Re: [tor-relays] Is TOR using more than just OrPort and DirPort?

Subject: Re: [tor-relays] Is TOR using more than just OrPort and DirPort?

From: Richard Budd <rotorbudd@xxxxxxxxx>

Date: Sun, 12 May 2013 17:28:06 -0400

Delivery-date: Sun, 12 May 2013 17:28:21 -0400

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:in-reply-to:references:date:message-id :subject:from:to:content-type; bh=zw3/e+KV1R+q5d9QqPGBF7dxJFbzoclEviR9qik65is=; b=fMI8ry4y/ZlIvZyNEFYv0tyGdpbr6a6umoUT8u9+v5Mc0AEcycIqhU+B4BiWTJQpcQ v1DGa6RqmVZ4QMrJkaRb1prdnOyXb173tGao9i3TnypddSSn01FVwybNhlgBBj3FLMNL psPkV0CKKuKHEz28rJIe2boeHXnncwY6RbP7z41tNhj3owCMrtgheTfMlaxsiZ2z2btl Yi9eEv4NF1hocDF/DEggyLpj+pgnMPorYG5aAVl6muUFFKYd+kJhL1xyahLFy6G49y/C kOzZIJ/Imb9OTl/OMtFBP6zM/FEZO+MFLzhNmVISuj3hD6Q5wqQPFQK2boqLZ/hsOZpW GyqA==

In-reply-to: <CAFeQB=TE8Rs8hJWaJgjg3xw56_Dw8eTZKcjTvs9+8nXk6ZtQ-A@xxxxxxxxxxxxxx>

List-archive: <http://lists.torproject.org/pipermail/tor-relays>

List-help: <mailto:tor-relays-request@lists.torproject.org?subject=help>

List-id: "support and questions about running Tor relays \(exit, non-exit, bridge\)" <tor-relays.lists.torproject.org>

List-post: <mailto:tor-relays@lists.torproject.org>

List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=subscribe>

List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=unsubscribe>

References: <CAFeQB=TE8Rs8hJWaJgjg3xw56_Dw8eTZKcjTvs9+8nXk6ZtQ-A@xxxxxxxxxxxxxx>

Reply-to: tor-relays@xxxxxxxxxxxxxxxxxxxx

Sender: tor-relays-bounces@xxxxxxxxxxxxxxxxxxxx

Tor will use many unblocked ports for outbound traffic I'm guessing.

I think that dd-wrt will open any port that Tor requests if you use port triggering.

On Sun, May 12, 2013 at 4:45 PM, Daniel Wu <dw2345@xxxxxxxxx> wrote:

I just started a relay (non-exit node, not running a client myself), on Windows, using the latest Vidalia Relay Bundle. Looks like from the configuration, given that I'm running in relay mode, there should be only two ports used by Tor (OrPort and DirPort), right? However, when I run "netstat -ano", I see that the Tor process is using up a lot more ports.

There are these connections, from 127.0.0.1 back to itself. Some sort of internal process used by Tor? Not as concerned about these, since these are internal. But still curious.

TCP 127.0.0.1:63417 127.0.0.1:63418 ESTABLISHED

TCP 127.0.0.1:63418 127.0.0.1:63417 ESTABLISHED

TCP 127.0.0.1:63419 127.0.0.1:63420 ESTABLISHED

But then I see connections like these:
TCP 192.168.1.202:55049 174.136.105.86:9001 ESTABLISHED

TCP 192.168.1.202:56804 37.128.208.46:9002 ESTABLISHED

TCP 192.168.1.202:56896 171.25.193.9:80 ESTABLISHED

TCP 192.168.1.202:57113 109.232.224.74:9001 ESTABLISHED

TCP 192.168.1.202:57206 91.227.249.44:9001 ESTABLISHED

TCP 192.168.1.202:57221 67.164.46.197:9001 ESTABLISHED

TCP 192.168.1.202:57253 128.31.0.34:9101 ESTABLISHED

TCP 192.168.1.202:57259 204.124.83.132:587 ESTABLISHED

TCP 192.168.1.202:57260 128.232.18.57:9001 ESTABLISHED

TCP 192.168.1.202:57309 204.124.83.131:443 ESTABLISHED

TCP 192.168.1.202:57331 81.24.98.236:9001 ESTABLISHED

These appear to be the actual Tor relay traffic (192.168.1.202 is my computer). Why are these using ports in the 55000+ range, when I specified my OrPort to be a singular value (in my case, 9031)? I would like to know the port ranges used by Tor for relay traffic, so I can use my dd-wrt to set the QoS by specifying these Tor port ranges.

Thanks,

DW

_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

_______________________________________________ tor-relays mailing list tor-relays@xxxxxxxxxxxxxxxxxxxx https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays