Hi there,

I want to report abnormal Firewall States since the update.

Since a week or two, (I believe with 0.4.9.10) tor started to excessively use Firewall-States, far beyond what I observed beforehand.

In normal operation, I observed about 20k – 45k Firewall States for the relay.

Yesterday, before I installed the update, I had 190k Firewall States, related to Tor Relay Traffic.

The days before it cycled from 120 – 145k States. Also far more than normal.

Today, I see excessive Errors (> 20 Errors/Sek) in my Firewall, relating to use of invalid Firewall States (pf: BAD State..) – all are Tor Related Connections.

It would be nice if anyone could have a look, if your connections increased also that much. I also wonder if this might be a type of attack?

Regardless of the odd connections, the relay is running well, no CPU peaks and normal memory usage (602MB).

Best regards and have a nice weekend!

Joker