peculiar server "bandwidth" posted by server "mnl" and possible new type of attack

[Domenico Andreoli]

Hi,

On Wed, Sep 10, 2008 at 07:16:46AM -0500, Scott Bennett wrote:
>
>      It appears that mnl was not actually down.  It may be experiencing
> some network connection problems.  Its operator mentioned that he had
> been unable to log into it over the weekend, but when he came in on
> Monday, it was still running.  It had also reappeared on the torstatus
> sites.
>      Anyway, mnl is back, says it has been up 33 days, and is once again
> at the very top of torstatus pages when those page entries are sorted
> into descending order by "bandwidth".  I just sent a note moments ago
> to its operator again, this time suggesting that he restart it to get
> rid of the bogus numbers.  It seems fairly likely that mnl will never
> trigger the same bug again anyway.

Here I am. Box has been rebooted with an updated tor debian package
0.2.0.31-1, old one was 0.2.0.30-2.

Due to other reasons this morning it was offline and I've been unable
to mail too. I am recovering a couple of messages I sent yesterday on
this ml which have been dropped becaouse (I guess) wrote them with the
wrong From email address.

I put online the logs of the last few days:

  https://mnl.crema.unimi.it/~cavok/tor/ 

Regards,
Domenico

-----[ Domenico Andreoli, aka cavok
 --[ http://www.dandreoli.com/gpgkey.asc
   ---[ 3A0F 2F80 F79C 678A 8936  4FEE 0677 9033 A20E BC50
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: Digital signature
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20080910/7a332f8f/attachment.pgp>