- tor-relays - lists.torproject.org

0.2.4.20 logging duplicate messages
by Scott Bennett 28 Jan '14

28 Jan '14

Along with my recent OS upgrade I have also updated my tor relay from 0.2.4.3-alpha to 0.2.4.20. The latter version write two identical copies of every message to the log file. I have only one uncommented "Log " line in my torrc, which is Log notice file /var/log/tor/notices.log but every single message is getting written to the file twice. Jan 27 19:31:58.213 [notice] Tor 0.2.4.20 (git-3cb5c70beec5bf46) opening log file. Jan 27 19:31:58.214 [notice] Tor 0.2.4.20 (git-3cb5c70beec5bf46) opening log file. Jan 27 19:31:58.220 [notice] Parsing GEOIP IPv4 file /usr/local/share/tor/geoip. Jan 27 19:31:58.220 [notice] Parsing GEOIP IPv4 file /usr/local/share/tor/geoip. Jan 27 19:31:58.325 [notice] Parsing GEOIP IPv6 file /usr/local/share/tor/geoip6. Jan 27 19:31:58.325 [notice] Parsing GEOIP IPv6 file /usr/local/share/tor/geoip6. Jan 27 19:31:58.360 [notice] Configured to measure statistics. Look for the *-stats files that will first be written to the data directory in 24 hours from now. Jan 27 19:31:58.360 [notice] Configured to measure statistics. Look for the *-stats files that will first be written to the data directory in 24 hours from now. Jan 27 19:31:58.513 [notice] Your Tor server's identity key fingerprint is 'MYCROFTsOtherChild 023220505A550D6FDF0C20FF7C48E66BA06A49A6' Jan 27 19:31:58.513 [notice] Your Tor server's identity key fingerprint is 'MYCROFTsOtherChild 023220505A550D6FDF0C20FF7C48E66BA06A49A6' Jan 27 19:32:00.387 [notice] We now have enough directory information to build circuits. Jan 27 19:32:00.387 [notice] We now have enough directory information to build circuits. Jan 27 19:32:00.388 [notice] Bootstrapped 80%: Connecting to the Tor network. Jan 27 19:32:00.388 [notice] Bootstrapped 80%: Connecting to the Tor network. Jan 27 19:32:01.399 [notice] Circuit handshake stats since last time: 0/0 TAP, 0/0 NTor. Jan 27 19:32:01.399 [notice] Circuit handshake stats since last time: 0/0 TAP, 0/0 NTor. Jan 27 19:32:01.815 [notice] Bootstrapped 85%: Finishing handshake with first hop. Jan 27 19:32:01.815 [notice] Bootstrapped 85%: Finishing handshake with first hop. Jan 27 19:32:02.287 [notice] Bootstrapped 90%: Establishing a Tor circuit. Jan 27 19:32:02.287 [notice] Bootstrapped 90%: Establishing a Tor circuit. Jan 27 19:32:03.671 [notice] Tor has successfully opened a circuit. Looks like client functionality is working. Jan 27 19:32:03.671 [notice] Tor has successfully opened a circuit. Looks like client functionality is working. Jan 27 19:32:03.672 [notice] Bootstrapped 100%: Done. Jan 27 19:32:03.672 [notice] Bootstrapped 100%: Done. Jan 27 19:32:03.672 [notice] Now checking whether ORPort 67.175.219.175:32323 and DirPort 67.175.219.175:32326 are reachable... (this may take up to 20 minutes -- look for log messages indicating success) Jan 27 19:32:03.672 [notice] Now checking whether ORPort 67.175.219.175:32323 and DirPort 67.175.219.175:32326 are reachable... (this may take up to 20 minutes -- look for log messages indicating success) Jan 27 19:32:06.509 [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor. Jan 27 19:32:06.509 [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor. Jan 27 19:32:07.093 [notice] Self-testing indicates your DirPort is reachable from the outside. Excellent. Jan 27 19:32:07.093 [notice] Self-testing indicates your DirPort is reachable from the outside. Excellent. Jan 27 19:32:25.752 [notice] Performing bandwidth self-test...done. Jan 27 19:32:25.752 [notice] Performing bandwidth self-test...done. Jan 27 19:33:02.567 [notice] We'd like to launch a circuit to handle a connection, but we already have 32 general-purpose client circuits pending. Waiting until some finish. Jan 27 19:33:02.567 [notice] We'd like to launch a circuit to handle a connection, but we already have 32 general-purpose client circuits pending. Waiting until some finish. Jan 27 20:32:01.397 [notice] Heartbeat: Tor's uptime is 1:00 hours, with 7 circuits open. I've sent 2.93 MB and received 7.98 MB. Jan 27 20:32:01.397 [notice] Heartbeat: Tor's uptime is 1:00 hours, with 7 circuits open. I've sent 2.93 MB and received 7.98 MB. Jan 27 20:32:01.397 [notice] Average packaged cell fullness: 87.404% Jan 27 20:32:01.397 [notice] Average packaged cell fullness: 87.404% Jan 27 20:32:01.397 [notice] TLS write overhead: 9% Jan 27 20:32:01.397 [notice] TLS write overhead: 9% Jan 27 20:32:02.394 [notice] Circuit handshake stats since last time: 25/25 TAP, 13/13 NTor. Jan 27 20:32:02.394 [notice] Circuit handshake stats since last time: 25/25 TAP, 13/13 NTor. ...and so on. Is there some way to stop this behavior and get only a single copy of each message? Scott Bennett, Comm. ASMELG, CFIAG ********************************************************************** * Internet: bennett at sdf.org *or* bennett at freeshell.org * *--------------------------------------------------------------------* * "A well regulated and disciplined militia, is at all times a good * * objection to the introduction of that bane of all free governments * * -- a standing army." * * -- Gov. John Hancock, New York Journal, 28 January 1790 * **********************************************************************

4 4

Considering setting up an exit, need advice
by Jesse Victors 28 Jan '14

28 Jan '14

Hello everyone, I'm thinking about setting up an exit here at my university here in the US. My ISP has no problem with Tor relays on the fast connections, but I haven't inquired about exits. I'd be running the exit on a surplus computer that I have control over in a lab in one of the main buildings. How do I ask my ISP about it? I'll be doing some research as to what ports I can open to contribute yet avoid being flooded by complaints, but if anyone has any tips I'd appreciate it. Would it be a good idea to copy the exit policy of the node at MIT? Is there a way to configure the Linux firewall so that only Tor has Internet access, in order to help show that I wasn't behind anything that comes out of the exit? I'm basically just looking to get started here if this is feasible, and looking for advice.

6 6

NTor handshake
by Sebastian Urbach 27 Jan '14

27 Jan '14

Hi, May i ask when the NTor handshake is going to be recommended by the majority of the directory authorities ? It's probably not a surprise that i prefer NTor handshake as a relay operator. I checked constantly since the switch to 0.2.4.20 and the values are pretty constant. (35k TAP / 700 NTor). I didn't notice any complaints so i assume that it should be possible to push forward. -- Mit freundlichen Grüssen / Sincerely yours Sebastian Urbach ---------------------------------------------- Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. ---------------------------------------------- Benjamin Franklin (1706 - 1790), Inventor, journalist, printer, diplomat, and statesman

2 1

Trying Trusted Tor Traceroutes
by Sebastian Urbach 27 Jan '14

27 Jan '14

Hi, Thanks Anupam for digging deep into the numbers. -- Mit freundlichen Grüssen / Sincerely yours Sebastian Urbach ---------------------------------------------- Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. ---------------------------------------------- Benjamin Franklin (1706 - 1790), Inventor, journalist, printer, diplomat, and statesman

1 0

Here,s my problem.
by kattamann＠sbcglobal.net 27 Jan '14

27 Jan '14

To anyone whom might give a suggestion or answer. Just set up tor browser and relay package wanted to volunteer my computer and connection to those in parts of the world who don't have as much freedom of accesses as us.Question if I just set my computer to not go into sleep mode is that all that is needed to let people use my connection when I am not using it.Specs home built as-rock 787 pro3 8gig of ram dsl connect low speed att offers.

3 4

Re: [tor-relays] Scoreboard enhancements / Trying Trusted Tor Traceroutes
by Sebastian Urbach 27 Jan '14

27 Jan '14

Hi Renke, Do you care to elaborate ? If you need assistance we can talk via private mail as well ... Bandwidth consumption is very low as you possible read on the project site. Do you run the test with scamper and or did you turn down the scanning speed ? The question remains why did many relay ops canceled the test before completion. As the scoreboard shows most of them would have completed the test in the estimated lowest time frame (around 4 days). The estimated max. time is about 24 days not 96 if you choose to run with traceroute and the default values instead of scamper. My best guess is that even 4 days was too long. After the test was started they wondered how long it would take and checked back with the faq, then decided to quit. Call it a hunch ;-) My system, as an example, took about 2 days and 23 hours to complete the run. I use scamper with the default settings. You can also turn up the pps value and finish even faster. How long will this take?: http://web.engr.illinois.edu/~das17/tor-traceroute_v1.html#q-howlong How much bandwidth, disk space, RAM, and CPU will this consume?: http://web.engr.illinois.edu/~das17/tor-traceroute_v1.html#q-howmanyresourc… -- Mit freundlichen Grüssen / Sincerely yours Sebastian Urbach ---------------------------------------------- Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. ---------------------------------------------- Benjamin Franklin (1706 - 1790), Inventor, journalist, printer, diplomat, and statesman > I am wondering why only 68 out of 283 completed the traceroute. Can someone > explain please? > probably because the estimated time is between 4 and 96 days: https://web.engr.illinois.edu/~das17/tor-traceroute_v1.html#q-howlong my (low-bandwith) relay is trace-routing since 4 days and completed a mere 15 % of all checks :) Renke

5 7

Scoreboard enhancements
by Sebastian Urbach 26 Jan '14

26 Jan '14

-- Mit freundlichen Grüssen / Sincerely yours Sebastian Urbach ---------------------------------------------- Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. ---------------------------------------------- Benjamin Franklin (1706 - 1790), Inventor, journalist, printer, diplomat, and statesman

2 1

Scoreboard enhancements / Trying Trusted Tor Traceroutes
by Sebastian Urbach 26 Jan '14

26 Jan '14

Dear list members, Sorry for the completely empty mail a few minutes ago. What can i say, it's sunday and i had way less sleep than i should. But here the good news. The live scoreboard was modified. There is now a new column which shows the number of completed runs per IP and also at the bottom a value which displays the total sum of systems who completed at least 1 run. The board: http://128.174.241.211:443/relay_scoreboard Thanks for your attention. -- Mit freundlichen Grüssen / Sincerely yours Sebastian Urbach ---------------------------------------------- Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. ---------------------------------------------- Benjamin Franklin (1706 - 1790), Inventor, journalist, printer, diplomat, and statesman

3 2

A little bedtime story about relays and OVH
by tor＠gmx.info 25 Jan '14

25 Jan '14

3 3

How effective is "NumCPUs"?
by Alexander Dietrich 25 Jan '14

25 Jan '14

Hello, a relay I'm running is currently at about 0.80 load average. It has a dual-core CPU and I have configured "NumCPUs 2". I'm still in the process of finding the bandwidth limit. Should I keep increasing "RelayBandwidthRate" on the single Tor process, or is it a better idea to start a second process? (Also, does a second process need its own identity, or can it use the existing one?) Best regards, Alexander -- PGP Key: 0xC55A356B | https://dietrich.cx/pgp

8 8