Fighter jets are regularly scrambled by the North American Aerospace Defense Command (NORAD) in response to suspicious or unidentified aircraft flying in US airspace in the years preceding 9/11. [General Accounting Office, 5/3/1994, pp. 4; Associated Press, 8/14/2002] For this task, NORAD keeps a pair of fighters on “alert” at a number of sites around the US. These fighters are armed, fueled, and ready to take off within minutes of receiving a scramble order (see Before September 11, 2001). [American Defender, 4/1998; Air Force Magazine, 2/2002; Bergen Record, 12/5/2003; Grant, 2004, pp. 14] Various accounts offer statistics about the number of times fighters are scrambled: A General Accounting Office report published in May 1994 states that “during the past four years, NORAD’s alert fighters took off to intercept aircraft (referred to as scrambled) 1,518 times, or an average of 15 times per site per year.” Of these incidents, the number of scrambles that are in response to suspected drug smuggling aircraft averages “one per site, or less than 7 percent of all of the alert sites’ total activity.” The remaining activity, about 93 percent of the total scrambles, “generally involved visually inspecting unidentified aircraft and assisting aircraft in distress.” [General Accounting Office, 5/3/1994, pp. 4]
In the two years from May 15, 1996 to May 14, 1998, NORAD’s Western Air Defense Sector (WADS), which is responsible for the “air sovereignty” of the western 63 percent of the continental US, scrambles fighters 129 times to identify unknown aircraft that might be a threat. Over the same period, WADS scrambles fighters an additional 42 times against potential and actual drug smugglers. [Washington National Guard, 1998]
In 1997, the Southeast Air Defense Sector (SEADS)—another of NORAD’s three air defense sectors in the continental US—tracks 427 unidentified aircraft, and fighters intercept these “unknowns” 36 times. The same year, NORAD’s Northeast Air Defense Sector (NEADS) handles 65 unidentified tracks and WADS handles 104 unidentified tracks, according to Major General Larry Arnold, the commander of the Continental United States NORAD Region on 9/11. [American Defender, 4/1998]
In 1998, SEADS logs more than 400 fighter scrambles. [Grant, 2004, pp. 14]
In 1999, Airman magazine reports that NORAD’s fighters on alert at Homestead Air Reserve Base in Florida are scrambled 75 times per year, on average. According to Captain Tom Herring, a full-time alert pilot at the base, this is more scrambles than any other unit in the Air National Guard. [Airman, 12/1999]
General Ralph Eberhart, the commander of NORAD on 9/11, will later state that in the year 2000, NORAD’s fighters fly 147 sorties. [9/11 Commission, 6/17/2004
]
According to the Calgary Herald, in 2000 there are 425 “unknowns,” where an aircraft’s pilot has not filed or has deviated from a flight plan, or has used the wrong radio frequency, and fighters are scrambled 129 times in response. [Calgary Herald, 10/13/2001]
Between September 2000 and June 2001, fighters are scrambled 67 times to intercept suspicious aircraft, according to the Associated Press. [Associated Press, 8/14/2002]
Lieutenant General Norton Schwartz, the commander of the Alaskan NORAD Region at the time of the 9/11 attacks, will say that before 9/11, it is “not unusual, and certainly was a well-refined procedure” for NORAD fighters to intercept an aircraft. He will add, though, that intercepting a commercial airliner is “not normal.” [Air Force Magazine, 9/2011 ] On September 11, 2001, NEADS scrambles fighters that are kept on alert in response to the hijackings (see 8:46 a.m. September 11, 2001 and 9:24 a.m. September 11, 2001). [New York Times, 10/16/2001; 9/11 Commission, 7/24/2004, pp. 20, 26-27]
Before September 11, 2001: Fighters Regularly Launch within Minutes of Scramble Order in Response to Suspicious Aircraft
Fighter jets that are scrambled by the North American Aerospace Defense Command (NORAD) in response to suspicious or unidentified aircraft in US airspace are able to take off within minutes of receiving a scramble order, in the years preceding 9/11. [Airman, 1/1996; Cape Cod Times, 9/15/2001; Spencer, 2008, pp. 117] NORAD keeps a pair of fighters on “alert” at a number of sites around the US. These fighters are armed and fueled, ready for takeoff. [American Defender, 4/1998; Air Force Magazine, 2/2002; Bergen Record, 12/5/2003] Even before 9/11, the fighters are regularly scrambled to intercept errant aircraft (see 1990-2001). [General Accounting Office, 5/3/1994, pp. 4; Associated Press, 8/14/2002]
Pilots Stay Close to Their Aircraft – Pilots on alert duty live near to their fighters, so they will be ready for a prompt takeoff if required. Author Lynn Spencer will write that pilots on alert duty at Langley Air Force Base in Virginia “live, eat, and sleep just steps from jets.” [Spencer, 2008, pp. 117] According to Major Martin Richard, a pilot with the 102nd Fighter Wing at Otis Air National Guard Base in Massachusetts, “Every day” at his base, “365 days a year, 24 hours a day, at least two fighter pilots and four maintenance personnel ate, slept, and lived nestled adjacent to three fully loaded F-15 jets.” [Richard, 2010, pp. 8]
Fighters Can Get Airborne in Minutes – The fighters on alert are required to be in the air within minutes of a scramble order. General Ralph Eberhart, the commander of NORAD on 9/11, will tell the 9/11 Commission that they “have to be airborne in 15 minutes.” [9/11 Commission, 6/17/2004] Richard will write that the objective of the alert pilots at his base is “to be airborne in 10 minutes or less if the ‘horn’ went off.” [Richard, 2010, pp. 8] According to other accounts, fighters on alert are generally airborne in less than five minutes. Airman magazine reports in 1996 that NORAD’s alert units “work around the clock, and usually have five minutes or less to scramble when the warning klaxon sounds.” [Airman, 1/1996] A few days after 9/11, the Cape Cod Times will report that, “if needed,” the fighters on alert at Otis Air Base “must be in the air within five minutes.” [Cape Cod Times, 9/15/2001] According to Spencer, pilots on alert duty at Langley Air Force Base are “always just five minutes away from rolling out of the hangars in their armed fighters.” [Spencer, 2008, pp. 117] Captain Tom Herring, a full-time alert pilot at Homestead Air Reserve Base in Florida, says in 1999, “If needed, we could be killing things in five minutes or less.” [Airman, 12/1999] In 1994, NORAD is planning to reduce the number of alert sites in the continental United States and, according to a report published that year by the General Accounting Office, “Each alert site will have two fighters, and their crews will be on 24-hour duty and ready to scramble within five minutes.” [General Accounting Office, 5/3/1994, pp. 16]
‘Everything Else Just Stops’ following Scramble Order – Once an order to scramble is received, alert pilots try to get airborne as quickly as they can. According to Richard, being a pilot sitting on alert is “akin to being a fireman.” Richard will later recall that when the horn goes off, signaling for him to get airborne, “no matter where I was or what I was doing, I had to swiftly don my anti-g suit, parachute harness, and helmet, run to the jet where my maintenance crew was waiting, fire up the powerful jet engines, and check all of the systems while simultaneously talking with the Otis command post who had a direct feed from NEADS [NORAD’s Northeast Air Defense Sector]. When the horn blew, a frantic, harrowing race into a high pressure situation ensued.” [Richard, 2010, pp. 8] Herring says: “We go full speed when that klaxon sounds and people know not to get in front of us, because we take scrambles very seriously.… We’re fired up about what we do and we’re the best at what we do.” [Airman, 12/1999] Technical Sergeant Don Roseen, who keeps the alert fighters at Tyndall Air Force Base in Florida ready for instant takeoff, says in 1999 that these fighters are “hot and cocked, they are ready.” Roseen says that when the klaxon goes off, “everything else just stops.”
Suspicious Aircraft ‘Could Be a Terrorist’ – When they are taking off, pilots may be unaware exactly why they are being scrambled. Major Steve Saari, an alert pilot at Tyndall Air Force Base, says: “There are several different things you could run into and you don’t know until you’re airborne. And sometimes you can’t tell until you have a visual identification.” Saari says: “The unknown [aircraft] could be something as simple as a lost civilian or it could be somebody defecting from Cuba. It could be a terrorist or anything in-between.” [American Defender, 3/1999] According to Airman magazine, the unidentified aircraft might be “Cuban MiGs, drug traffickers, smugglers, hijackers, novice pilots who’ve filed faulty flight plans, or crippled aircraft limping in on a wing and a prayer.” [Airman, 12/1999]
Intercepted Aircraft Could Be Shot Down – Fighters can respond in a number of ways when they intercept a suspect aircraft. In 2011, Jeff Ford—at that time the aviation and security coordinator for the NORAD and USNORTHCOM Interagency Coordination Directorate—will say that before 9/11, scrambled fighters can “intercept the aircraft, come up beside it, and divert it in the right direction toward an airfield or find out what the problems are in order to assist.” [Defense Video and Imagery Distribution System, 9/8/2011] According to MSNBC: “[I]nterceptors can fly alongside a plane to see who’s flying it. They can also try to force it off course. Once it is apparent that it is not following directions, it might be forced over the ocean or to a remote airport—or even shot down.” [MSNBC, 9/12/2001] On September 11, 2001, NEADS will scramble fighters that are kept on alert in response to the hijackings (see 8:46 a.m. September 11, 2001 and 9:24 a.m. September 11, 2001). [New York Times, 10/16/2001; 9/11 Commission, 7/24/2004, pp. 20, 26-27]
September 10, 2001: Military ‘Infocon’ Alert Level Reduced because of Perceived Lower Threat of Computer Attacks
The US military reduces the Information Operations Condition (Infocon) to Normal—the lowest possible threat level—less than 12 hours before the 9/11 attacks commence, reportedly due to reduced fears of attacks on computer networks.
Level Reduced Due to ‘Decreased Threat’ – The Infocon level is lowered to Normal, meaning there is no special threat, at 9:09 p.m. this evening. The reason for this, according to historical records for the 1st Fighter Wing at Langley Air Force Base, Virginia, is “a decreased threat from hacker and virus attacks on the computer networks across the US.” [Colorado Springs Gazette, 5/3/2001; 1st Fighter Wing History Office, 12/2001] Since October 1999, the commander of the US Space Command has been in charge of Defense Department computer network defense, and has had the authority to declare Infocon levels. [IAnewsletter, 12/2000 ] General Ralph Eberhart, the current commander of both the US Space Command and NORAD, is thus responsible for evaluating the threat to US military computers and issuing information conditions—“Infocons”—to the US military. He is presumably therefore responsible for lowering the Infocon level this evening.
Higher Infocon Level Requires More Precautions – It is unclear what difference the reduced Infocon level makes. But an e-mail sent earlier in the year from Peterson Air Force Base in Colorado, where NORAD and the US Space Command are headquartered, revealed the steps to be taken when the Infocon level is raised one level from Normal, to Alpha. These steps include “changing passwords, updating keys used to create classified communication lines, minimizing cell phone use, backing up important documents on hard drive, updating virus protection on home computers, reporting suspicious activity, and reviewing checklists.” [Colorado Springs Gazette, 5/3/2001]
Level Increased Earlier in Year – It is also unclear what the Infocon level was prior to being reduced this evening and why it had been at that raised level. Pentagon networks were raised to Infocon Alpha for the first time at the end of April this year, as a precaution against attacks on US systems, after Chinese hackers warned of such attacks in Internet chat room postings. [United Press International, 4/30/2001; Colorado Springs Gazette, 5/3/2001; United Press International, 7/24/2001] The Infocon level was raised to Alpha a second time in late July, due to the threat posed by the Code Red computer virus. [United Press International, 7/24/2001; US Department of Defense, 7/24/2001] It will be raised again, from Normal to Alpha, during the morning of September 11, immediately after the second attack on the World Trade Center takes place (see 9:04 a.m. September 11, 2001). [1st Fighter Wing History Office, 12/2001]
System Intended to Protect Defense Department Computers – The Joint Chiefs of Staff established the Infocon system in March 1999 in response to the growing and sophisticated threat to Defense Department information networks. The system is intended as a structured, coordinated approach to defend against and react to attacks on Defense Department systems and networks. Reportedly, it “provides a structured, operational approach to uniformly heighten or reduce defensive posture, defend against unauthorized activity, and mitigate sustained damage to the defense information infrastructure.” It is analogous to other Defense Department alert systems, such as Defense Condition (Defcon) and Threat Condition (Threatcon). The Infocon system comprises five levels of threat, each with its own procedures for protecting systems and networks. These levels go from Normal, through Alpha, Bravo, and Charlie, up to Delta, which, according to Rear Admiral Craig Quigley, the deputy assistant secretary of defense for public affairs, is when “You’re currently under an absolutely massive hack attack, from a variety of means, from a variety of sources. You’re talking a very concerted, focused attack effort to get into [Defense Department] systems.” [IAnewsletter, 12/2000 ; General Accounting Office, 3/29/2001
; US Department of Defense, 7/24/2001]
6:30 a.m.-12:00 p.m. September 11, 2001: Radar Located in Northeast US Offline for Repair Work
Military radar in Massachusetts, which is used by NORAD’s Northeast Air Defense Sector (NEADS), is out of use this morning in order to undergo maintenance work. [9/11 Commission, 10/27/2003 ; 9/11 Commission, 10/27/2003
]
Radar Scheduled to Go Down – The J53 radar in North Truro, Massachusetts, is one of a number of radar sites that NEADS receives data from. [United States Space Command, 12/30/1995; Jane’s C4I Systems, 9/1/2005; North American Aerospace Defense Command, 10/23/2006 ] It has a range of 250 miles. According to Technical Sergeant Jeffrey Richmond, the assistant air surveillance technician at NEADS, J53 is scheduled to go down this morning for some major repairs to be carried out. [9/11 Commission, 10/27/2003
; 9/11 Commission, 10/27/2003
]
NEADS Personnel Refer to Radar – A member of staff at NEADS apparently refers to the J53 radar being offline shortly after those on the NEADS operations floor learn of the Flight 11 hijacking (see (8:38 a.m.) September 11, 2001) and while they are trying to locate the hijacked aircraft. She mentions that NEADS technicians “still should be able to get it” (presumably referring to the plane’s radar track) “without 53.” [North American Aerospace Defense Command, 9/11/2001] (According to Richmond, the area covered by J53 is overlapped by other radars, “so the need for radar to undergo routine maintenance is accounted for.”) ID technician Shelley Watson will later recall that the NEADS ID desk uses the J53 radar as a point from which it attempts to locate Flight 11. At some time during the morning, Richmond insists that J53 be put back online at some capacity. Whether this happens is unstated. [9/11 Commission, 10/27/2003 ; 9/11 Commission, 10/27/2003
]
Radar Part of ‘Joint Surveillance System’ – The J53 radar site is part of the Joint Surveillance System (JSS). [Transportation Safety Board of Canada, 9/2/1998; US Department of the Air Force, 11/1/1999 ; 9/11 Commission, 2004] The JSS consists of “long-range radar sites around the perimeter of the US, with data shared by the [Department of Defense], FAA, Customs, and others.” A 2003 Department of Defense report will state that, at the time of the 9/11 attacks, US air defense relies “largely on outward looking ground-based radars, specifically, the Joint Surveillance System.” [US Department of Defense, 7/2003
] According to General Ralph Eberhart, the commander of NORAD, NORAD has access to the JSS, “which is that system that rings the United States and looks out.” He will say this system “looks for that foreign threat. It looks for someone coming into our airspace that’s not authorized.” [US Congress. Senate, 10/25/2001]
8:30 a.m.-8:40 a.m. September 11, 2001: CONR Commander Arnold in Teleconference, Unavailable to Immediately Authorize Scrambling of Fighters
Major General Larry Arnold, the commander of the Continental United States NORAD Region (CONR), participates in a video teleconference with other senior NORAD officials and is therefore unavailable when NORAD’s Northeast Air Defense Sector (NEADS) tries contacting him for authorization to scramble fighter jets in response to the hijacked Flight 11. [Filson, 2002; 9/11 Commission, 5/23/2003; 9/11 Commission, 7/24/2004, pp. 20; Spencer, 2008, pp. 31] Arnold is in the video teleconferencing room at CONR headquarters, at Tyndall Air Force Base, Florida.
Teleconference Discussing ‘Russian Exercise’ – Robert Del Toro, an intelligence officer with the 1st Air Force who is in the room with Arnold, will tell the 9/11 Commission that the teleconference is “about the Russian exercise.” [9/11 Commission, 2/2/2004 ] Del Toro is presumably referring to either the Russian Air Force exercise that NORAD is currently monitoring (see September 9, 2001) or the exercise, Vigilant Guardian, that NORAD is currently running, which reportedly includes a simulated war against Russia (see (8:00 a.m.) September 11, 2001). [North American Aerospace Defense Command, 9/9/2001; Arkin, 2005, pp. 545; Denver Post, 8/28/2011]
NORAD Officials from US and Canada on Teleconference – It is unclear exactly who else is participating in the teleconference. Arnold will tell the 9/11 Commission that as well as “our folks”—presumably referring to some of his colleagues at CONR—it includes “the NORAD staff.” The “NORAD staff” presumably includes officials from NORAD’s operations center in Cheyenne Mountain, Colorado, and its headquarters at Peterson Air Force Base, Colorado. [9/11 Commission, 5/23/2003] Arnold will tell author Leslie Filson that the teleconference includes “the CINC”—presumably meaning General Ralph Eberhart, the commander in chief of NORAD, who is at Peterson Air Force Base—and also officials from the Alaskan NORAD Region (ANR) and the Canadian NORAD Region (CANR). [Filson, 2002; 9/11 Commission, 3/1/2004 ]
Arnold Not Alerted to Hijacking – While Arnold is on the teleconference, NEADS calls CONR to alert him to the suspected hijacking of Flight 11 (see (8:38 a.m.) September 11, 2001), but no one at CONR interrupts the teleconference to fetch him or pass on to him the urgent message from NEADS. Arnold will only learn of the hijacking after the teleconference ends (see (8:40 a.m.) September 11, 2001) and he will then call NEADS back (see (8:42 a.m.) September 11, 2001). [9/11 Commission, 5/23/2003; Spencer, 2008, pp. 31, 38]
8:45 a.m.-9:00 a.m. September 11, 2001: NORAD Commander Eberhart Learns of the Hijacking but Isn’t ‘Too Excited’ about It
General Ralph Eberhart, the commander of NORAD, learns that a plane has been hijacked and then drives to his office, where he sees the television reports showing an aircraft has crashed into the World Trade Center, but he does not initially realize a terrorist attack is taking place. Eberhart has just arrived back at his home in Colorado after going for a jog when, at around 8:45 a.m., he receives a call from Captain Michael Jellinek, command director at NORAD’s operations center in Cheyenne Mountain. Jellinek tells Eberhart that the FAA has reported a suspected hijacking on the East Coast. He says this is a “real-world” hijacking and not part of an exercise, and that NORAD has authorized the scrambling of fighter jets in response. Eberhart will later recall that he isn’t “too excited” about the incident at this time and is thinking it is a “traditional” hijacking. Shortly after receiving the call, he drives to his office, at NORAD’s headquarters at Peterson Air Force Base in Colorado Springs. He arrives there at around 9:00 a.m. to 9:10 a.m., he will recall, and then sees CNN’s coverage of the burning WTC on television. He calls the Cheyenne Mountain Operations Center and asks if the aircraft that crashed into the WTC was the plane that was suspected of being hijacked. The person he speaks to says reports on CNN indicated that a small aircraft, and not the hijacked commercial aircraft, hit the WTC. There is apparently “great confusion in the system” at this time, Eberhart will comment. He will say the information NORAD currently has is only as good as what the FAA has provided. Eberhart will see the second hijacked plane, Flight 175, crashing into the WTC live on television at 9:03 a.m. and then realize that a coordinated terrorist attack is taking place (see (9:03 a.m.-9:30 a.m.) September 11, 2001). [9/11 Commission, 3/1/2004; 9/11 Commission, 3/1/2004 ; 9/11 Commission, 3/1/2004; 9/11 Commission, 3/1/2004]
9:03 a.m.-9:30 a.m. September 11, 2001: NORAD Commander Eberhart Sees the Second Crash on TV but Does Not Immediately Go to NORAD’s Operations Center
General Ralph Eberhart, the commander of NORAD, realizes the US is under attack after he sees Flight 175 crashing into the World Trade Center on television and then considers whether he should go to NORAD’s Cheyenne Mountain Operations Center (CMOC). Eberhart was at his home in Colorado when he learned about the hijacking of Flight 11 and then went to his office at NORAD’s headquarters at Peterson Air Force Base in Colorado Springs (see (8:45 a.m.-9:00 a.m.) September 11, 2001). In his office, he sees the second hijacked plane, Flight 175, crashing into the WTC live on television at 9:03 a.m. (see 9:03 a.m. September 11, 2001). He is unaware that a second aircraft has been hijacked, but realizes immediately that a coordinated terrorist attack is taking place. Right away, he tries to contact General Henry Shelton, the chairman of the Joint Chiefs of Staff, but is unable to do so, because Shelton is currently airborne, being flown to Hungary for a NATO conference (see 7:15 a.m. September 11, 2001). Eberhart then tries contacting General Richard Myers, the vice chairman of the Joint Chiefs of Staff, and is able to reach him on Capitol Hill, where he has been meeting Senator Max Cleland (D-GA) (see (Before 9:30 a.m.) September 11, 2001). Eberhart then focuses his attention on determining whether he should stay at NORAD headquarters or go to the CMOC, which is about 30 minutes’ drive away from Peterson Air Force Base. He initially decides to stay in his office. This, he will say, is because the CMOC is already well manned and also because there are “dead spots” in which he would be out of phone coverage for five to 10 minutes at a time during the drive to the operations center. However, Eberhart subsequently decides to go to the CMOC. He will tell the 9/11 Commission that he leaves his office to head there at approximately 9:30 a.m., during a lull in transmissions on a teleconference, which he is presumably listening to. [9/11 Commission, 3/1/2004; 9/11 Commission, 3/1/2004 ; 9/11 Commission, 3/1/2004; 9/11 Commission, 3/1/2004] He will experience problems receiving phone calls while he is traveling to the CMOC (see (Between 9:35 a.m. and 10:35 a.m.) September 11, 2001). [Colorado Springs Gazette, 6/16/2006; Denver Post, 7/28/2006]
9:04 a.m. September 11, 2001: Military Raises ‘Infocon’ Threat Level
The 1st Fighter Wing at Langley Air Force Base, Virginia, receives notification from NORAD of an increased Information Operations Condition (Infocon) threat level. The message from NORAD directs the 1st Fighter Wing command post to upgrade the Infocon computer security level from Normal to Alpha. According to the wing’s own records, this is “the first message correspondence” the wing receives “to indicate that September 11th would not be an average day.” [1st Fighter Wing History Office, 12/2001] Steps to be taken under Infocon Alpha reportedly include “changing passwords, updating keys used to create classified communication lines, minimizing cell phone use, backing up important documents on hard drive, updating virus protection on home computers, reporting suspicious activity, and reviewing checklists.” [Colorado Springs Gazette, 5/3/2001]
Five Security Levels – The Infocon system provides a structured, coordinated approach for defending against and reacting to attacks on Defense Department systems and networks. It comprises five levels of threat, each with its own protective procedures. These levels go from Normal, through Alpha, Bravo, and Charlie, up to Delta. [IAnewsletter, 12/2000 ; General Accounting Office, 3/29/2001
] General Ralph Eberhart, the commander of both the US Space Command and NORAD, is responsible for evaluating the threat to military computers and issuing information conditions—“Infocons”—to the US military. [Colorado Springs Gazette, 5/3/2001] He is presumably therefore responsible for currently raising the Infocon level.
Threat Level Lowered on Previous Evening – The Infocon level was in fact lowered to Normal the previous evening, reportedly because of a reduced threat to US computer networks from hacker and virus attacks (see September 10, 2001). [1st Fighter Wing History Office, 12/2001] The 1st Fighter Wing is the “host unit” at Langley Air Force Base, which is about 130 miles from Washington, DC. It includes three fighter squadrons, which fly the F-15 Eagle fighter jet. [Virginian-Pilot, 9/20/2001; Langley Air Force Base, 11/2003; Air Force Print News, 11/9/2006]
Before 9:29 a.m. September 11, 2001: NORAD Commander Eberhart Talks to Joint Chiefs Vice Chairman Myers’s Executive Assistant
Colonel Matthew Klimow, executive assistant to General Richard Myers, vice chairman of the Joint Chiefs of Staff, receives a call from General Ralph Eberhart, the commander of NORAD, who urgently wants to talk to Myers. Klimow is at the Pentagon, in an office in the building’s outer ring, and has seen the news of the crashes at the World Trade Center on television. [George C. Marshall European Center for Security Studies, 8/3/2012] Eberhart, meanwhile, is in his office at NORAD’s headquarters at Peterson Air Force Base in Colorado Springs, Colorado. After seeing the second crash at the WTC on television, he realized that a coordinated terrorist attack was underway (see (9:03 a.m.-9:30 a.m.) September 11, 2001). [9/11 Commission, 3/1/2004; 9/11 Commission, 7/24/2004, pp. 465] He tried contacting General Henry Shelton, chairman of the Joint Chiefs of Staff, but was unable to reach him since Shelton is currently airborne, flying across the Atlantic Ocean for a NATO meeting in Europe (see 7:15 a.m. September 11, 2001), and so he now wants to talk to Myers instead. [9/11 Commission, 3/1/2004 ; 9/11 Commission, 3/1/2004; Shelton, Levinson, and McConnell, 2010, pp. 430-432] The Red Switch phone on Klimow’s desk, therefore, starts to ring. The Red Switch, Klimow will later describe, “is the global secure telephone and conferencing system that provides rapid top-secret communication links between the White House, the Pentagon, and all of our major commands around the world.” Klimow picks up the phone and hears Eberhart’s voice on the line. Knowing that Eberhart is the commander of NORAD, he will recall, “My heart sank because NORAD is responsible for defending North America from air attack.” Eberhart asks to speak to Myers. Myers, however, is away from the Pentagon, on Capitol Hill, where he has been meeting Senator Max Cleland (D-GA) (see Shortly Before 9:00 a.m. September 11, 2001 and (After 9:03 a.m.) September 11, 2001). “Sir, he’s on Capitol Hill,” Klimow explains. “Man, it’s urgent,” Eberhart says. “Get hold of him, get him to a phone,” he instructs Klimow. “I’m on it,” Klimow replies. Klimow then hangs up the Red Switch phone. He will subsequently call Myers and let him know that NORAD wants to talk to him (see (Before 9:29 a.m.) September 11, 2001), and Myers will talk to Eberhart (see (Before 9:30 a.m.) September 11, 2001). The exact time when Klimow speaks to Eberhart will be unstated. However, the call apparently takes place sometime before 9:29 a.m., since Klimow will recall that after he talks to Eberhart and then phones Myers, he receives another call on the Red Switch phone, inviting him to join the “significant event conference.” [Myers and McConnell, 2009, pp. 7-9; George C. Marshall European Center for Security Studies, 8/3/2012] This conference call will be convened by the National Military Command Center at the Pentagon at 9:29 a.m. (see 9:29 a.m.-9:34 a.m. September 11, 2001). [9/11 Commission, 7/24/2004, pp. 37]
Before 9:30 a.m. September 11, 2001: NORAD Commander Eberhart Updates Joint Chiefs Vice Chairman Myers on the Attacks
General Richard Myers, vice chairman of the Joint Chiefs of Staff, talks briefly over the phone with General Ralph Eberhart, the commander of NORAD, who updates him on what is happening and the actions NORAD is taking in response to the terrorist attacks. [Armed Forces Radio And Television Service, 10/17/2001; 9/11 Commission, 2/17/2004 ] Myers is on Capitol Hill, where he has been meeting with Senator Max Cleland (D-GA). He is aware of the two crashes at the World Trade Center and realizes they were terrorist attacks (see Shortly Before 9:00 a.m. September 11, 2001 and (After 9:03 a.m.) September 11, 2001). [MSNBC, 9/11/2002; Myers and McConnell, 2009, pp. 7-9] Eberhart, meanwhile, is in his office at NORAD’s headquarters at Peterson Air Force Base in Colorado Springs, Colorado. He, too, is aware of the crashes at the WTC and has determined that a coordinated terrorist attack is underway (see (9:03 a.m.-9:30 a.m.) September 11, 2001). [9/11 Commission, 3/1/2004; 9/11 Commission, 7/24/2004, pp. 465] He called Colonel Matthew Klimow, Myers’s executive assistant, who is at the Pentagon, and said he urgently wanted to speak to the vice chairman (see (Before 9:29 a.m.) September 11, 2001). Klimow then called Myers and let him know that NORAD wanted to talk to him (see (Before 9:29 a.m.) September 11, 2001). [George C. Marshall European Center for Security Studies, 8/3/2012]
Myers Has to Talk on an Unsecured Line – As Myers is coming out of Cleland’s office following his meeting with the senator, his military aide, Captain Chris Donahue, approaches him and says Eberhart is on his cell phone and wants to talk to him. “In this emergency, I had to forgo the luxury of a secure encrypted Red Switch phone and use Donahue’s cell,” Myers will later comment. [Myers and McConnell, 2009, pp. 9] Myers and Eberhart then have a “short conversation.”
Eberhart Describes the ‘Confused’ Situation in the Air – Eberhart updates Myers on the current situation. He says the two towers of the WTC have been hit and there are “several hijack codes in the system.” [9/11 Commission, 2/17/2004 ] By this, he means that “the transponders in the aircraft are talking to the ground and they’re saying… ‘We’re being hijacked,’” Myers will explain. [MSNBC, 9/11/2002] However, none of the pilots of the planes hijacked this morning punched the emergency four-digit code that would indicate a hijacking into their planes’ transponders (see (8:13 a.m.-9:28 a.m.) September 11, 2001). [CNN, 9/11/2001; Newsday, 9/13/2001] It is therefore unclear what “hijack codes” Eberhart is referring to. In one interview, Myers will recall Eberhart saying that the situation in the air is “confused.” He says there are “aircraft squawking that they had been hijacked” and he is “going to land them all at the nearest suitable base to sort it out.” [American Forces Press Service, 9/9/2011] On another occasion, Myers will recall him saying, “The decision I’m going to make is, we’re going to land everybody and we’ll sort it out when we get them on the ground.” [Council on Foreign Relations, 6/29/2006]
Eberhart and Myers Don’t Discuss ‘Rules of Engagement’ – Eberhart says NORAD has scrambled fighter jets in response to the hijackings (see 8:46 a.m. September 11, 2001 and 9:24 a.m. September 11, 2001). However, the two men do not discuss the issue of “rules of engagement” for the fighter pilots during this conversation. Indeed, Myers makes no decisions and takes no action at this time. Instead, Eberhart does most of the talking. Myers will recall that he “mainly listened” during the call. He tells Eberhart he needs to get to the National Military Command Center at the Pentagon because he cannot communicate from a cell phone, presumably referring to the fact that it is an unsecured line. “I’m going to head back to the Pentagon. I’ll talk to you there,” he says. [MSNBC, 9/11/2002; 9/11 Commission, 2/17/2004 ] “Get back to the Pentagon,” Eberhart tells him. [9/11 Commission, 3/1/2004]
Call Occurs before 9:30 a.m. – The time when this call occurs is unclear. At some time after talking to Myers, Eberhart will head out to NORAD’s Cheyenne Mountain Operations Center (see (Between 9:35 a.m. and 10:35 a.m.) September 11, 2001). He will estimate that he leaves Peterson Air Force Base at “approximately” 9:30 a.m. If correct, this would mean the call occurs before 9:30 a.m. [9/11 Commission, 3/1/2004 ; 9/11 Commission, 3/1/2004] Myers, meanwhile, will be vague about when it occurs, telling the 9/11 Commission only that it takes place after the second crash at the WTC, sometime between 9:03 a.m. and 9:30 a.m. Furthermore, while Klimow’s account of this morning’s events will imply that it occurs after Klimow called the vice chairman and let him know that NORAD wanted to talk to him, in his 2009 memoir, Myers will describe talking to Eberhart before he receives the call from Klimow. [9/11 Commission, 2/17/2004
; Myers and McConnell, 2009, pp. 9; George C. Marshall European Center for Security Studies, 8/3/2012] Myers will subsequently head back to the Pentagon. [Council on Foreign Relations, 6/29/2006] He does so “immediately” after talking to Eberhart, he will say. [Armed Forces Radio And Television Service, 10/17/2001] He will learn about the attack on the Pentagon, which occurs at 9:37 a.m. (see 9:37 a.m. September 11, 2001), around the time he is leaving the building and getting into his car on Capitol Hill (see Shortly After 9:37 a.m. September 11, 2001). [MSNBC, 9/11/2002; 9/11 Commission, 2/17/2004
]