[tor-bugs] #13287 [Tor]: Investigate mysterious 24-hour lump in hsdir desc fetches

Tor Bug Tracker & Wiki blackhole at torproject.org
Fri Nov 21 16:13:42 UTC 2014


#13287: Investigate mysterious 24-hour lump in hsdir desc fetches
------------------------+------------------------------
     Reporter:  arma    |      Owner:
         Type:  task    |     Status:  new
     Priority:  normal  |  Milestone:  Tor: 0.2.???
    Component:  Tor     |    Version:
   Resolution:          |   Keywords:  SponsorR, tor-hs
Actual Points:          |  Parent ID:
       Points:          |
------------------------+------------------------------

Comment (by dgoulet):

 Ok so I added a quick patch to log the desc_id that are being fetched
 (obfuscated using siphash24g()) and it appears that it is the same desc_id
 that is being fetched again and again.

 {{{
  10:45:48 [NOTICE] Attempt on 17195692294194523357 [16117 duplicates
 hidden]
 }}}

 And each period gets a huge number for the same desc_id. We'll see if in
 like 24 hours, this address will change. Sounds more and more like a dead
 C&C a botnet is trying to reach....

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13287#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list