> Aug 6 DST=213.92.8.4 > Aug 16 DST=82.126.208.33 > Aug 17 DST=84.81.231.189 > Aug 18 DST=84.81.231.189 > Aug 22 DST=81.208.84.20 ahum: 84.81.231.189 was me testing my iptables, so forget about that. 82.126.208.33 and 81.208.84.20 can be non-tor packets (different behaviour, no related process logged on those days). So only 213.92.8.4 (calvino.freenode.net) seems to be real tor traffic.