Re: traffic gone?
On 2010-07-18 14:22, and...@torproject.org wrote: > On Fri, Jul 16, 2010 at 03:37:38PM +0200, udo...@xs4all.nl wrote 0.9K bytes > in 27 lines about: > : Jul 16 14:20:03.773 [notice] New control connection opened. > > What do you have controlling your tor, if anything? > > This means something is connecting to your relay's controlport. I do not control tor. I just start it. I noticed that the firewall detects a load of SYN and CN scans. After filtering the detection for port 9001 tor starts working a bit better. How come these tor traffic is detected as a SYN scan? Udo *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: traffic gone?
On Fri, Jul 16, 2010 at 03:37:38PM +0200, udo...@xs4all.nl wrote 0.9K bytes in 27 lines about: : Jul 16 14:20:03.773 [notice] New control connection opened. What do you have controlling your tor, if anything? This means something is connecting to your relay's controlport. -- Andrew Lewman The Tor Project pgp 0x31B0974B +1-781-352-0568 Website: https://www.torproject.org/ Blog: https://blog.torproject.org/ Identi.ca: torproject Skype: lewmanator *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: traffic gone?
On 2010-07-11 15:33, Udo van den Heuvel wrote: > On 2010-07-06 18:27, Udo van den Heuvel wrote: >> On 2010-07-03 00:31, Roger Dingledine wrote: Any hints for finding the cause? I will be away a few days starting tomorrow. > > I am back. > Did anything get clear about the situation with the help of the info I > posted? I upgraded to 0.2.2.14. I tested with and without HardwareAccel. Both give me after the normal startup, a stream of: Jul 16 14:20:03.773 [notice] New control connection opened. Jul 16 14:25:02.938 [notice] New control connection opened. Jul 16 14:30:03.593 [notice] New control connection opened. Jul 16 14:35:03.789 [notice] New control connection opened. (etc) How can I fix this? Udo *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: traffic gone?
On 2010-07-06 18:27, Udo van den Heuvel wrote: > On 2010-07-03 00:31, Roger Dingledine wrote: >>> Any hints for finding the cause? >>> I will be away a few days starting tomorrow. I am back. Did anything get clear about the situation with the help of the info I posted? Udo *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: traffic gone?
On 2010-07-03 00:31, Roger Dingledine wrote: >> Any hints for finding the cause? >> I will be away a few days starting tomorrow. > > A) What's the nickname / IP address? That will help us know how to help > look for it. pindarots.xs4all.nl / 1d1dnt3d1th3c0nf1g > B) Have you checked that the ports are actually reachable from the > outside? `iptables -L -v -n -x` shows a port 9001 with accepted packets increasing. > C) What's making a controller connection every 5 minutes? That seems > unusual. Probably not anything bad, but I don't know what configuration > would do that. SocksPort 9050 # what port to open for local application connections SocksListenAddress 127.0.0.1 # accept connections only from localhost DataDirectory /var/lib/tor ControlPort 9051 Nickname 1d1dnt3d1th3c0nf1g Address pindarots.xs4all.nl ORPort 9001 ExitPolicy reject *:* # middleman only -- no exits allowed BandwidthRate 20 KB BandwidthBurst 21000 HardwareAccel 1 AccelName padlock AccountingStart day 12:21 AccountingMax 2 GB DisableAllSwap 1 User _tor It didn't do this before... Udo *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: traffic gone?
On Fri, Jul 02, 2010 at 02:00:54PM +0200, Udo van den Heuvel wrote: > On 2010-06-30 19:55, Udo van den Heuvel wrote: > >>> Can you see your node on the public lists? > >> > >> Nope. > > > > Still the same logging: > > > > Jun 30 18:45:04.097 [notice] New control connection opened. > > Jun 30 18:50:03.649 [notice] New control connection opened. > > Jun 30 18:55:03.954 [notice] New control connection opened. > > Jun 30 19:00:03.883 [notice] New control connection opened. > > Jun 30 19:05:03.237 [notice] New control connection opened. > > Jun 30 19:10:03.503 [notice] New control connection opened. > > Jun 30 19:15:03.679 [notice] New control connection opened. > > Any hints for finding the cause? > I will be away a few days starting tomorrow. A) What's the nickname / IP address? That will help us know how to help look for it. B) Have you checked that the ports are actually reachable from the outside? C) What's making a controller connection every 5 minutes? That seems unusual. Probably not anything bad, but I don't know what configuration would do that. Thanks, --Roger *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: traffic gone?
On 2010-06-30 19:55, Udo van den Heuvel wrote: >>> Can you see your node on the public lists? >> >> Nope. > > Still the same logging: > > Jun 30 18:45:04.097 [notice] New control connection opened. > Jun 30 18:50:03.649 [notice] New control connection opened. > Jun 30 18:55:03.954 [notice] New control connection opened. > Jun 30 19:00:03.883 [notice] New control connection opened. > Jun 30 19:05:03.237 [notice] New control connection opened. > Jun 30 19:10:03.503 [notice] New control connection opened. > Jun 30 19:15:03.679 [notice] New control connection opened. Any hints for finding the cause? I will be away a few days starting tomorrow. Udo *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: traffic gone?
On 2010-06-30 18:31, Udo van den Heuvel wrote: > On 2010-06-30 11:15, Marco Predicatori wrote: >> Can you see your node on the public lists? > > Nope. Still the same logging: Jun 30 18:45:04.097 [notice] New control connection opened. Jun 30 18:50:03.649 [notice] New control connection opened. Jun 30 18:55:03.954 [notice] New control connection opened. Jun 30 19:00:03.883 [notice] New control connection opened. Jun 30 19:05:03.237 [notice] New control connection opened. Jun 30 19:10:03.503 [notice] New control connection opened. Jun 30 19:15:03.679 [notice] New control connection opened. Jun 30 19:20:03.557 [notice] New control connection opened. Jun 30 19:25:03.761 [notice] New control connection opened. Jun 30 19:30:03.747 [notice] New control connection opened. Jun 30 19:35:03.893 [notice] New control connection opened. Jun 30 19:40:03.806 [notice] New control connection opened. Jun 30 19:45:03.030 [notice] New control connection opened. Jun 30 19:50:04.047 [notice] New control connection opened. (non-debug...) So what can I do to help find the reason/cause/error/bug? Udo *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: traffic gone?
On 2010-06-30 11:15, Marco Predicatori wrote: > Can you see your node on the public lists? Nope. Udo *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: traffic gone?
Udo van den Heuvel, on 06/29/2010 06:53 PM, wrote: So we have some communication but no real traffic. Traffic went down on saturday, before the machine went down. Why? I'll keep an eye on the situation. Can you see your node on the public lists? *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: traffic gone?
On 2010-06-29 18:42, Marco Predicatori wrote: > Udo van den Heuvel, on 06/29/2010 05:57 PM, wrote: > >> The machine was down from sunday evening until monday afternoon > > Being on a dynamic IP range, I often change IP. I've noticed that it > takes quite a long time to reappear on the lists, more than one day. > So if you came back online yesterdayafternoon, I wouldn't worry 'til > tomorrow at least. A few releases ago it used to be much faster. My IP is steady. I see a number of Jun 29 17:33:40.404 [notice] Performing bandwidth self-test...done. Jun 29 17:35:03.303 [notice] New control connection opened. Jun 29 17:40:03.411 [notice] New control connection opened. Jun 29 17:45:03.720 [notice] New control connection opened. Jun 29 17:50:03.640 [notice] New control connection opened. Jun 29 17:55:02.922 [notice] New control connection opened. So we have some communication but no real traffic. Traffic went down on saturday, before the machine went down. Why? I'll keep an eye on the situation. Udo *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: traffic gone?
Udo van den Heuvel, on 06/29/2010 05:57 PM, wrote: The machine was down from sunday evening until monday afternoon Being on a dynamic IP range, I often change IP. I've noticed that it takes quite a long time to reappear on the lists, more than one day. So if you came back online yesterdayafternoon, I wouldn't worry 'til tomorrow at least. A few releases ago it used to be much faster. -- owner of torototela tor node *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
