Re: Does tor still leak memory?

[Roger Dingledine <arma@xxxxxxx>]

On Fri, Sep 09, 2005 at 12:02:29AM -0500, Arrakis Tor wrote:
> Often when I visit one website or another I get tor directory... like
> I'm sniffing my own port 80...

Can you provide a bit more detail -- for example, does this only happen
for hostnames that shouldn't resolve to anything? Does it happen for
hostnames that you know should resolve to something?

Turn on info-err logging to a file:
http://wiki.noreply.org/noreply/TheOnionRouter/TorFAQ#Logs
and see if there's a pattern to which exit node you're using when you
get redirected. This is noisy, but look for log lines like:

Sep 09 03:25:57.516 [info] circuit_log_path(): exit circ (length 3): tor26(open) bolanda(open) sorot(open)
Sep 09 03:25:57.516 [info] connection_ap_handshake_send_begin(): Address/port sent, ap socket 13, n_circ_id 13032

In this case sorot was my exit node.

My guess is that some Tor server out there has a broken DNS resolver,
and it's tricking you into getting a different page than you intended.
(If only the Internet had ubiquitous dnssec and https...)

If you can narrow down which server it is, we can take some steps to
fix it.

Thanks,
--Roger