Re: [tor-relays] Bandwidth Spike

2013-07-19 Thread Andreas Krey
On Fri, 19 Jul 2013 00:20:20 +, Bryan Carey wrote:
> I'm a fairly new Tor relay operator and noticed something peculiar with my
> bandwidth for the relay recently. It seems to have jumped WAY up and just
> plateaued at what I have the peak bandwidth limit set at.

Someone is doing a big download, and it happens to go through your relay?

My relays often ran into 'flatline' (capacity continuously used up)
until I set the AdvertizedBandwith lower than the actual limit.

...
> Here's a screenshot I took of the bandwidth history:
> https://i.imgur.com/mRyKp9L.jpg (note that both R/W plateau at the same
> point in time)

What bandwidth exactly (OS or tor)? After all what comes into the
relay must go out again - the strange thing is that the burst
does more 'Read' (150k) than 'write' (20k) while otherwise the
traffic is symmetric. Sure that there isn't anything else running
on your relay?

Andreas

-- 
"Totally trivial. Famous last words."
From: Linus Torvalds 
Date: Fri, 22 Jan 2010 07:29:21 -0800
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays


[tor-relays] Checking my Tor bridge and adventage of dynamic ip addresses

2013-07-19 Thread nobleeightfoldpath
Hi list members, Iam kinda new to Tor and decided to run a relay and
found heavy traffic on my router. No prob, but after reading the
documentation and some discussion boards I decided to make internet
access possible for people living in censorship and run a bridge on
Linux without Vidalia and other x related apps.

I use "Arm" to check the Tor daemon activities.

The bridge runs a few days and I see: flags: no, and there is nearly
zero traffic, avg 1.4 Kbs, mostly 0. Arm displays connections and I see
some IP addresses, 2 circuits. And often just - nothing. Obviously Tor
is running, but Iam afraid that my config isn't useful... How can I
check my bridge is really working?


Another question comes up. I use a cable connection to my ISP and they
don't change my IP address, until plugging off my modem and wait an
hour... I think if my bridge IP address is some day on some black lists,
it could be an adventage if my IP address changes, right? If so, what
changing time is fine, every day?

Regards

___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays


Re: [tor-relays] Checking my Tor bridge and adventage of dynamic ip addresses

2013-07-19 Thread Moritz Bartl
Hi,
On 19.07.2013 11:05, nobleeightfoldp...@lavabit.com wrote:
> The bridge runs a few days and I see: flags: no, and there is nearly
> zero traffic [...]

Bridges are handed out one by one to users from the pool of all bridges.
After a few days, only few users (if any) have been given your bridge
address. Then, every user is different: Some just try it out once, some
use it from time to time, and others are heavy users.

> How can I check my bridge is really working?

Unfortunately, there is no easy way to do so yet, apart from watching
Tor's logfile for error messages. You can look up your bridge in the
database, but it is not straightforward: For security reasons, the
database does not contain your bridge fingerprint, but a hash of your
fingerprint.
Example in python:

from binascii import a2b_hex
from hashlib import sha1
sha1(a2b_hex("")).hexdigest()

Take that result:

https://onionoo.torproject.org/details?search=

> Another question comes up. I use a cable connection to my ISP and they
> don't change my IP address, until plugging off my modem and wait an
> hour... I think if my bridge IP address is some day on some black lists,
> it could be an adventage if my IP address changes, right? If so, what
> changing time is fine, every day?

This is a fine question. It depends on who uses your bridge when, and in
what countries. I would not change address daily, but maybe every 2
weeks or every month.

-- 
Moritz Bartl
https://www.torservers.net/
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays


Re: [tor-relays] Sitevalley is no longer Tor-friendly

2013-07-19 Thread Marina Brown
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 07/19/2013 12:24 AM, grarpamp wrote:
> I don't see anything specific regarding Tor or its capabilities in
> their AUP. But there are bits that could be extended to cover Tor.
> Which it appears they did, whether for bandwidth or cost of dealing
> with 'complaints'.

It seems they may already have changed their AUP.

'contain any kind of proxy server or other traffic relaying programs'.

- --- Marina Brown


> 
> They are in New Hampshire, perhaps you could let the 
> FreeStateProject know (cc: SV) that they are perhaps not a company
> that FreeStater's should patronize.
> 
> Also, asking a hosters via their support/sales staff if they permit
> Tor is not helpful. These droids do not have the authority to do
> anything other than take the sale and kick you later. You need to
> talk with someone higher up beforehand if you wish to secure
> better long term footing from any provider.
> 
> Their AUP is ridiculous. Which is even more curious given they seem
> to be run by Russians and permit feedback reviews by hosted
> 'gaming' and 'teen-sex' sites on their front page. 
> ___ tor-relays mailing
> list tor-relays@lists.torproject.org 
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=mEse
-END PGP SIGNATURE-
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays


Re: [tor-relays] Checking my Tor bridge and adventage of dynamic ip addresses

2013-07-19 Thread Andreas Krey
On Fri, 19 Jul 2013 09:05:15 +, nobleeightfoldp...@lavabit.com wrote:
...
> How can I check my bridge is really working?

Take a tor browser bundle and set it up to use only your bridge,
and run it on another internet connection. (That does not check
whether it is in the bridge database.)

> Another question comes up. I use a cable connection to my ISP and they
> don't change my IP address, until plugging off my modem and wait an
> hour... I think if my bridge IP address is some day on some black lists,
> it could be an adventage if my IP address changes, right? If so, what
> changing time is fine, every day?

No, that's a bad idea. People that use your bridge can do so only
as long it has the same address; they wouldn't know when (and how)
the address changes and just see that the bridge thew are using
has disappeared.

Andreas

-- 
"Totally trivial. Famous last words."
From: Linus Torvalds 
Date: Fri, 22 Jan 2010 07:29:21 -0800
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays


Re: [tor-relays] Checking my Tor bridge and adventage of dynamic ip addresses

2013-07-19 Thread Sebastian G.
19.07.2013 11:05, nobleeightfoldp...@lavabit.com:

> I use "Arm" to check the Tor daemon activities.
> 
> The bridge runs a few days and I see: flags: no,

Arm relies on the consensus to tell an operator what flags his relay
got, but since bridges are not published in the consensus arm does not
show any flag.

The reason for bridges not being published in the consensus is to avoid
adversaries from simply looking into the consensus and block bridges as
well.

> and there is nearly
> zero traffic, avg 1.4 Kbs, mostly 0. Arm displays connections and I see
> some IP addresses, 2 circuits. And often just - nothing. Obviously Tor
> is running,

Usage of bridges is low for some bridges, higher for others. Bridges
that are stable for some time get more traffic, because user may come
back the next day and they tell their friends that they got a working
bridge.

Still it is difficult to guess who gets access to your bridge.

> but Iam afraid that my config isn't useful... How can I
> check my bridge is really working?

Atlas has no support for bridges, yet. Onionoo provides information
(also to Atlas), but not in a way to be handled by humans.

There is another project that makes use of the data Onionoo provides. It
implemented searching for bridges.

http://makepanic.github.io/emberjs-tor-onionoo/#/

Best,
bastik
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays


Re: [tor-relays] Checking my Tor bridge and adventage of dynamic ip addresses

2013-07-19 Thread nobleeightfoldpath
Hi list members,

I tried to grab some data in the database. In the upper part of my
results it shows obviously old data, because of the flags
"Fast","HSDir","Named","Running","V2Dir","Valid" - for three days I
switched to bridge mode. The IP addresses at or + dir aren't my address
today. They should have my IP address, right?

Below it looks a little newer,

"running":true,
"flags":["Running"],

that's an hint ;)

"last_seen":"2013-07-19 09:37:04",

that's nice, too!
But "or address" isn't mine... it's possible due to a router reset I got
a new IP address two days ago. Iam a little confused now!

Thanks to Sebastian, the link
http://makepanic.github.io/emberjs-tor-onionoo/#/ is more eye friendly
;) but there is another IP address, too.


What about mirroring directory:
The Tor manual shows for bridge config in the vidalia config window to
mirror the relay directory. I remember to read about it on another site
too. I configured it in torrc, but in "Arm" an error appears, bridge and
directory mirror won't run together. Why that?

Thanks to Andreas for the hint. I'll try it later this evening!

___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays


Re: [tor-relays] Checking my Tor bridge and adventage of dynamic ip addresses

2013-07-19 Thread Moritz Bartl
On 19.07.2013 13:55, nobleeightfoldp...@lavabit.com wrote:
> What about mirroring directory:
> The Tor manual shows for bridge config in the vidalia config window to
> mirror the relay directory. I remember to read about it on another site
> too. I configured it in torrc, but in "Arm" an error appears, bridge and
> directory mirror won't run together. Why that?

Only relays in the public directory (consensus) can be directory mirrors.

-- 
Moritz Bartl
https://www.torservers.net/
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays


Re: [tor-relays] Checking my Tor bridge and adventage of dynamic ip addresses

2013-07-19 Thread nobleeightfoldpath
Hi list members,

I tried to grab some data in the database. In the upper part of my
results it shows obviously old data, because of the flags
"Fast","HSDir","Named","Running","V2Dir","Valid" - for three days I
switched to bridge mode. The IP addresses at or + dir aren't my address
today. They should have my IP address, right?

Below it looks a little newer,

"running":true,
"flags":["Running"],

that's an hint ;)

"last_seen":"2013-07-19 09:37:04",

that's nice, too!
But "or address" isn't mine... it's possible due to a router reset I got
a new IP address two days ago. Iam a little confused now!

Thanks to Sebastian, the link
http://makepanic.github.io/emberjs-tor-onionoo/#/ is more eye friendly
;) but there is another IP address, too.


What about mirroring directory:
The Tor manual shows for bridge config in the vidalia config window to
mirror the relay directory. I remember to read about it on another site
too. I configured it in torrc, but in "Arm" an error appears, bridge and
directory mirror won't run together. Why that?

Thanks to Andreas for the hint. I tried it (with my real address, not
the address advertised in the db) and it works well!

___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays


Re: [tor-relays] Checking my Tor bridge and adventage of dynamic ip addresses

2013-07-19 Thread nobleeightfoldpath
Hi list members,

following probs remaining:

1. the ip address of my bridge is after around two days still the old
address in the db (ie. http://makepanic.github.io/emberjs-tor-onionoo).
That's probably why no one uses the bridge!? Testing with configuring
the client to use my bridge (with my actual address) works well! So it
is an unintended private bridge :) any ideas to trigger the db to change
the address?

2. where can I check if my ip address is black listed by censoring
countries? A friend told me to test it ie. with a chinese proxy. Is
there a "best practice" to check? In worst case I could change the ip
address.

Iam happy if I could run a useful bridge.

Regards :)


nobleeightfoldp...@lavabit.com:
> Hi list members,
> 
> I tried to grab some data in the database. In the upper part of my
> results it shows obviously old data, because of the flags
> "Fast","HSDir","Named","Running","V2Dir","Valid" - for three days I
> switched to bridge mode. The IP addresses at or + dir aren't my address
> today. They should have my IP address, right?
> 
> Below it looks a little newer,
> 
> "running":true,
> "flags":["Running"],
> 
> that's an hint ;)
> 
> "last_seen":"2013-07-19 09:37:04",
> 
> that's nice, too!
> But "or address" isn't mine... it's possible due to a router reset I got
> a new IP address two days ago. Iam a little confused now!
> 
> Thanks to Sebastian, the link
> http://makepanic.github.io/emberjs-tor-onionoo/#/ is more eye friendly
> ;) but there is another IP address, too.
> 
> 
> What about mirroring directory:
> The Tor manual shows for bridge config in the vidalia config window to
> mirror the relay directory. I remember to read about it on another site
> too. I configured it in torrc, but in "Arm" an error appears, bridge and
> directory mirror won't run together. Why that?
> 
> Thanks to Andreas for the hint. I tried it (with my real address, not
> the address advertised in the db) and it works well!
> 


___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays