unusual connection activity?
Roger Dingledine
arma at mit.edu
Wed Jan 23 19:59:55 UTC 2008
On Wed, Jan 23, 2008 at 07:09:07PM +0000, john smith wrote:
> i have found something in the vidalia message log that seems a little unusual:
>
> Jan 23 17:44:03.906 [Notice] Our IP Address has changed from
> 87.194.38.72 to 212.112.242.159; rebuilding descriptor.
>
> Jan 23 17:44:11.546 [Notice] Self-testing indicates your ORPort is
> reachable from the outside. Excellent. Publishing server descriptor.
>
> Jan 23 17:44:27.000 [Notice] Our IP Address has changed from
> 212.112.242.159 to 87.194.38.72; rebuilding descriptor.
>
> Jan 23 17:44:30.375 [Notice] Self-testing indicates your ORPort is
> reachable from the outside. Excellent. Publishing server descriptor.
>
> Jan 23 17:44:50.546 [Notice] Performing bandwidth self-test...done.
>
> the 87.194.38.72 ip address belongs to my tor relay freeflow [not exit]
> the 212.112.242.159 ip address belongs to a tor relay called maximator
> based in germany.
> i installed tor 0.1.2.19 & began running as a server on Jan 22 at
> 21:18:44 & was previously running the same relay on tor 0.1.2.18/17/16
Neat!
Sounds like you've uncovered a bug in 0.1.2.19. I'm guessing you didn't
set your Address line, so Tor is doing its best to guess. And it sounds
like your Tor made a tunnelled connection through 212.112.242.159 to a
directory cache, and then it got suckered into thinking its IP address
had changed.
Can you give me a few more hints? Anything else in the logs? Is this
repeatable? Were you doing anything interesting at the time? Do you run
a hidden service too? Had your relay been running for a long time or
short time before this happened?
Has anybody else here experienced this?
Thanks,
--Roger
More information about the tor-talk
mailing list