Delivery-Date: Thu, 10 Dec 2015 14:25:28 -0500
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_MED,
	T_RP_MATCHES_RCVD autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id 675F21E10D4;
	Thu, 10 Dec 2015 14:25:26 -0500 (EST)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id B9AB138A23;
	Thu, 10 Dec 2015 19:25:20 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 29740389EB
 for <tor-talk@lists.torproject.org>; Thu, 10 Dec 2015 19:25:17 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id WhV6BB_-z5Be for <tor-talk@lists.torproject.org>;
 Thu, 10 Dec 2015 19:25:17 +0000 (UTC)
Received: from smtp.ev0ke.net (albert.ini-tech.com [192.99.35.19])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client CN "", Issuer "Internet Widgits Pty Ltd" (not verified))
 by eugeni.torproject.org (Postfix) with ESMTPS id 0F19A37FFA
 for <tor-talk@lists.torproject.org>; Thu, 10 Dec 2015 19:25:16 +0000 (UTC)
Date: Thu, 10 Dec 2015 14:25:01 -0500
From: David Goulet <dgoulet@ev0ke.net>
To: tor-talk@lists.torproject.org
Message-ID: <20151210192501.GA31965@raoul>
References: <5669CCA2.6080307@openmailbox.org>
In-Reply-To: <5669CCA2.6080307@openmailbox.org>
Cc: rob.g.jansen@nrl.navy.mil
Subject: Re: [tor-talk] single entity running >36% exit probability with 5
 relays? scary.
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============3786711468602284116=="
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>


--===============3786711468602284116==
Content-Type: multipart/signed; micalg=pgp-sha256;
	protocol="application/pgp-signature"; boundary="oyUTqETQ0mS9luUI"
Content-Disposition: inline


--oyUTqETQ0mS9luUI
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On 10 Dec (19:04:02), nusenu wrote:
> take a look at the "e_prob" column:
>=20
> https://github.com/nusenu/tor-network-observations/blob/master/2015-12-10=
_relay-families.txt
>=20
>=20
> How did he manage to get such a high consensus weight
> (~10x ipredator's cw)?
>=20
>=20
>=20
> these four 0.2.7.5-dev relays were first seen on 2015-12-10 04:00:00
> are down since a few hours now
> https://atlas.torproject.org/#search/contact:robgjansen

Hi!

This morning I noticed a huge spike in the estimated exit probability
per continent graph and network capacity graph:

http://ygzf7uqcusp4ayjs.onion/tor-health/tor-health/index.html

After a bit of investiguation turns out 3 new relays were advertising a
HUGE bandwidth.

I contacted the person (it's a known Tor researcher at NRL) and he
realized they were mis-configured advertising way too much bw. It should
be fixed soon hopefully but they are 3 real exit nodes.

However, the humongeous weights are concerning since they were very
"young" relays in the lifetime of a relay so it worth investiguating and
thinking if this is normal or maybe a bug?

Cheers!
David

>=20
>=20
> btw: thanks for setting an apparently proper myfamily config.
> --=20
> tor-talk mailing list - tor-talk@lists.torproject.org
> To unsubscribe or change other settings go to
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

--oyUTqETQ0mS9luUI
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=
=aRjR
-----END PGP SIGNATURE-----

--oyUTqETQ0mS9luUI--

--===============3786711468602284116==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

--===============3786711468602284116==--

