contacts the FAA’s Cape Cod facility, located on Otis Air National Guard Base at Cape Cod, Massachusetts, and requests that it inform the military about the problems with Flight 11. [Federal Aviation Administration, 9/17/2001 pdf file; 9/11 Commission, 7/24/2004, pp. 20] Otis Air Base is one of NORAD’s seven alert sites in the continental United States, which keeps two armed fighter jets ready for immediate takeoff. [Filson, 2003, pp. 50; 9/11 Commission, 7/24/2004, pp. 17]
Supervisor Calls Otis, Supposedly Violating Protocol - Boston Center supervisor Daniel Bueno calls the tower at Otis. According to author Lynn Spencer, Bueno “knows it’s not standard operating procedure to call the military directly—that’s supposed to be done by FAA headquarters.” [Spencer, 2008, pp. 22] Indeed, according to the 9/11 Commission, by trying to contact the base this way, through the FAA’s Cape Cod facility, “Boston Center did not follow the protocol in seeking military assistance through the prescribed chain of command.” [9/11 Commission, 7/24/2004, pp. 20] But Bueno has “checked the FAA regulation manual, and in the back under section FAAO 7610.4J, Appendix 16, it states that fighters can be launched directly at FAA request, so he is going to make that happen. He may not be FAA headquarters, but he is FAA!” [Spencer, 2008, pp. 22]
Bueno Requests Fighters, Told to Call NEADS - Bueno speaks to a manager at the FAA Cape Cod facility. He says Flight 11 has lost its identification signal and appears to be headed toward Manhattan; it looks like a possible hijacking. He asks the manager to contact Otis Air National Guard Base, so as to get fighters airborne to tail Flight 11. [Filson, 2003, pp. 47; 9/11 Commission, 8/26/2004, pp. 12 pdf file] But the manager tells Bueno that he must follow the protocol, which is to contact NORAD’s Northeast Air Defense Sector (NEADS). The manager says: “You’ve got to go through the proper channels. They’re the only ones with the authority to initiate a scramble order.” Following this call, the manager will contact the operations center at Otis Air Base to let it know that it might soon be receiving a call from NEADS (see (Shortly After 8:34 a.m.) September 11, 2001). [Spencer, 2008, pp. 22 and 27]
Otis Pilots Complain - The two alert pilots at Otis Air Base will later criticize Bueno’s actions. One of them, Major Daniel Nash, will complain: “It sounds like the FAA didn’t have their [act] together at all when they were calling the [Otis] tower.… To me, it sounded like there was someone who didn’t know what they were doing.” [Boston Globe, 9/11/2005] Lt. Col. Timothy Duffy, the other alert pilot, will later comment: “It didn’t happen the way it was supposed to.… We were the ones who were contacted right away and knew about it before the air defense sector.” [Filson, 2003, pp. 50]

Colin Scoggins, the military liaison at the FAA’s Boston Center, claims he makes his first call to NORAD’s Northeast Air Defense Sector (NEADS) regarding Flight 11. He later recalls that he informs NEADS that the aircraft is “20 [miles] south of Albany, heading south at a high rate of speed, 600 knots.” [Griffin, 2007, pp. 43] Flight 11 was over Albany at 8:26 (see (8:26 a.m.-8:29 a.m.) September 11, 2001). [Federal Aviation Administration, 9/17/2001 pdf file] At such a high speed, it would have reached 20 miles south of there around 8:28. However, Scoggins says he is quite certain he only arrives on the floor at Boston Center at around 8:35. He says that although he’d later tried to write up a chronology of events, he “couldn’t get a timeline that made any sense.” Furthermore, Scoggins claims that even before he’d arrived, Joseph Cooper, a Boston Center air traffic management specialist, had already phoned NEADS about the hijacking. [Griffin, 2007, pp. 43 and 335] The 9/11 Commission makes no mention of either call. It says “the first notification received by the military—at any level—that American 11 had been hijacked” is when Boston Center calls NEADS just before 8:38 a.m. (see (8:37 a.m.) September 11, 2001). [9/11 Commission, 7/24/2004, pp. 20] However, a report by ABC News is more consistent with Scoggins’ claims, indicating that Boston Center contacts NEADS about the hijacking earlier, at around 8:31. [ABC News, 9/11/2002] (Boston Center also contacts the FAA’s Cape Cod facility at 8:34 and requests that it notify the military about Flight 11 (see 8:34 a.m. September 11, 2001). Apparently around the same time, it tries contacting a military unit at Atlantic City (see (8:34 a.m.) September 11, 2001).) Scoggins says he makes “about 40 phone calls to NEADS” in total on this day. [Griffin, 2007, pp. 43] NEADS Commander Robert Marr later comments that Scoggins “deserves a lot of credit because he was about the only one that was feeding us information. I don’t know exactly where he got it. But he was feeding us information as much as he could.” [Michael Bronner, 2006]

Tech. Sgt. Jeremy Powell.Tech. Sgt. Jeremy Powell. [Source: Scott A. Gwilt/ Rome Sentinel]The FAA’s Boston Center calls NORAD’s Northeast Air Defense Sector (NEADS) in Rome, NY, to alert it to the suspected hijacking of Flight 11. According to the 9/11 Commission, this is “the first notification received by the military—at any level—that American 11 had been hijacked.” [9/11 Commission, 7/24/2004, pp. 20; 9/11 Commission, 8/26/2004, pp. 13 pdf file] The call is made by Joseph Cooper, an air traffic controller at the Boston Center, and answered by Jeremy Powell, a technical sergeant on the NEADS operations floor. [Vanity Fair, 8/1/2006; Spencer, 2008, pp. 25] Beginning the call, Cooper says: “Hi. Boston Center TMU [traffic management unit], we have a problem here. We have a hijacked aircraft headed towards New York, and we need you guys to, we need someone to scramble some F-16s or something up there, help us out.” Powell replies, “Is this real-world or exercise?” Cooper answers, “No, this is not an exercise, not a test.” [9/11 Commission, 7/24/2004, pp. 20] Shortly into the call, Powell passes the phone on to Lieutenant Colonel Dawne Deskins (see (8:40 a.m.) September 11, 2001). Deskins identifies herself to Cooper, and he tells her, “We have a hijacked aircraft and I need you to get some sort of fighters out here to help us out.” [Newhouse News Service, 1/25/2002; ABC News, 9/11/2002; Bamford, 2004, pp. 8; Spencer, 2008, pp. 26]
Military Claims Call Goes against Procedure - The 1st Air Force’s official history of the response to the 9/11 attacks will later suggest that Boston Center is not following normal procedures when it makes this call to NEADS. It states: “If normal procedures had taken place… Powell probably wouldn’t have taken that phone call. Normally, the FAA would have contacted officials at the Pentagon’s National Military Command Center who would have contacted the North American Aerospace Defense Command. The secretary of defense would have had to approve the use of military assets to assist in a hijacking, always considered a law enforcement issue.” The only explanation it gives for this departure from protocol is that “nothing was normal on Sept. 11, 2001, and many say the traditional chain of command went by the wayside to get the job done.” [Filson, 2003, pp. 51]
Accounts Conflict over Time of Call - There will be some conflict between different accounts, as to when this vital call from Boston Center to NEADS occurs. An ABC News documentary will indicate it is made as early as 8:31 a.m. [ABC News, 9/11/2002] Another ABC News report will state, “Shortly after 8:30 a.m., behind the scenes, word of a possible hijacking [reaches] various stations of NORAD.” [ABC News, 9/14/2002] NEADS logs indicate the call occurs at 8:40 a.m., and NORAD will report this as the time of the call in a press release on September 18, 2001. [Federal Aviation Administration, 9/17/2001 pdf file; North American Aerospace Defense Command, 9/18/2001] The 8:40 time will be widely reported in the media prior to the 9/11 Commission’s 2004 report. [Associated Press, 8/21/2002; BBC, 9/1/2002; Newsday, 9/10/2002; CNN, 9/11/2002] But tape recordings of the NEADS operations floor that are referred to in the 9/11 Commission Report place the call at 8:37 and 52 seconds. [9/11 Commission, 7/24/2004, pp. 20; Vanity Fair, 8/1/2006] If the 8:37 a.m. time is correct, this would mean that air traffic controllers have failed to successfully notify the military until approximately 12 minutes after they became certain that Flight 11 had been hijacked (see (8:25 a.m.) September 11, 2001), 16 minutes after Flight 11’s transponder signal was lost (see (Between 8:13 a.m. and 8:21 a.m.) September 11, 2001), and 24 minutes after the plane’s pilots made their last radio contact (see 8:13 a.m. September 11, 2001). [9/11 Commission, 6/17/2004] At 8:34, the Boston Center tried contacting the military through the FAA’s Cape Cod facility, which is located on Otis Air National Guard Base, but was told that it needed to call NEADS (see 8:34 a.m. September 11, 2001). [9/11 Commission, 7/24/2004, pp. 20; Spencer, 2008, pp. 22]

Major Kevin Nasypany.Major Kevin Nasypany. [Source: CBC]When the FAA’s Boston Center first contacts NORAD’s Northeast Air Defense Sector (NEADS) to notify it of the hijacking of Flight 11 (see (8:37 a.m.) September 11, 2001), personnel there initially mistake the hijacking for a simulation as part of an exercise.
bullet Lieutenant Colonel Dawne Deskins, mission crew chief for the Vigilant Guardian exercise currently taking place (see (6:30 a.m.) September 11, 2001), will later say that initially she and everybody else at NEADS think the call from Boston Center is part of Vigilant Guardian. [Newhouse News Service, 1/25/2002] Although most of the personnel on the NEADS operations floor have no idea what the day’s exercise is supposed to entail, most previous major NORAD exercises included a hijack scenario. [USA Today, 4/18/2004; Utica Observer-Dispatch, 8/5/2004] The day’s exercise is in fact scheduled to include a simulated hijacking later on. [Vanity Fair, 8/1/2006]
bullet Major Kevin Nasypany, the NEADS mission crew commander, had helped design the day’s exercise. Thinking the reported hijacking is part of it, he actually says out loud, “The hijack’s not supposed to be for another hour.” [Vanity Fair, 8/1/2006]
bullet In the ID section, at the back right corner of the NEADS operations floor, technicians Stacia Rountree, Shelley Watson, and Maureen Dooley react to the news. Dooley, the leader of the ID section, tells the other members of her team: “We have a hijack going on. Get your checklists. The exercise is on” (see (8:38 a.m.) September 11, 2001). Rountree asks, “Is that real-world?” Dooley confirms, “Real-world hijack.” Watson says, “Cool!” [Vanity Fair, 8/1/2006; Spencer, 2008, pp. 25]
bullet When NEADS Commander Robert Marr sees his personnel reacting to the news of the hijacking (see (8:40 a.m.) September 11, 2001), he reportedly thinks the day’s exercise “is kicking off with a lively, unexpected twist.” Even when a colleague informs him, “It’s a hijacking, and this is real life, not part of the exercise,” Marr thinks: “This is an interesting start to the exercise. This ‘real-world’ mixed in with today’s simex [simulated exercise] will keep [my staff members] on their toes.” [Spencer, 2008, pp. 26]
bullet Major General Larry Arnold, who is at Tyndall Air Force Base, Florida, also later says that when he first hears of the hijacking, in the minutes after NEADS is alerted to it, “The first thing that went through my mind was, is this part of the exercise? Is this some kind of a screw-up?” [ABC News, 9/11/2002; 9/11 Commission, 5/23/2003] According to author Lynn Spencer: “Even as NORAD’s commander for the continental United States, Arnold is not privy to everything concerning the exercise. The simex is meant to test commanders also, to make sure that their war machine is operating as it should.” [Spencer, 2008, pp. 38]
bullet At 8:43 a.m., Major James Fox, the leader of the NEADS weapons team, comments, “I’ve never seen so much real-world stuff happen during an exercise.” [Vanity Fair, 8/1/2006]

National Guard troops stationed at NORAD’s Northeast Air Defense Sector (NEADS) in Rome, New York.National Guard troops stationed at NORAD’s Northeast Air Defense Sector (NEADS) in Rome, New York. [Source: Rome Sentinel]At NORAD’s Northeast Air Defense Sector (NEADS), a huddle of people is gathered around one of the radar scopes. NEADS Commander Robert Marr initially thinks this hubbub is due to the NORAD training exercise (presumably Vigilant Guardian) that is taking place on this day (see (6:30 a.m.) September 11, 2001). He will later recall: “I’ve seen many exercises… and as I saw that huddle I said, ‘There’s got to be something wrong, something is happening here.’ You usually see that whenever they find a track on the scope that looks unusual; it’s usually an indicator that something is getting ready to kick off.” [Filson, 2003, pp. 55] According to author Lynn Spencer, Marr thinks the day’s exercise “is kicking off with a lively, unexpected twist.… His bet is that his simulations team has started off the exercise by throwing out a ‘heart attack card’ to see how the troops respond to a first-aid call from a fellow soldier, testing their first responder training.” [Spencer, 2008, pp. 26] He sends Lt. Colonel Dawne Deskins, the regional mission crew commander for the exercise, to check out what is going on. [Filson, 2003, pp. 55] Deskins speaks briefly over the phone with the FAA’s Boston Center about the Flight 11 hijacking (see (8:37 a.m.) September 11, 2001). [Spencer, 2008, pp. 26] She then runs back to the “battle cab”—the glass-walled room that overlooks the NEADS operations floor—and speaks to Marr with urgency in her voice. [Filson, 2003, pp. 55] She tells him: “It’s a hijacking, and this is real life, not part of the exercise. And it appears that the plane is heading toward New York City.” Although Deskins has specifically stated, “not part of the exercise,” Marr reportedly thinks, “This is an interesting start to the exercise.” According to Spencer, he thinks “This ‘real-world’ mixed in with today’s simex [simulated exercise] will keep [his staff members] on their toes.” Regardless of whether the crisis is real or not, Marr decides to instruct that the two alert F-15s at Otis Air National Guard Base be ordered to battle stations (see (8:40 a.m.) September 11, 2001). [Spencer, 2008, pp. 26-27]

Two F-15 fighter jets are scrambled from Otis Air National Guard Base in Cape Cod, Massachusetts, which is 153 miles from New York City. The fighters are launched in response to the hijacked Flight 11, but this plane is already crashing into the World Trade Center at this time (see 8:46 a.m. September 11, 2001). [Washington Post, 9/15/2001; CNN, 9/17/2001; North American Aerospace Defense Command, 9/18/2001; 9/11 Commission, 6/17/2004]
Delay - The FAA’s Boston Center alerted NORAD’s Northeast Air Defense Sector (NEADS) to the hijacking of Flight 11 and requested that fighter jets be scrambled at just before 8:38 a.m. (see (8:37 a.m.) September 11, 2001), but the mission crew commander at NEADS only instructed the leader of his weapons team to launch the Otis fighters at 8:45 a.m. (see 8:45 a.m. September 11, 2001). [Vanity Fair, 8/1/2006]
Otis Aircraft Head to Runway - As soon as the pilots at Otis Air Base are strapped into their aircraft, the green light directing them to launch goes on. They start their engines and taxi out of the hangar to the nearest runway. One of the pilots, Lt. Col. Timothy Duffy, radios his command post for guidance, asking, “Do you have words?” The response he gets is, “Possible hijack, American Flight 11, 737, flight level 290 [29,000 feet], over JFK [International Airport in New York City].” (This flight information is partly incorrect, since American 11 is a 767, not a 737.) According to the Cape Cod Times, the jets will be up in the air before their radar kicks in. [Cape Cod Times, 8/21/2002; Spencer, 2008, pp. 42] The Otis pilots have already been preparing for the scramble order to come since learning of the hijacking from the FAA’s Cape Cod facility, some time shortly after 8:34 a.m. (see (Shortly After 8:34 a.m.) September 11, 2001). [BBC, 9/1/2002; Spencer, 2008, pp. 27-30] Their jets are reportedly not airborne until seven minutes after being scrambled, at 8:53 a.m. (see 8:53 a.m. September 11, 2001) and there will be conflicting accounts of what their original destination is (see (8:53 a.m.-9:05 a.m.) September 11, 2001). [9/11 Commission, 6/17/2004]

In the National Military Command Center (NMCC) at the Pentagon, personnel apparently become aware of the first attack on the World Trade Center from watching the reports on television. According to Steve Hahn, an operations officer there, “We monitor the television networks in the center, and along with the rest of America we saw the smoke pouring from the tower.” Dan Mangino, who is also an operations officer at the NMCC, says, “At first, we thought it was a terrible accident.” [American Forces Press Service, 9/7/2006] The 9/11 Commission later says, “Most federal agencies learned about the crash in New York from CNN.” [9/11 Commission, 7/24/2004, pp. 35] Whether the NMCC was already aware that a hijacking was underway is unclear. According to military instructions, the NMCC is “the focal point within Department of Defense for providing assistance” in response to hijackings in US airspace, and is supposed to be “notified by the most expeditious means by the FAA.” [US Department of Defense, 6/1/2001 pdf file] Boston Air Traffic Control Center started notifying the chain of command of the suspected hijacking of Flight 11 more than 20 minutes earlier (see 8:25 a.m. September 11, 2001). And at 8:32, the FAA’s Command Center in Herndon informed FAA headquarters of the possible hijacking (see 8:28 a.m. September 11, 2001). Yet, according to the 9/11 Commission, although the “FAA headquarters began to follow the hijack protocol,” it “did not contact the NMCC to request a fighter escort.” Supposedly, the first that the military learned of the hijacking was when Boston Air Traffic Control Center contacted NORAD’s Northeast Air Defense Sector (NEADS) about it, at around 8:37 a.m. (see (8:37 a.m.) September 11, 2001). The earliest time mentioned by the 9/11 Commission that the NMCC learns of the Flight 11 hijacking is 9 a.m. (see 9:00 a.m. September 11, 2001). [9/11 Commission, 7/24/2004, pp. 19-20 and 35]

A soldier monitors a NORAD radar screen.A soldier monitors a NORAD radar screen. [Source: National War College]For the past two days, NORAD has had fighters deployed to Alaska and Northern Canada. They are there for a real-world maneuver called Operation Northern Vigilance, tasked with monitoring a Russian air force exercise being conducted in the Russian Arctic all this week (see September 9-11, 2001). [NORAD, 9/9/2001] At its operations center deep inside Cheyenne Mountain, Colorado, NORAD is also reportedly at “full ‘battle staff’ levels for a major annual exercise that tests every facet of the organization.” Canadian Captain Mike Jellinek is one hour into his shift, overseeing the operations center, when he is contacted by NORAD’s Northeast Air Defense Sector (NEADS), based in Rome, NY: The FAA believes there is a hijacking in progress and is asking NORAD for support. As the Toronto Star reports, “In a flash, Operation Northern Vigilance is called off. Any simulated information, what’s known as an ‘inject,’ is purged from the screens.” [Toronto Star, 12/9/2001] NORAD has the capacity to inject simulated material, including mass attacks, during exercises, “as though it was being sensed for the first time by a radar site.” [US Department of Defense, 1/14/1999] However, Northern Vigilance is a military operation, not a training exercise. [NORAD, 9/9/2001; US Congress, 3/11/2005] So presumably the “simulated information” is part of a NORAD exercise currently taking place, such as Vigilant Guardian (see (6:30 a.m.) September 11, 2001). Therefore, many minutes into the real 9/11 attacks, there may have been false radar blips causing confusion among NORAD personnel. Additional details, such as whose radar screens have false blips and over what duration, are unknown. The Russians, after seeing the attacks on New York and Washington on television, will quickly communicate that they are canceling their Russian Arctic exercise. [Toronto Star, 12/9/2001; National Post, 10/19/2002]

A NORAD training exercise that is taking place this morning, presumably Vigilant Guardian (see (6:30 a.m.) September 11, 2001), is reportedly canceled shortly after 9:03, when the second World Trade Center tower is hit. [Airman, 3/2002] NORAD Commander Larry Arnold later says that after Flight 175 hits the South Tower, “I thought it might be prudent to pull out of the exercise, which we did.” [Filson, 2003, pp. 59] According to author Lynn Spencer: “The phone calls start flying between the various NORAD command centers. General Arnold calls Maj. Gen. Rick Findley” at NORAD’s operations center in Cheyenne Mountain, Colorado, “to give him the latest information and have him withdraw all forces from the simulated exercise.” [Spencer, 2008, pp. 86] Arnold will recall, “As we pulled out of the exercise we were getting calls about United Flight 93 and we were worried about that.” [Filson, 2003, pp. 59] Some early accounts say the military receives notification of the possible hijacking of Flight 93 at around 9:16 a.m. (see 9:16 a.m. September 11, 2001). [CNN, 9/17/2001; 9/11 Commission, 5/23/2003] However, the 9/11 Commission will later claim that NORAD’s Northeast Air Defense Sector (NEADS) first receives a call about Flight 93 at 10:07 a.m. (see 10:05 a.m.-10:08 a.m. September 11, 2001). [9/11 Commission, 6/17/2004] Arnold will add, “Then we had another call from Boston Center about a possible hijacking, but that turned out to be the airplane that had already hit the South Tower but we didn’t know that at the time.” [Filson, 2003, pp. 59]

At NORAD’s Northeast Air Defense Sector (NEADS), Master Sergeant Joe McCain, the mission crew commander technician, receives a call from the Continental US NORAD Region (CONR) headquarters at Tyndall Air Force Base in Florida. Major General Larry Arnold and his staff at Tyndall AFB are trying to gather as much information as they can about the ongoing crisis, and want to know the transponder codes for the two fighter jets scrambled from Otis Air National Guard Base in response to the first hijacking (see 8:46 a.m. September 11, 2001), so they can monitor their positions. The CONR officer that makes the call tells McCain to “send [the transponder codes] out on chat,” meaning on NORAD’s own chat system.
NORAD's Computer Chat System - According to author Lynn Spencer, NORAD’s chat system “is similar to the chat rooms on most Internet servers, but classified.” It has three chat rooms that can be used by anyone with proper access. One room is specifically for NEADS, and connects its ID, surveillance, and weapons technicians to its alert fighter squadrons, and is where NEADS gets status reports on fighter units and their aircraft. Another chat room is for CONR, and is where the three CONR sectors—NEADS, the Western Air Defense Sector (WADS), and the Southeast Air Defense Sector (SEADS)—communicate with each other and can “upchannel” information to CONR headquarters. The third room is the Air Warfare Center (AWC), where senior NORAD commanders from the three NORAD regions—CONR, Canada, and Alaska—communicate with each other. NEADS is allowed to monitor this room, but not type into it. When there is a training exercise taking place, as was the case earlier this morning (see (6:30 a.m.) September 11, 2001), one or two additional chat windows will be open specifically for communicating exercise information, to help prevent it being confused with real-world information.
McCain Falling Behind - McCain’s responsibilities at NEADS include monitoring these chat rooms, keeping paper logs of everything that is going on, and taking care of “upchanneling” operational reports to higher headquarters. According to Spencer, “These chat logs help to keep everyone on the same page, but in a situation like the one unfolding they have to be updated almost instantaneously to achieve that end.” But, “The fact that CONR has had to call McCain to get information that by now he would normally have posted alerts him that he is falling behind despite his best efforts.” [Spencer, 2008, pp. 139-140]

According to former counterterrorism “tsar” Richard Clarke, around this time the acting Chairman of the Joint Chiefs of Staff Richard Myers speaks to him via video link (see 9:28 a.m. September 11, 2001). During their conversation, Myers mentions, “We are in the middle of Vigilant Warrior, a NORAD exercise.” [Clarke, 2004, pp. 5] However, no other references have been found to this exercise, “Vigilant Warrior.” Considering that exercise terms are “normally an unclassified nickname,” [Chairman of the Joint Chiefs of Staff, 4/23/1998 pdf file] this is perhaps a little odd. Could Richard Clarke have mistakenly been referring to the Vigilant Guardian exercise (see (6:30 a.m.) September 11, 2001), which is taking place on 9/11? According to a later news report though, NORAD confirms that “it was running two mock drills on Sept. 11 at various radar sites and Command Centers in the United States and Canada,” one of these being Vigilant Guardian. [New Jersey Star-Ledger, 12/5/2003] If this is correct then there must be another NORAD exercise on 9/11. If not “Vigilant Warrior,” a possibility is that the exercise referred to by Richard Clarke is in fact “Amalgam Warrior,” which is a NORAD-sponsored, large-scale, live-fly air defense and air intercept field training exercise. Amalgam Warrior usually involves two or more NORAD regions and is held twice yearly, in the spring for the West Coast and in the autumn for the East Coast. [US Congress, n.d.; Airman, 1996; Arkin, 2005, pp. 254; GlobalSecurity (.org), 4/27/2005] Is it possible that in 2001 the East Coast Amalgam Warrior is being held earlier than usual (like Global Guardian (see 8:30 a.m. September 11, 2001)) and is taking place on 9/11? In support of this possibility is a 1997 Defense Department report that describes the Stratcom exercise Global Guardian, saying it “links with other exercise activities sponsored by the Chairman, Joint Chiefs of Staff, and the Unified Commands.” The exercises it links with are Crown Vigilance (an Air Combat Command exercise), Apollo Guardian (a US Space Command exercise), and—significantly—the NORAD exercises Vigilant Guardian and Amalgam Warrior. [US Department of Defense, 5/1997; GlobalSecurity (.org), 10/10/2002] Since in 2001, Vigilant Guardian (see (6:30 a.m.) September 11, 2001) is occurring the same time as Global Guardian, might Amalgam Warrior be as well? In his book Code Names, William Arkin says that Amalgam Warrior is “sometimes combined with Global Guardian.” [Arkin, 2005, pp. 254] Amalgam Warrior tests such activities as tracking, surveillance, air interception, employing rules of engagement, attack assessment, electronic warfare, and counter-cruise-missile operations. A previous Amalgam Warrior in 1996 involved such situations as tracking unknown aircraft that had incorrectly filed their flight plans or wandered off course, in-flight emergencies, terrorist aircraft attacks, and large-scale bomber strike missions. Amalgam Warrior 98-1 was NORAD’s largest ever exercise and involved six B-1B bombers being deployed to Eielson Air Force Base, Alaska, to act as an enemy threat by infiltrating the aerial borders of North America. [Airman, 1996; Arkin, 2005, pp. 254; GlobalSecurity (.org), 4/27/2005] Another Amalgam Warrior in fall 2000 similarly involved four B-1 bombers acting as enemy forces trying to invade Alaska, with NORAD going from tracking the unknown aircraft to sending up “alert” F-15s in response. [Eielson News Service, 10/27/2000; Associated Press, 10/29/2000] If either one (or both) of these exercises ending with the name “Warrior” is taking place on 9/11, this could be very significant, because the word “Warrior” indicates that the exercise is a Joint Chiefs of Staff-approved, Commander in Chief, NORAD-sponsored field training exercise. [North American Aerospace Defense Command, 8/25/1989] Real planes would be pretending to be threats to the US and real fighters would be deployed to defend against them.

The Flight 93 hijackers (probably inadvertently) transmit over the radio: “Hi, this is the captain. We’d like you all to remain seated. There is a bomb on board. And we are going to turn back to the airport. And they had our demands, so please remain quiet.” [Boston Globe, 11/23/2001; Longman, 2002, pp. 209; MSNBC, 9/3/2002; 9/11 Commission, 6/17/2004] The controller responds, “United 93, understand you have a bomb on board. Go ahead,” but there is no response. There was a very similar “bomb on board” warning from the same flight at 9:32 a.m. (see (9:32 a.m.) September 11, 2001). The 9/11 Commission indicates that these are separate incidents. [9/11 Commission, 6/17/2004] Cleveland flight control apparently continues to wait for FAA superiors to notify NORAD. Earlier in the morning, Boston flight control directly contacted NORAD (see (8:37 a.m.) September 11, 2001) and local air force bases when they determined Flight 11 was hijacked.

Doug Davis.Doug Davis. [Source: Federal Aviation Administration]John White, a manager at the FAA’s Command Center, suggests to Doug Davis, the special assistant for technical operations in air traffic services at FAA headquarters, that fighter jets should be launched in response to Flight 93. However, FAA headquarters is apparently unable to act on this suggestion. [Federal Aviation Administration, 10/21/2002; 9/11 Commission, 7/24/2004, pp. 29; Canadian Broadcasting Corporation, 9/10/2006] In the last few minutes, the Command Center has warned headquarters that Flight 93 is “29 minutes out of Washington” and approaching the city (see 9:41 a.m.-9:48 a.m. September 11, 2001). [9/11 Commission, 8/26/2004, pp. 44 pdf file]
Command Center Asks about Launching Fighters - Davis now tells White, “They’re pulling Jeff [Griffith, the FAA’s deputy director of air traffic] away to go talk about United 93.” White asks, “Uh, do we want to think, uh, about scrambling aircraft?” Davis replies, “Oh, God, I don’t know.” White says, “Uh, that’s a decision somebody’s gonna have to make probably in the next 10 minutes.” However, Davis only responds, “Uh, ya know everybody just left the room.” [Federal Aviation Administration, 10/21/2002; 9/11 Commission, 7/24/2004, pp. 29] This conversation takes place 13 minutes after the FAA’s Cleveland Center asked the Command Center whether anyone had asked the military to launch fighter jets to intercept Flight 93 (see (9:36 a.m.) September 11, 2001). [9/11 Commission, 8/26/2004, pp. 40 pdf file]
Person Who Could Request Fighters Is Unavailable - Apparently there is only one person at FAA headquarters who is authorized to request military assistance, and Ben Sliney, the Command Center’s national operations manager, is told that no one can find him. Sliney will later recount: “I said something like, ‘That’s incredible. There’s only one person. There must be someone designated or someone who will assume the responsibility of issuing an order, you know.’ We were becoming frustrated in our attempts to get some information. What was the military response?” [Canadian Broadcasting Corporation, 9/10/2006] This lack of response to Flight 93 contrasts with the FAA’s earlier reaction to Flight 11, when Boston Center air traffic controllers contacted NORAD’s Northeast Air Defense Sector (NEADS) themselves (see (8:37 a.m.) September 11, 2001), and even called military bases directly (see 8:34 a.m. September 11, 2001 and (8:34 a.m.) September 11, 2001). [9/11 Commission, 7/24/2004, pp. 20]

Ordering 

Time period


Email Updates

Receive weekly email updates summarizing what contributors have added to the History Commons database

 
Donate

Developing and maintaining this site is very labor intensive. If you find it useful, please give us a hand and donate what you can.
Donate Now

Volunteer

If you would like to help us with this effort, please contact us. We need help with programming (Java, JDO, mysql, and xml), design, networking, and publicity. If you want to contribute information to this site, click the register link at the top of the page, and start contributing.
Contact Us

Creative Commons License Except where otherwise noted, the textual content of each timeline is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike