On Thu, Jan 15, 2015 at 02:29:28PM +0100, Philipp Winter wrote:
On Mon, Jan 12, 2015 at 08:24:58PM +0100, Tom van der Woerdt wrote:
Interestingly, that paints a completely different picture. I added that line to two machines (guard+exit) and after a few minutes :
# cat /var/lib/tor/node*/infolog | grep Negotiated | awk '{ print $8 }' | sort | uniq -dc 40 2 76 3 3811 4
# cat /var/lib/tor/node*/infolog | grep Negotiated | awk '{ print $8 }' | sort | uniq -dc 50 2 122 3 6269 4
I'll let it run a bit longer but these two machines (which are both exits as well - probably relevant) get almost solely v4 handshakes.
I now did the same for my two relays and I get two different distributions, which I found surprising. That's the relay [0] whose results I showed earlier.
Negotiated version | Per connection | Per host -------------------+----------------+------------- 2 | 12,236 (8%) | 9,292 (21%) 3 | 29,768 (20%) | 23,393 (52%) 4 | 108,884 (72%) | 12,051 (27%)
And here's a relay [1] on the same physical machine with almost the same configuration. The major difference is that this relay is not configured to run a directory service whereas the other one is. The numbers are close to yours, Tom.
Negotiated version | Per connection | Per host -------------------+----------------+------------ 2 | 761 (1%) | 279 (3%) 3 | 4,468 (5%) | 1,301 (14%) 4 | 82,811 (94%) | 7,494 (83%)
[0] https://atlas.torproject.org/#details/9B94CD0B7B8057EAF21BA7F023B7A1C8CA9CE645 [1] https://atlas.torproject.org/#details/CCEF02AA454C0AB0FE1AC68304F6D8C4220C1912
Is there an easy way to tell which connections are from clients and which are from other relays? One of the relays has a higher guard probability; maybe that has something to do with it. Probably there is a different distribution of versions among relays than among client, especially when you account for bandwidth weighting (any relay connecting to you is more likely to be fast than slow, which may mean it's more likely to be newer than older).
David