The North Korean diplomatic shortwave network follows a forwarding tree structure, as they limit contacts between their stations to hops of usually no more than 5000 kilometers. Pyongyang sits at the root at the tree structure, as ultimate origin or recipient of all messages between it and embassies. Messages from Pyongyang are transmitted and relayed by North Korean embassies across the world, hop by hop along each branch of the distribution tree, until they are received by their final recipients. Messages from embassies are relayed and forwarded back to Pyongyang in the reverse way.
Embassies in the network are typically equipped with an 8-element shortwave LPDA. Stations are identified in two different ways:
- The modem ID appears as the first byte of each packet in the DPRK-ARQ protocol, and identifies the peer station on the link - the destination of the packets rather than their source.
- The embassy "MF" numbers are used in the message headers to identify the origin or recipients of the messages. Historically they already appeared in former DPRK diplomatic transmission formats, prior to the DPRK-ARQ modem.
Station locations can be determined from signal propagation observations, direction-finding and triangulation, the presence and orientation of antennas on embassy buildings, contents of cleartext messages, and identifying information (countries, time zones, phone numbers...) mentioned in cleartext operator chatter.
|Location||Downstream stations||Upstream stations|
|0xA5||-||Moscow||Multiple (main hub)||0xD3|
|0xAC||MF40||Madrid||0xD2, 0xD4, 0xD6, 0xD8, MF71|
|0xC3||MF41||Kuala Lumpur||0xD0, MF30 (Kathmandu)|
|Africa||0xCD||MF45||Cairo||0x64, 0xCC, 0xCF, 0xD5||0xA5|
|Asia||0xD3||-||Pyongyang||Multiple (main hub)||-|