[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-relays] DirPort DOS activity against Fallback Directories




On 22 May 2018, at 04:29, Logforme <m7527@xxxxxx> wrote:

>> Just looked over a sample of FallBackDir relays in Relay Search and
>> it appears this excess-load abuse is directed at them in particular.
>> Some fall-back directories show more than a month of excess request
>> traffic, presumably on the DirPort.

Have you checked on a relay?

If it's from recent clients, it will be on the ORPort.

If it's from relays or descriptor parsing libraries like stem, it will probably
be on the DirPort.

>> Logs here indicate six weeks
>> of abuse escalating in increments.
> How can I find this information on my relay? (855BC2DABE24C861CD887DB9B2E950424B49FC34)

You can look at your relay's bandwidth graphs on relay search.

> The only weird stuff I've noticed is that memory usage have doubled. From 1.5GB to 3GB. Bandwidth is pegged at times, but not excessively so.

Then it might be harmless.

T
_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays