Wikiposts
Search
Tech Log The very best in practical technical discussion on the web

AF447

Thread Tools
 
Search this Thread
 
Old 16th Jun 2009, 16:46
  #1701 (permalink)  
PJ2
 
Join Date: Mar 2003
Location: BC
Age: 76
Posts: 2,484
Received 0 Likes on 0 Posts
JuggleDan;
When you increase "software intelligence", you exponentially increase incorrect specification risks, code complexity, testing costs... If you want a cheap, testable, reliable software, better make it as simple as feasible. You can go for more complex softwares only if you have the extra-money... and are willing to take the extra-risks that come with them...
Superb post - said far better than the point I was trying to make about expense in design. Unfortunately, your wisdom and experience as an engineer commenting on this thread will be ignored so ignorance can prevail. (I haven't had a good laugh in a while until I read some stupid comment about the software not letting the pilot fly the airplane until the ECAM is complete. Someone's stuck in childhood understandings of the world where mom says no desert until you finish your vegetables...

Quite unbelievable. ELAC's post a few pages ago is spot on. The discussion is agenda-driven and some other venue will have to be found for serious, knowledgeable enquiry.

Thanks again for your contribution.

PJ2
PJ2 is offline  
Old 16th Jun 2009, 16:48
  #1702 (permalink)  
 
Join Date: Sep 1998
Location: wherever
Age: 55
Posts: 1,616
Likes: 0
Received 0 Likes on 0 Posts
EASA Safety Information Bulletin
SIB No.: 2009 - 17
Issued: 09 June 2009
Subject: Unreliable Airspeed indication
Background: During the recent accident of an A330 into the Atlantic Ocean
on 01 June 2009, and without prejudging the final outcome of
the investigation, a discrepancy between the different
measured airspeeds was reported. There have been a number
of occurrences of unreliable airspeed indications or misleading
air data information. The root cause of this may be due to, but
is not limited to, inappropriate maintenance, contamination by
small objects or materials on the ground or in the air, extreme
environmental conditions producing icing outside the
certification envelope of the probes or large amount of water
ingestion.
Description: The primary purpose of the pitot-static system is to provide the
flight crew with airspeed information, required to safely control
the aircraft. As noted above, the origins of potential pitot-static
system malfunctions are numerous and cannot be totally
excluded in the operational context. The Aircraft Flight
Manuals and/or Flight Crew Operating Manuals include
procedures for unreliable airspeed indication (Air data system
misleading information) and these should be well known by
flight crews. Correct application of these procedures by flight
crews may be crucial for assuring the safety of the aircraft
when such Pitot-static malfunctions occur.
Recommendations: Operators should ensure that flight crews have proper
knowledge and proficiency:
- To detect and to identify unreliable airspeed indication.
- To apply immediate and conservative actions for ensuring
short term safe flight control, in accordance with the
manufacturer procedures developed for the specific aircraft;
the use of memory items should be considered.
- To apply procedures for the safe continuation of a flight with
unreliable airspeed indication up to a safe landing.
EASA SIB No: 2009 - 17
This is information only. Recommendations are not mandatory.
EASA Form 117 Page 2/2
Familiarisation of flight crews with unreliable airspeed
indication procedures should be provided through adequate
training. Flight crew knowledge and proficiency should be
checked on a regular basis.
Applicability: All aeroplanes operating in commercial air transport.
Contact: For further information contact the Airworthiness Directives,
Safety Management & Research Section, Certification
Directorate, EASA. E-mail: [email protected].
I think EASA know what happened don't you?
FE Hoppy is offline  
Old 16th Jun 2009, 17:16
  #1703 (permalink)  
 
Join Date: Jan 2008
Location: Herts, UK
Posts: 748
Likes: 0
Received 0 Likes on 0 Posts
The A320 elevators and rudder hinges whose actuators had been
removed
shattered and the rudder and elevators came off.
That alone negates any other of his opinions as meaningless...
+ the rudder from F-GZCP seems still fixed to the fin itself.
HarryMann is offline  
Old 16th Jun 2009, 17:30
  #1704 (permalink)  
 
Join Date: Jun 2009
Location: ATL
Age: 67
Posts: 131
Likes: 0
Received 0 Likes on 0 Posts
When you increase "software intelligence", you exponentially increase incorrect specification risks, code complexity, testing costs... If you want a cheap, testable, reliable software, better make it as simple as feasible. You can go for more complex softwares only if you have the extra-money... and are willing to take the extra-risks that come with them...
Naturally.

There'll have to be a demonstrated need, i.e., accident reports, pilot concerns, claiming there becomes too much for the crew to handle under a certain set of conditions. If true, then that'll become reflected in requirements to fix it. You can want a cheap airplane, but the requirements will tell you how cheap it can be.
ClippedCub is offline  
Old 16th Jun 2009, 17:37
  #1705 (permalink)  
I don't own this space under my name. I should have leased it while I still could
 
Join Date: Dec 2002
Location: Lincolnshire
Age: 81
Posts: 16,777
Received 5 Likes on 5 Posts
First, I had a Pprune database error this message was posted at 1840 GMT+1hr.

Originally Posted by FE Hoppy
I think EASA know what happened don't you?
No.

Recommendations: Operators should ensure that flight crews have proper knowledge and proficiency:
- To detect and to identify unreliable airspeed indication.
- To apply immediate and conservative actions for ensuring
short term safe flight control, in accordance with the
manufacturer procedures developed for the specific aircraft;
the use of memory items should be considered.
- To apply procedures for the safe continuation of a flight with
unreliable airspeed indication up to a safe landing.
I think you might conclude that the air data system might have been a cause. They also say that flight crews (any flight crew) needs to have proper knowledge and proficiency in circumstances where there are air data errors.

You cannot infer that the crew on AF447 were not knowledgable or proficient nor that the air data system cause the crash. You might tentatively conclude that one or both were contributory but nothing else.
Pontius Navigator is offline  
Old 16th Jun 2009, 17:49
  #1706 (permalink)  
 
Join Date: Mar 2002
Location: Florida
Posts: 4,569
Likes: 0
Received 1 Like on 1 Post
EASA worth a read

EASA Safety Information Bulletin
SIB No.: 2009 - 17
Issued: 09 June 2009
Subject: Unreliable Airspeed indication
Background: During the recent accident of an A330 into the Atlantic Ocean
on 01 June 2009, and without prejudging the final outcome of
the investigation, a discrepancy between the different
measured airspeeds was reported. There have been a number
of occurrences of unreliable airspeed indications or misleading
air data information. The root cause of this may be due to, but
is not limited to, inappropriate maintenance, contamination by
small objects or materials on the ground or in the air, extreme
environmental conditions producing icing outside the
certification envelope of the probes or large amount of water
ingestion.
Description: The primary purpose of the pitot-static system is to provide the
flight crew with airspeed information, required to safely control
the aircraft. As noted above, the origins of potential pitot-static
system malfunctions are numerous and cannot be totally
excluded in the operational context. The Aircraft Flight
Manuals and/or Flight Crew Operating Manuals include
procedures for unreliable airspeed indication (Air data system
misleading information) and these should be well known by
flight crews. Correct application of these procedures by flight
crews may be crucial for assuring the safety of the aircraft
when such Pitot-static malfunctions occur.
Recommendations: Operators should ensure that flight crews have proper
knowledge and proficiency:
- To detect and to identify unreliable airspeed indication.
- To apply immediate and conservative actions for ensuring
short term safe flight control, in accordance with the
manufacturer procedures developed for the specific aircraft;
the use of memory items should be considered.
- To apply procedures for the safe continuation of a flight with
unreliable airspeed indication up to a safe landing.
EASA SIB No: 2009 - 17
This is information only. Recommendations are not mandatory.
EASA Form 117 Page 2/2
Familiarisation of flight crews with unreliable airspeed
indication procedures should be provided through adequate
training. Flight crew knowledge and proficiency should be
checked on a regular basis.
Applicability: All aeroplanes operating in commercial air transport.
Contact: For further information contact the Airworthiness Directives,
Safety Management & Research Section, Certification
Directorate, EASA. E-mail: .

I think EASA know what happened don't you?
Yes. This was known from the earliest by the investigation. What is puzzling is why did it happen?

Now we are at the stage what are we going to do about it.?

On the surface it seems like the pitot tube issue is only a "minor malfunction". However I have to ask is it a conditional malfunction in that it is lilely to be combined with other serious workloads on the crew?

If so we either have to minimize the heck out the pitot tube combinations or train the pilots for this malfunction in turbulence. (I won't use the word "severe" since we still don't know)
lomapaseo is offline  
Old 16th Jun 2009, 18:22
  #1707 (permalink)  
 
Join Date: Sep 2008
Location: MI
Posts: 570
Likes: 0
Received 0 Likes on 0 Posts
HarryMann -
That alone negates any other of his opinions as meaningless...
+ the rudder from F-GZCP seems still fixed to the fin itself.
Ah.....if you'll read his report, he was NOT writing about the AF 447 tail assembly.
DC-ATE is offline  
Old 16th Jun 2009, 18:35
  #1708 (permalink)  
 
Join Date: Aug 2006
Location: Swansea
Posts: 61
Likes: 0
Received 0 Likes on 0 Posts
RWA:

I've quite often 'advised' her to choose Boeings, rather than A330s/A340s, whenever possible. Without going into too much technical detail.

She just emailed me this arvo to say, "Thanks, Dad. Reading about the Air France thing, guess I'll try to follow your advice from now on........."

Anyone on here think that a basically-thick, but luckily 'cunning,' guy like me was over-reacting? Or that my (highly-intelligent, 'to a fault', honours-law-degree and Masters' ticket) daughter, who knows nothing at ALL about aviation, is over-reacting too?
I'm just PPL/SLF, with a similar professional background to your daughter, but I've no doubt you're both over-reacting, and that there are many, many aviation professionals on this site who could tell you the same.

But really you should get it from the horse's mouth: Boeing themselves. Have a look at their 2008 Statistical Summary of Commercial Jet Airplane Accidents. Pay particular attention to page 19, the summary of hull loss rates by aircraft type. I see nothing on that page to favour Boeing over Airbus. A casual inspection very much suggests the opposite in fact, although the period of time covered by the data undoubtedly muddies the waters.

But whether or not one type could be demonstrated to be superior to another is largely irrelevant. The rate of fatal hull losses per million departures is so fantastically low (~1) that any underlying systematic difference between manufacturers is likely to be a small change in an already tiny risk. Anyone seriously worried by such a marginal change should give up air travel for good. Not because air travel itself is dangerous, but because anyone so sensitive to such tiny risks must surely find getting in the car for the trip to the airport to be an activity so foolishly risky that they would never countenance it...
DespairingTraveller is offline  
Old 16th Jun 2009, 18:36
  #1709 (permalink)  
 
Join Date: Mar 2006
Location: England
Posts: 995
Likes: 0
Received 4 Likes on 2 Posts
Re pitot icing; the principles of pitot operation is that air does not flow through the tubing, the system captures a pressure. There are some types (probably used by Airbus) which allow a small calibrated leak, but downstream of the ‘leak’ the systems’ operation are essentially identical.
A change in pitot pressure (erratic IAS) could occur quite quickly if an ice/water accumulation reduces the effective diameter of the tube, particularly with the ‘leaky’ systems. Diagrams showing the types of pitot and a range of disruptive mechanisms are shown in www.sae.org/events/icing/presentations/2007s30duvivier.pdf
An indication of the atmospheric conditions, icing type, and rate of icing can be seen by comparing the events of unusual engine icing and TAT probe icing – http://airs-icing.org/AIRS_II/AIAAReno2006/AIAA-2006-206-739.pdf
PEI_3721 is online now  
Old 16th Jun 2009, 18:42
  #1710 (permalink)  
 
Join Date: Nov 2007
Location: Lancing, Sussex
Age: 92
Posts: 255
Likes: 0
Received 0 Likes on 0 Posts
AF447

Having worked for a company manufacturing heated pitots that was bought by Goodrich, I accept that pitot heaters can fail, but what are the chances of three failing in a short period, all three would have been working at takeoff, it seem to me to be extremely unlikely that three would fail at once, they would likely be from different manufacturing batches.
Exnomad is offline  
Old 16th Jun 2009, 18:51
  #1711 (permalink)  
 
Join Date: Jan 2008
Location: Vancouver, BC, Canada
Posts: 33
Likes: 0
Received 0 Likes on 0 Posts
Having worked for a company manufacturing heated pitots that was bought by Goodrich, I accept that pitot heaters can fail, but what are the chances of three failing in a short period, all three would have been working at takeoff, it seem to me to be extremely unlikely that three would fail at once, they would likely be from different manufacturing batches.
What about extremely damaging hail or so much hail that the heater(s) couldn't keep up with the ice jamming up the orifices?
DorianB is offline  
Old 16th Jun 2009, 19:13
  #1712 (permalink)  
 
Join Date: Jun 2009
Location: ATL
Age: 67
Posts: 131
Likes: 0
Received 0 Likes on 0 Posts
I've written some software specifications. Computer reboot time, just in debugging exceeds response time available during an incident, before it becomes an accident. Also, the pilot can't be trained in what to expect during computer problems if there is a human, besides the flight crew, in the mix. The computer geek would be a wild card that the crew shouldn't have to deal with. Plus, you'd have to add weight back in for himself and his provisions, in addition to the computer weight.

Besides, if you introduce the third crew member back into the mix, one could make the case to get rid of the heavy and complex computers. All you'd really want in that case is FADEC to trim the engines for best fuel flow.

Last edited by ClippedCub; 16th Jun 2009 at 19:31.
ClippedCub is offline  
Old 16th Jun 2009, 19:15
  #1713 (permalink)  
 
Join Date: Feb 2003
Location: Zanzi's Bar
Age: 59
Posts: 233
Likes: 0
Received 0 Likes on 0 Posts
Me Myself

If the captain was on his break, then, the most experienced F/O would have been in the right hand seat. That's AF SOP for long haul crew relief so that the one in charge of let's say an emergency descent does it from the seat he is used to.
To tell you the truth, given the catastrophic system meltdowns, I can't see myself being able to fly the aircraft in a such a weather and no attitude indicator.
I am not sure about this. What if AF nominates IFR? In the worst case scenario the 600h on type F/O would have been in the RHS and the 2600h one in the LHS... What if AF stipulates that only the RH seated F/O can be in command...
The cheese holes could have been very much aligned even before the systems started to fail...
I would appreciate if an AF colleague can enlighten us about what actually are the SOPs and how stringently are they applied
swish266 is offline  
Old 16th Jun 2009, 19:35
  #1714 (permalink)  
 
Join Date: Feb 2008
Location: Yangon,Myanmar
Posts: 51
Likes: 0
Received 0 Likes on 0 Posts
ClippedCub....

Understood.....thats why I asked.

Is it possible to have support from the ground when these ACARS messages come streaming in? That would make more sense.

The messages were not looked at till later, after the fact. And I assume this is the first time they have been so scrutanized.

I guess my faith in modern technology has taken a hit, and I assume that there has to be a way in this day and age to make these systems even safer than they already are.....
chefrp is offline  
Old 16th Jun 2009, 19:40
  #1715 (permalink)  
 
Join Date: Aug 2008
Location: Belgium
Age: 63
Posts: 72
Likes: 0
Received 0 Likes on 0 Posts
Interflug, PJ2

Hey, Interflug (post 1701), there is a bit of difference between stick input in a gusty landing at approach stages and when cruising through CB at 35 kf. I'm confident that Airbus IT caters for the different circumstances.

PJ2, with respect for your posts in general, your questions about the mobile crew rest area on the 330 has already been dealt with elsewhere in this thread. Post nr 773 and subsequently (perhaps deleted inputs) from colleagues to confirm that A330 mobile rest area come in the form of a LD6 container is normally located below deck on the hight of the 3L/R doors, aft of the wings. I thought you said somewhere you were current on the 330 ?
Dutch Bru is offline  
Old 16th Jun 2009, 19:46
  #1716 (permalink)  
 
Join Date: Jun 2009
Location: Somewhere out there
Age: 39
Posts: 65
Likes: 0
Received 0 Likes on 0 Posts
Airspeed sensor redundancy

it seem to me to be extremely unlikely that three would fail at once, they would likely be from different manufacturing batches.
Actually it seems that the ACARS messages are indicating the failure of just one of the sensors.

That's what is probably still missing in the "clogged pitot tube as a cause" hypothesis.

Correcting:

If the message 341115PROBEPITOT actually refers to all probes disagreeing 1+2/2+3/1+3 instead of only two of them in agreement then I stand corrected that all three probes failed.




Last edited by augustusjeremy; 16th Jun 2009 at 20:51.
augustusjeremy is offline  
Old 16th Jun 2009, 19:52
  #1717 (permalink)  
 
Join Date: Jun 2009
Location: ATL
Age: 67
Posts: 131
Likes: 0
Received 0 Likes on 0 Posts
News - more wreckage sighted;

PRESS RELEASE 32

INFORMATION ON THE SEARCH FOR AIR FRANCE FLIGHT 447

The Brazilian Navy Command and Aeronautical Command inform that, in the search today, military personnel aboard aircraft sighted wreckage 950 kilometers from Fernando de Noronha, in an area close to where debris was found before. No bodies were sighted.

At this moment, more than a thousand Brazilian military are directly involved in the searches, 761 belong to the Navy and 250 to the Air Force.

The Frigate Bosísio is heading back to Fernando de Noronha with the six bodies found before by the French Navy and transferred to the Brazilian ship. The arrival estimate to the island is tomorrow, Tuesday, June 16th.

NAVAL SOCIAL COMMUNICATION CENTER
AERONAUTICAL SOCIAL COMMUNICATION CENTER
ClippedCub is offline  
Old 16th Jun 2009, 19:55
  #1718 (permalink)  
 
Join Date: Jun 2009
Location: Chelan, WA
Age: 48
Posts: 43
Likes: 0
Received 0 Likes on 0 Posts
chrefrp:

I don't think it would make sense to put a flight engineer in the cockpit. The systems in question have extremely limited inputs. In reality they should be simpler to troubleshoot than even the most simplistic systems one can think of. Additionally most of the real troubleshooting can only take place on the ground anyway.

Situation awareness is something that may need some additional work when looking at self-healing systems (this isn't really an FBW issue) but that is a separate issue.
einhverfr is offline  
Old 16th Jun 2009, 19:56
  #1719 (permalink)  
 
Join Date: Jun 2001
Location: East of the Sun & West of the Moon
Posts: 286
Likes: 0
Received 0 Likes on 0 Posts
I am not sure about this. What if AF nominates IFR? In the worst case scenario the 600h on type F/O would have been in the RHS and the 2600h one in the LHS... What if AF stipulates that only the RH seated F/O can be in command...
The cheese holes could have been very much aligned even before the systems started to fail...
I would appreciate if an AF colleague can enlighten us about what actually are the SOPs and how stringently are they applied
Swish,

I can't state exactly what AF's procedure is, but there's no carrier that I'm aware of that would permit the scenario you describe. In a heavy crew, aside from the PIC one of the other pilots will be trained and designated as a "Relief" or "Cruise" captain. This pilot may be either another qualified captain or a senior F/O trained to hold a cruise captain qualification. In some carriers all pilots holding the F/O position are trained to this standard with the augmenting crew members coming from a lower seniority group specifically tasked to fly as relief pilots.

In the AF case it would appear that it was a senior F/O who held a cruise captain type of qualification. In any event, it would be this pilot, not the 600 hr. F/O who would be in charge during the PIC's absence. Decision making authority in the cockpit is not handed to the least qualified crewmember simply on the basis of the seat he is occupying.

ELAC

And I might mention further that I know a good number of relief pilots who are in fact very well qualified and capable pilots with significant command experience. The position a pilot holds on the flight is not in itself an indication of his experience or abilities.
ELAC is offline  
Old 16th Jun 2009, 20:07
  #1720 (permalink)  
 
Join Date: Jun 2001
Location: East of the Sun & West of the Moon
Posts: 286
Likes: 0
Received 0 Likes on 0 Posts
PJ2, with respect for your posts in general, your questions about the mobile crew rest area on the 330 has already been dealt with elsewhere in this thread. Post nr 773 and subsequently (perhaps deleted inputs) from colleagues to confirm that A330 mobile rest area come in the form of a LD6 container is normally located below deck on the hight of the 3L/R doors, aft of the wings. I thought you said somewhere you were current on the 330 ?
Dutch Bru,

Not all A330s are equipped the same. The container you are referring to is an LDMCR (Lower Deck Mobile Crew Rest), which in most carriers is used as a cabin crew rest facility. Many carriers equip the A330 with a seperate pilot crew rest bunk, often located immediately behind the cockpit opposite the forward lavatory. Some carriers, however, have placed this bunk in other locations and to my knowledge there has been no confirmation of whether AF 447 had a bunk, and if so where it was located. Being current on one carrier's aircraft won't tell you how another carrier has chosen to configure such items.

ELAC
ELAC is offline  


Contact Us - Archive - Advertising - Cookie Policy - Privacy Statement - Terms of Service

Copyright © 2024 MH Sub I, LLC dba Internet Brands. All rights reserved. Use of this site indicates your consent to the Terms of Use.