- tor-relays - lists.torproject.org

Re: [tor-relays] How can I tell if my bridge is working?
by robbie macg 21 Jan '12

21 Jan '12

Hi, I may have misunderstood the question. I think the simplest way to determine if your bridge is up and running correctly is to check the contents of /var/log/tor/log. Alternatively, try using Vidalia to connect to your own bridge. and log an error. These methods often work well for newer users. You may have something more sophisticated in mind or be trying to accomplish some thing else. If hat's the case, I apologize. Cheers, Robbie > Message: 1 > Date: Fri, 20 Jan 2012 09:17:16 -0500 > From: "cmeclax-sazri" <cmeclax-sazri(a)ixazon.dynip.com> > To: tor-relays(a)lists.torproject.org > Subject: Re: [tor-relays] How can I tell if my bridge is working? > Message-ID: <201201200917.16804.cmeclax-sazri(a)ixazon.dynip.com> > Content-Type: Text/Plain; charset="iso-8859-1" > > On Thursday, January 19, 2012 20:35:30 Steve Snyder wrote: >> New operator of a Tor bridge here. How can I tell that it is being used? > > Telnet to port 9051 and type ?authenticate "blurdyboop"?. Then type > ?setevents > bw? and it'll tell you how many bytes go in and out. I'm not sure how to > tell > that there are client connections, but it's probably another setevents > command. > > cmeclax > > > ------------------------------ > > _______________________________________________ > tor-relays mailing list > tor-relays(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > > > End of tor-relays Digest, Vol 12, Issue 19 > ****************************************** >

1 0

Tor Deprecation Notice
by Damian Johnson 20 Jan '12

20 Jan '12

Hi all. As per ticket 4788 [1] we'll soon be removing relays that are out of date and no longer safe to run, which includes anything older than version 0.2.1.30. When I last checked this included 257 relays [2] and I've already notified the 107 of those that had contact information available. If you're running one of those relays then you'll need to upgrade to keep operating. Sorry about the inconvenience and thanks for running a relay! -Damian [1] https://trac.torproject.org/projects/tor/ticket/4788 [2] https://trac.torproject.org/projects/tor/attachment/ticket/4788/old_relays.…

3 2

[warn] Request too large from address '[scrubbed]' to DirPort. Closing.
by Klaus Layer 19 Jan '12

19 Jan '12

Hi, last night the log of one of my nodes showed within 2 minutes about 160 of these messages. Traffic stats show that the incoming bandwidth increased from the average of 300 Mbit/s to more than 400 Mbit/s, where at the same time outgoing traffic dropped. From the peak I see, the requests must have been really big. Does anyone noticed this on other tor servers too? Regards, Klaus

3 2

Re: [tor-relays] logging failure in 0.2.3.10-alpha
by Scott Bennett 19 Jan '12

19 Jan '12

On Thu, 19 Jan 2012 09:39:55 -0800 (PST) CyberRax <cyberrax(a)yahoo.com> wrote: >----- Original Message ----- > >> From: Scott Bennett <bennett(a)cs.niu.edu> >> =A0 =A0 I delayed moving from 0.2.3.7-alpha to 0.2.3.10-alpha until now = >[...] >>=A0=A0=A0=A0 ...no log files were created > >2 thoughts: >a) does the user have access to the logging folder? (_tor rather than root) >b) if you're building through FreeBSD's ports system then the installed /us= >r/local/etc/rc.d/tor gives the log filename from commandline which, >=A0=A0 if I understand correctly, overrides the settings given in torrc (th= >at change was made in 0.2.3.9 or so) *Very* good clue! Thank you very much! Several years ago, I did install a version of tor via the ports tree, but soon switched to building it myself due to delays in new versions being incorporated into the ports and a concern over potentially losing key files, torrc, etc. if I needed to remove it temporarily or during updates. However, I left the infrastructure stuff (e.g., the /usr/local/etc/rc.d/tor script and the /var/db/tor and /var/log/tor directories) in place. The version information line in it still says, # $FreeBSD: ports/security/tor/files/tor.in,v 1.2 2006/08/06 12:26:25 arved Exp $ :-) Anyway, I deleted the --log option from the line that starts/stops tor, and it created both log files this time when I started it. The original script specified /var/log/tor as a log file, so I must have long ago changed it to a directory to hold more than one log file and then forgotten I had done that. /var/log is a directory only writeable by root anyway, and /var/log/tor is a directory only writeable by _tor, so tor would not have been able to create a file called /var/log/tor. Thanks again for the pointer! Scott Bennett, Comm. ASMELG, CFIAG ********************************************************************** * Internet: bennett at cs.niu.edu * *--------------------------------------------------------------------* * "A well regulated and disciplined militia, is at all times a good * * objection to the introduction of that bane of all free governments * * -- a standing army." * * -- Gov. John Hancock, New York Journal, 28 January 1790 * **********************************************************************

1 0

https://metrics.torproject.org/networkstatus.html
by Sebastian Urbach 19 Jan '12

19 Jan '12

Hi, Im receiving the following error since a few days: Proxy Error The proxy server received an invalid response from an upstream server. The proxy server could not handle the request GET /networkstatus.html. Reason: Error reading from remote server Apache Server at metrics.torproject.org Port 443 Url: https://metrics.torproject.org/networkstatus.html Anyone out there to fix it ;-) ? -- Mit freundlichen Grüßen / Yours sincerely Sebastian Urbach -------------------------------------------------------- Religion is something left over from the infancy of our intelligence, it will fade away as we adopt reason and science as our guidelines. -------------------------------------------------------- Bertrand Arthur William Russell (1872-1970), British philosopher, logician, mathematician, historian, and social critic.

2 1

logging failure in 0.2.3.10-alpha
by Scott Bennett 19 Jan '12

19 Jan '12

I delayed moving from 0.2.3.7-alpha to 0.2.3.10-alpha until now because the latter failed to build from source under FreeBSD 7.4-STABLE. Oddly enough, now that I've upgraded to 8.2-STABLE, it appears to build just fine. So I ran a tor --verify-config on my existing torrc file, which was confirmed to be okay by 0.2.3.10-alpha. Next, I fired it up, and...no log files were created, :-( so I had no idea whether it was working, had encountered any difficulties during initialization, etc. It should have created two log files in /var/log/tor/, one for "notice" and above, and one for "info" and above. I tried a SIGHUP to get it to reread torrc, which made no observable change, as expected. After pondering the situation for a few minutes, I decided to shut it down. If tor can't communicate to its operator, then it can't be safely run. If anyone can feed me a clue about what to try in hopes of fixing this, I'd greatly appreciate it. If there are no helpful ideas forthcoming by this evening, I'll likely go back to 0.2.3.7-alpha in order to have a working node. Thanks much. Scott Bennett, Comm. ASMELG, CFIAG ********************************************************************** * Internet: bennett at cs.niu.edu * *--------------------------------------------------------------------* * "A well regulated and disciplined militia, is at all times a good * * objection to the introduction of that bane of all free governments * * -- a standing army." * * -- Gov. John Hancock, New York Journal, 28 January 1790 * **********************************************************************

2 1

Metrics / Router Details
by Sebastian Urbach 14 Jan '12

14 Jan '12

Hi, Im receiving the following error message when i try to view my router details on metrics: Proxy Error The proxy server received an invalid response from an upstream server. The proxy server could not handle the request GET /routerdetail.html. Reason: Error reading from remote server Url for this message is: https://metrics.torproject.org/routerdetail.html?fingerprint=0aff5440ae93f2… -- Mit freundlichen Grüßen / Yours sincerely Sebastian Urbach -------------------------------------------------------- Religion is something left over from the infancy of our intelligence, it will fade away as we adopt reason and science as our guidelines. -------------------------------------------------------- Bertrand Arthur William Russell (1872-1970), British philosopher, logician, mathematician, historian, and social critic.

2 1

Authorities: what is up?
by Klaus Layer 13 Jan '12

13 Jan '12

Hi, just because I am curious: can someone from the tor authority operators please explain what is going on the last days with tor authorities. This morning (europe) ides is not available. Thanks, Klaus

4 9

Re: [tor-relays] Authorities: what is up?
by Sebastian Hahn 13 Jan '12

13 Jan '12

On Jan 13, 2012, at 1:27 PM, Nils Vogels wrote: > Hey Sebastian, Roger, > On 13/01/2012, Sebastian Hahn <mail(a)sebastianhahn.net> wrote: >> >> Ah, I see. ides not having a current consensus is different from ides >> being down. Ides still is running the stable Tor version and needs to be >> upgraded to 0.2.3.x to be allowed to vote along with the other dirauths, >> so it doesn't immediately know about the new consensus. I don't know >> when ides will be upgraded, but I hope the answer is soon. > > Let me know if there is a need for stable authorities with speedy > admins. I'm sure the Dutch hacker community (which I am very much > involved with) can lend a hand and/or a high-bw host. Hi Nils, I'm pasting some stuff here from the "consensus update request" thread, also on tor-relays: On Jan 8, 2012, at 5:45 PM, Roger Dingledine wrote: > On Sun, Jan 08, 2012 at 03:35:16PM +0100, Sebastian Hahn wrote: >> The problem is that in the current situation, it gets worse with more >> authorities, not better. Our voting mechanism needs an overhaul :/ > > Indeed. > > The other problem is that we simply have too many clients out there. > And we've taught them all to be eager to keep updated, so they're harder > to partition. But it's really a volume thing at this point. We need a more > scalable way of keeping clients informed about network topology. In our > copious free time, while also doing everything else that needs doing. :/ > > Anyway, crisis averted, this time. > > --Roger Hope that helps make it clearer why adding a new authority in the short term doesn't actually help us currently. Thanks Sebastian

1 0

tor died with "invalid opcode", should I be worried?
by Marinos Yannikos 13 Jan '12

13 Jan '12

Using Tor 0.2.2.35 (git-4f42b0a93422f70e), OpenSSL 0.9.8o: Jan 12 21:17:25 XXXXXXX kernel: [ 4257.857564] tor[1909] trap invalid opcode ip:7fa7dd61f8f7 sp:7fa7daf80400 error:0 in libcrypto.so.0.9.8[7fa7dd574000+175000] I don't have a core dump unfortunately. This box has had some stability issues lately (still unknown if hardware or DoS attacks are to blame), but I'm a bit worried about a possible exploit attempt. Has anyone else observed such Tor crashes recently? OpenSSL 0.9.8o has a few vulnerabilities according to http://www.openssl.org/news/ but this is Debian Stable *sigh* ... Regards, Marinos

2 1