#6045: Ethiopia blocks Tor based on ServerHello
---------------------------------+------------------------------------------
Reporter: asn | Owner:
Type: task | Status: assigned
Priority: normal | Milestone:
Component: Censorship analysis | Version:
Keywords: dpi | Parent:
Points: | Actualpoints:
---------------------------------+------------------------------------------
Comment(by asn):
For the record, phunnier_packet and phunniest_packet might be lies. It
seems that .et treats packets of size 73 or 75 bytes weirdly (possibly
other sizes too). For example:
{{{
# hping3 -p 31923 -E /dev/zero -d 72 -A 213.55.83.157
# hping3 -p 31923 -E /dev/zero -d 74 -A 213.55.83.157
# hping3 -p 31923 -E /dev/zero -d 76 -A 213.55.83.157
}}}
give RSTs back
but
{{{
# hping3 -p 31923 -E /dev/zero -d 73 -A 213.55.83.157
# hping3 -p 443 -E /dev/zero -d 75 -A 213.55.85.2
}}}
do not give RSTs back.
I'll make a script to see what packet sizes with /dev/zero get dropped.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6045#comment:17>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online