Hi,
I'm looking at ExitPortStatistics. Since the spec [1] is not very specific, I wanted to confirm that my assumption is correct:
The current tor implementation includes the 10 most relevant ports, correct? (highest number of bytes or stream)
example: exit-streams-opened 80=5178868,182=1092,443=3499276,5000=29600,5753=8920,6881=43496,8080=31184,8333=472,8999=16572,51413=51496,other=1925104
so the ports 80 182 443 5000 5753 6881 8080 8333 8999 51413
are the most used exit ports on that given relay (not by that order).
thanks, nusenu
[1] https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#n1082:
On 29/01/17 17:12, nusenu wrote:
Well, that one is easy: port 80. :)
$ wget https://collector.torproject.org/recent/relay-descriptors/extra-infos/2017-0... $ grep exit-streams 2017-01-29-16-05-00-extra-infos | sort | uniq exit-streams-opened 43=1008,53=588,80=243856,110=16,143=12,443=181796,993=36,995=32,8080=116,8443=52,other=4 exit-streams-opened 43=1348,80=158920,81=132,443=84212,554=16,3389=1064,6669=60,8000=48,8080=128,8333=24,other=1820 exit-streams-opened 43=1460,80=204496,81=184,443=99272,554=12,563=828,995=16,1500=1428,8080=144,8333=36,other=2320 exit-streams-opened 43=1676,80=139148,81=108,443=73020,3389=1876,6669=180,8080=120,8333=32,8443=272,11371=4,other=1372 exit-streams-opened 43=460,80=100744,443=55304,995=16,1500=572,3389=860,8000=20,8080=48,8333=20,9999=4,other=916 exit-streams-opened 43=716,80=137808,81=64,443=62068,563=32,1500=584,3389=1572,8080=144,8087=36,8333=16,other=1064 exit-streams-opened 80=1306188,81=1404,182=120,443=1133872,5000=328,8080=11324,24188=12,35485=4,45684=4,51413=2536,other=143596 exit-streams-opened 80=252636,443=132288,554=20,1500=1284,3389=2000,6669=148,8000=100,8080=144,8333=44,8443=860,other=4252 exit-streams-opened 81=2052,119=84,182=1620,8001=200,8080=62488,8182=428,8333=184,33480=60,33486=32,40038=12,other=64732 exit-streams-opened other=0
Okay, in the last line we can't say this. But in all other lines the "other" entry has fewer streams than port 80 which is among the top 10. Only the last line does not include port 80, and the "other" entry has more streams than top-1 port 8080. Could be that this relay does not permit exiting to port 80. Or that port 80 was 11th or 12th in terms of bytes.
Hope this is useful anyway.
All the best, Karsten
Karsten Loesing:
Ok, maybe I should have said that differently:
"so it is not possible to find out which are the top 10 (or N) exit ports by number of streams opened"
(but we can determine the most frequent exit port if other is lower than the biggest value provided)
Yes, thanks.
On 29/01/17 17:54, nusenu wrote:
You're right that we cannot reliably determine the top 10 exit ports by number of streams opened.
The idea was to pick the same 10 ports for all three metrics (read bytes, written bytes, opened streams) rather than the top 10 ports for each statistic. This allows comparisons of all three metrics for a given port.
All the best, Karsten
-
Karsten Loesing -
nusenu