Re: nameserver stats
Anders Andersson wrote: Qualified guess: These might be so-called BitTorrent trackers. These tracker URLs are embedded in torrent files that you download. You can download these torrent files from various sources, not necessarily (even rarely) from the site itself. When you load these torrents into a BitTorrent client, the client tries to contact all the trackers embedded in the file, and will probably try every 5 minutes or so. Smarter clients would give up or use incremental/exponential back-off, but there are probably enough dumb clients out there to compensate. attached you'll find the top 100 3rd level domain dns stats from the last four weeks. Still a lot of BitTorrent trackers... Olaf inline: 3rd-level-domains.png
Re: nameserver stats
Qualified guess: These might be so-called BitTorrent trackers. These tracker URLs are embedded in torrent files that you download. You can download these torrent files from various sources, not necessarily (even rarely) from the site itself. When you load these torrents into a BitTorrent client, the client tries to contact all the trackers embedded in the file, and will probably try every 5 minutes or so. Smarter clients would give up or use incremental/exponential back-off, but there are probably enough dumb clients out there to compensate. The sad thing is that people try to use Tor for BitTorrent, though of course there might be a use for BitTorrent on Tor so I hope it's not just for sharing the random average movies and music. On Wed, May 19, 2010 at 5:48 AM, Dyno Tor dyno...@gmail.com wrote: Yup, BT=BitTorrent. I don't know the sites by personal experience, they just seemed to have BT like names. Strange that there's such a correspondence, but it isn't particular to your server -- I replicated your results on a handful of tests, from both my exit and a local non-tor IP. Perhaps these are domains that have been shutdown via court order or over zealous domain registrars? Still, I'd think people would stop trying to connect to them after a bit, but trackedbyet.info is the 6th most popular DNS name, and it doesn't resolve! On Tue, May 18, 2010 at 6:20 AM, Olaf Selke olaf.se...@blutmagie.de wrote: Dyno Tor wrote: Interesting. Olaf, I notice BT destinations seem mapped to nxdomain or servfail. BT stands for BitTorrent, right? Do you do this purposely to reduce abuse reports, or is that done by your upstream provider? neither, the nameserver running on this machine does caching only knowing nothing but the root servers from its config. So there's no upstream provider's ns used. I can't explain the nxdomain and servfail mapping. Olaf *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talk in the body. http://archives.seul.org/or/talk/ *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talk in the body. http://archives.seul.org/or/talk/ *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: nameserver stats
Dyno Tor wrote: Interesting. Olaf, I notice BT destinations seem mapped to nxdomain or servfail. BT stands for BitTorrent, right? Do you do this purposely to reduce abuse reports, or is that done by your upstream provider? neither, the nameserver running on this machine does caching only knowing nothing but the root servers from its config. So there's no upstream provider's ns used. I can't explain the nxdomain and servfail mapping. Olaf *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: nameserver stats
Yup, BT=BitTorrent.I don't know the sites by personal experience, they just seemed to have BT like names. Strange that there's such a correspondence, but it isn't particular to your server -- I replicated your results on a handful of tests, from both my exit and a local non-tor IP. Perhaps these are domains that have been shutdown via court order or over zealous domain registrars? Still, I'd think people would stop trying to connect to them after a bit, but trackedbyet.info is the 6th most popular DNS name, and it doesn't resolve! On Tue, May 18, 2010 at 6:20 AM, Olaf Selke olaf.se...@blutmagie.de wrote: Dyno Tor wrote: Interesting. Olaf, I notice BT destinations seem mapped to nxdomain or servfail. BT stands for BitTorrent, right? Do you do this purposely to reduce abuse reports, or is that done by your upstream provider? neither, the nameserver running on this machine does caching only knowing nothing but the root servers from its config. So there's no upstream provider's ns used. I can't explain the nxdomain and servfail mapping. Olaf *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talk in the body. http://archives.seul.org/or/talk/ *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
nameserver stats
Hi, in case one might be interested in dns statistics of an exit node generated by the Dns Statistics Collector tool DSC (*). Data only include requests originating from blutmagie Tor exit. No other hosts' traffic is taken into account. The query rate on the graphs' x-axis has to be approximately doubled since there's a second nameserver used I don't collect data from. http://selke.de/pics/tld.png http://selke.de/pics/2nd-level-domains.png http://selke.de/pics/3rd-level-domains.png Olaf (*) http://dns.measurement-factory.com/tools/dsc *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
