[tor-talk] de-anonymization by correlating circuit changes

[bemoo129 at hushmail.com]

Well, does anybody know, how an exit relay behaves if a circuit is 
closed?

For example: Someone is surfing on one specific website. After 10 
minutes, he will use another circuit for brwosing this website. But 
what about the first exit Node? 

Are tehre packets that are sent from the website to the exit node, 
allthough the circuit has been closed already?

This would be important to my question, because:

After 10 minutes, you dont find anything of the used middlenode in 
the exit nodes log, because the circuit is closed. But if there are 
packets from the website to the exit node, allthough there are no 
ones from the exit to the former middle, you cant correlate: This 
Website was viewed by this middlenode and so on. (well, only if the 
time difference is great enough, min. 20-30sec, i think.