Re: unusual connection activity?

[Roger Dingledine <arma@xxxxxxx>]

On Wed, Jan 23, 2008 at 07:09:07PM +0000, john smith wrote:
> i have found something in the vidalia message log that seems a little unusual:
> 
> Jan 23 17:44:03.906 [Notice] Our IP Address has changed from
> 87.194.38.72 to 212.112.242.159; rebuilding descriptor.
> 
> Jan 23 17:44:11.546 [Notice] Self-testing indicates your ORPort is
> reachable from the outside. Excellent. Publishing server descriptor.
> 
> Jan 23 17:44:27.000 [Notice] Our IP Address has changed from
> 212.112.242.159 to 87.194.38.72; rebuilding descriptor.
> 
> Jan 23 17:44:30.375 [Notice] Self-testing indicates your ORPort is
> reachable from the outside. Excellent. Publishing server descriptor.
> 
> Jan 23 17:44:50.546 [Notice] Performing bandwidth self-test...done.
> 
> the 87.194.38.72 ip address belongs to my tor relay freeflow [not exit]
> the 212.112.242.159 ip address belongs to a tor relay called maximator
> based in germany.
> i installed tor 0.1.2.19 & began running as a server on Jan 22 at
> 21:18:44 & was previously running the same relay on tor 0.1.2.18/17/16

Neat!

Sounds like you've uncovered a bug in 0.1.2.19. I'm guessing you didn't
set your Address line, so Tor is doing its best to guess. And it sounds
like your Tor made a tunnelled connection through 212.112.242.159 to a
directory cache, and then it got suckered into thinking its IP address
had changed.

Can you give me a few more hints? Anything else in the logs? Is this
repeatable? Were you doing anything interesting at the time? Do you run
a hidden service too? Had your relay been running for a long time or
short time before this happened?

Has anybody else here experienced this?

Thanks,
--Roger