Trac issueshttps://gitlab.torproject.org/legacy/trac/-/issues2020-06-13T14:39:06Zhttps://gitlab.torproject.org/legacy/trac/-/issues/13250Bandwidth not being used by Tor on Gigabit dedicated server2020-06-13T14:39:06ZTracBandwidth not being used by Tor on Gigabit dedicated serverHi,
My Tor node is not utilizing the bandwidth available to it. I have tried setting RelayBandwidthRate to various values with no change whatsoever in bandwidth usage.
Running for 5 months with 99.77% uptime: https://globe.torproj...Hi,
My Tor node is not utilizing the bandwidth available to it. I have tried setting RelayBandwidthRate to various values with no change whatsoever in bandwidth usage.
Running for 5 months with 99.77% uptime: https://globe.torproject.org/#/relay/1F6598EA09A82E7A5D3131E71A97C806E6FDA4A1
My node has used a maximum of about 4MB/s or about 40Mbps. I've been expecting it to use 10MB/sec to 30 MB/sec. It dropped from 4MB/sec to around 1MB/sec now.
OS: CentOS 6.x 64bit latest
CPU: Xeon E3 1230
MB: Supermicro X9SCL
RAM: 8GB
Network connection: 1000Mbps
Bandwidth tests show the server can easily send or receive hundreds of Mbps. I have tweaked server settings trying to get the speed up to no avail. I read the F
Tor v0.2.4.22 (git-1464fd60a8d3b529) running on Linux with Libevent 1.4.13-stable and OpenSSL 1.0.1e-fips.
Relevant config:
DirPort 9030 # what port to advertise for directory connections
RelayBandwidthRate 30 MB # Throttle traffic to 100KB/s (800Kbps)
RelayBandwidthBurst 30 MB # But allow bursts up to 200KB/s (1600Kbps)
DisableDebuggerAttachment 0
ORPort 443
Nickname apexio
ContactInfo apex@forked.net 1Apexiojb5ZYcxqGaZPxKgyRP6NDYRtg5o
ExitPolicy accept *:20-23 # FTP, SSH, telnet
ExitPolicy accept *:43 # WHOIS
ExitPolicy accept *:53 # DNS
ExitPolicy accept *:79-81 # finger, HTTP
ExitPolicy accept *:88 # kerberos
ExitPolicy accept *:110 # POP3
ExitPolicy accept *:143 # IMAP
ExitPolicy accept *:194 # IRC
ExitPolicy accept *:220 # IMAP3
ExitPolicy accept *:389 # LDAP
ExitPolicy accept *:443 # HTTPS
ExitPolicy accept *:464 # kpasswd
ExitPolicy accept *:531 # IRC/AIM
ExitPolicy accept *:543-544 # Kerberos
ExitPolicy accept *:554 # RTSP
ExitPolicy accept *:563 # NNTP over SSL
ExitPolicy accept *:636 # LDAP over SSL
ExitPolicy accept *:706 # SILC
ExitPolicy accept *:749 # kerberos
ExitPolicy accept *:873 # rsync
ExitPolicy accept *:902-904 # VMware
ExitPolicy accept *:981 # Remote HTTPS management for firewall
ExitPolicy accept *:989-995 # FTP over SSL, Netnews Administration System, telnets, IMAP over SSL, ircs, POP3 over SSL
ExitPolicy accept *:1194 # OpenVPN
ExitPolicy accept *:1220 # QT Server Admin
ExitPolicy accept *:1293 # PKT-KRB-IPSec
ExitPolicy accept *:1500 # VLSI License Manager
ExitPolicy accept *:1533 # Sametime
ExitPolicy accept *:1677 # GroupWise
ExitPolicy accept *:1723 # PPTP
ExitPolicy accept *:1755 # RTSP
ExitPolicy accept *:1863 # MSNP
ExitPolicy accept *:2082 # Infowave Mobility Server
ExitPolicy accept *:2083 # Secure Radius Service (radsec)
ExitPolicy accept *:2086-2087 # GNUnet, ELI
ExitPolicy accept *:2095-2096 # NBX
ExitPolicy accept *:2102-2104 # Zephyr
ExitPolicy accept *:3128 # SQUID
ExitPolicy accept *:3389 # MS WBT
ExitPolicy accept *:3690 # SVN
ExitPolicy accept *:4321 # RWHOIS
ExitPolicy accept *:4643 # Virtuozzo
ExitPolicy accept *:5050 # MMCC
ExitPolicy accept *:5190 # ICQ
ExitPolicy accept *:5222-5223 # XMPP, XMPP over SSL
ExitPolicy accept *:5228 # Android Market
ExitPolicy accept *:5900 # VNC
ExitPolicy accept *:6660-6669 # IRC
ExitPolicy accept *:6679 # IRC SSL
ExitPolicy accept *:6697 # IRC SSL
ExitPolicy accept *:8000 # iRDMI
ExitPolicy accept *:8008 # HTTP alternate
ExitPolicy accept *:8074 # Gadu-Gadu
ExitPolicy accept *:8080 # HTTP Proxies
ExitPolicy accept *:8087-8088 # Simplify Media SPP Protocol, Radan HTTP
ExitPolicy accept *:8332-8333 # BitCoin
ExitPolicy accept *:8443 # PCsync HTTPS
ExitPolicy accept *:8888 # HTTP Proxies, NewsEDGE
ExitPolicy accept *:9418 # git
ExitPolicy accept *:9999 # distinct
ExitPolicy accept *:10000 # Network Data Management Protocol
ExitPolicy accept *:11371 # OpenPGP hkp (http keyserver protocol)
ExitPolicy accept *:12350 # Skype
ExitPolicy accept *:19294 # Google Voice TCP
ExitPolicy accept *:19638 # Ensim control panel
ExitPolicy accept *:23456 # Skype
ExitPolicy accept *:33033 # Skype
ExitPolicy accept *:64738 # Mumble
ExitPolicy reject *:*
In addition, there's another Tor node running at the same ISP (but by a different person), on completely different hardware and a different router, that exhibits the same issue:
https://globe.torproject.org/#/relay/50F37822AFA257B24B3343D9BBFB0442E900FB4C
For background, I built and manage the network both servers are hosted on and have been doing so for 20 years. I also built both servers. The network is at less than 15% capacity, 99% of the time.
**Trac**:
**Username**: apexioTor: unspecifiedhttps://gitlab.torproject.org/legacy/trac/-/issues/12799fingerprints - descriptor Space removal, case normalization2020-06-13T14:37:44Zgrarpampfingerprints - descriptor Space removal, case normalizationcached-descriptors...
fingerprint 50E9 30FB 6141 E9A7 DAD4 968E 58DE AA1B 06CF 4908
Remove the spaces from the fingerprints.
This isn't OpenPGP, no one goes around reading them off to people. You have to click-hold-carefully-drag to sel...cached-descriptors...
fingerprint 50E9 30FB 6141 E9A7 DAD4 968E 58DE AA1B 06CF 4908
Remove the spaces from the fingerprints.
This isn't OpenPGP, no one goes around reading them off to people. You have to click-hold-carefully-drag to select the whole FP instead of a simple double-click. You have to postprocess strip them to make any use of them anywhere, including everywhere else in Tor... torctl, configs, etc. Nowhere else does Tor present/accept any fingerprints with spaces. And they currently waste about 60kB per descriptor set X all the nodes X frequency.
The spaces have no substantive use whatsoever and are very annoying!
Please remove them.
With that, normalize all displayed/coded fingerprints everywhere in Tor to be either upper or lower case... regardless of whether either/mixed case are supported/enforced as input. Lower case is suggested for better readability (ie: A4B8D0 vs. a4b8d0) and commonality with outputs of various hash programs.Tor: unspecifiedhttps://gitlab.torproject.org/legacy/trac/-/issues/12756I can't get the TorBrowser 3.6.3 to start fully under my OSX 10.6.8 system.2020-06-15T23:19:29ZTracI can't get the TorBrowser 3.6.3 to start fully under my OSX 10.6.8 system.[ I initially sent this to help@rt.torproject.org
then I've cleaned it up and enhanced it s'more
to insert it into this bug report
as per recommendation by "Matt Pagan via RT" ]
Hello,
I've been trying to use the TorBrowser.app 3...[ I initially sent this to help@rt.torproject.org
then I've cleaned it up and enhanced it s'more
to insert it into this bug report
as per recommendation by "Matt Pagan via RT" ]
Hello,
I've been trying to use the TorBrowser.app 3.6.2 and now 3.6.3 ---
I must run MacOSX 10.6.8 (too long to explain here, blame Apple for causing my predicament)
which should be supported by the documentation listed at the torproject.org website.
I used to be able to run the older Tor versions
which had us run Vidalia.app version 0.2.15 as a separate task
and the TorButton add-on for Firefox.
In the recent versions of TorBrowser,
I am always presented with a pop-up window saying the Tor Launcher has failed,
and so the TorBrowser won't come up.
(see attached file named 'cantstarttorbrowserscreengrab.png')
I might have an idea what's going on.
Here is a relevant snip of what is in my system.log:
> Jul 28 11:22:55 SciFi [0x0-0xb6cb6c].org.mozilla.torbrowser[63858]: Failed to find nss3 in installed directory, checking system paths.
> Jul 28 11:22:55 SciFi [0x0-0xb6cb6c].org.mozilla.torbrowser[63858]: SSL Observatory: Failed to initialize NSS component:Error: couldn't open library libnss3.dylib
> Jul 28 11:22:58 SciFi [0x0-0xb6cb6c].org.mozilla.torbrowser[63858]: Jul 28 11:22:58.565 [notice] Tor v0.2.4.22 (git-345e00dc68a052fe) running on Darwin with Libevent 2.0.21-stable and OpenSSL 1.0.1h.
> Jul 28 11:22:58 SciFi [0x0-0xb6cb6c].org.mozilla.torbrowser[63858]: Jul 28 11:22:58.786 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://www.torproject.org/download/download#warning
> Jul 28 11:22:58 SciFi [0x0-0xb6cb6c].org.mozilla.torbrowser[63858]: Jul 28 11:22:58.850 [notice] Read configuration file "/Applications/TorBrowser.app/Data/Tor/torrc-defaults".
> Jul 28 11:22:58 SciFi [0x0-0xb6cb6c].org.mozilla.torbrowser[63858]: Jul 28 11:22:58.851 [notice] Read configuration file "/Applications/TorBrowser.app/Data/Tor/torrc".
> Jul 28 11:22:58 SciFi [0x0-0xb6cb6c].org.mozilla.torbrowser[63858]: Jul 28 11:22:58.880 [warn] Couldn't set maximum number of file descriptors: Invalid argument
> Jul 28 11:22:58 SciFi [0x0-0xb6cb6c].org.mozilla.torbrowser[63858]: Jul 28 11:22:58.880 [warn] Failed to parse/validate config: Problem with ConnLimit value. See logs for details.
> Jul 28 11:22:58 SciFi [0x0-0xb6cb6c].org.mozilla.torbrowser[63858]: Jul 28 11:22:58.880 [err] Reading config failed--see warnings above.
I think it's the warning
> Couldn't set maximum number of file descriptors: Invalid argument
We had similar problems with the MakeMKV.app code
(at <http://www.makemkv.com/>)
because we've modified several sysctl values
dealing with such parameters
at the system level.
MakeMKV.app was not usable `unless` we started it as Root (Superuser UID=0).
I even bought a license
to properly register MakeMKV.
No help.
A bit over a year ago
I finally opened a ticket
with the staff there at MakeMKV.
Mike Chen helped find the reason.
Let me quote him:
> [… T]he new logic is to ignore the setrlimit error and hope for the best. In your case the value already was big enough.
That change in the MakeMKV code was all it took to fix it.
… … …
I wish I could patch & build the Tor code myself, but let me cover why I can't do this.
My history:
If you need to know,
I live in the city where the Murrah building was blown up.
(see <https://en.wikipedia.org/wiki/Alfred_P._Murrah_Federal_Building>)
At that time I was recovering from a 2nd operation to hopefully fix an inguinal hernia.
Many other things happened to me,
including being extra-sensitive to "something" in the air at the office where I worked
which "they" would never deal with properly
during the years I was there.
And so,
I've been on disability for over 7 years now.
All told, things are not getting any better for me.
I'm on SSD based on my nearly-40-years work on record.
I'm actually slated to be fully retired, too.
My main paid job was in technical matters with state govmt mainframes and state-wide networks.
I was also allowed to build open-source computer desktop systems (FreeBSD) in attempts to show how our govmt could save money that way.
My health got so bad, and many other things, forced me to get on SSD and to retire.
Then our office building was demolished because the Atty General wanted a parking lot for their offices.
[No relation to the Murrah building incident,
but it makes some of us wonder why "they" need to hide the evidence so damn quickly like that.]
Being forced to work in that office building was the main issue causing my illness.
Yes a conspiracy was afoot
but I no-longer have the proof
even tho Google-Earth has archives of that plot of land
where I believe my car at that time could be seen being parked there.
7 years ago I was able to get an iMac to keep me company
with the initial check/funds sent to me.
And that's where I am, today.
I have been unable to properly afford any 'real' desktop system ever since.
(I'd be happy for any help.)
I've had lots of help from our state human services,
I'm in their "Adult Protective Services" program.
I'm quite blunt & honest when I say
I am not crazy
yet I believe whoever was in charge of my plight
_was_,
in the same vein that Crooks are.
"They" tried many different drugs on me,
including those that are mind-altering.
I felt I must make that clear here.
I believe Apple has been embroiled with conspiracies, too.
FWIW, for me this started with the switch from PowerPC to Intel.
Back to current history:
I can't build big systems anymore.
Even this iMac won't boot-up on most open-src CD/DVD images.
Something with the EFI/BIOS, as I see it.
(Can't even boot-up Tails fully, see.)
But I _can-usually_ build separate projects
that will work under Darwin and/or X11/XQuartz
(such as enough of the GNome libraries and GNU utils et al.
to let me run the Pan newsreader, for example).
This iMac is model "iMac6,1"
which features a 32-bit EFI/BIOS
but it has a Core-2-Duo CPU
which does run most tasks in 64-bit mode.
It is in the same 'family'
as the early MacPro towers.
I've fitted the maximum RAM allowed in this model,
a full 4GB
comprised of two slots of 2GB each.
But I didn't know we were going to have such problems
as those MacPros were having
when I bought it
7 years ago.
I've adjusted many sysctl parms
in order to make it seem more server-ish
than end-user-ish.
I did that thru altered /etc/rc* files,
/etc/launchd[_user].conf files,
etc.
so we'd always have those values available
at every boot
and internal task start.
I also fitted the 'dnsmasq' project
(at <http://www.thekelleys.org.uk/dnsmasq/doc.html>)
in place of the regular DNS code
to let me control it better
(mainly to get around the dnscache problem).
I have OSX pointing DNS on the Network control panel
to localhost (127.0.0.1)
with the dnsmasq running in daemon mode
listening to DNS type requests,
which in turn has a huge 'hosts' type file
to filter-out many many 'bothersome' sites.
Right now it shows
> $ dnsmasq --version
> Dnsmasq version 2.67 Copyright (c) 2000-2013 Simon Kelley
> Compile time options: IPv6 GNU-getopt no-DBus no-i18n no-IDN DHCP DHCPv6 no-Lua TFTP no-conntrack no-ipset auth
> […]
I let the cable modem do the actual DHCP IP-addy assignments
(I have several HDHomeRun units on my local network [made by SiliconDust.com]
and a Xerox printer on the LAN
and a Mede8er model 500X2 HTPC on the LAN).
I have many tasks going on here 24/7/365,
cron-based (timed) and others such as EyeTV (Elgato.com)
even right now today as I type this note,
such that I've also had to get two big power UPS's
to curtail the summertime power blips, too.
Now I'm fighting the inevitable Heat buildup problem
during the summertime here.
I have fans drawing from a floor a/c vent
blowing onto the back of this iMac.
I even have a Dremel tool
in case I must open-up the back
to forcibly cool the innards. ;)
All this would be much better
if I could ever get a
real open-src tower/server system.
Such is Life when in my situation. ;p
Now every time I spot a possible incongruity
with the way I have things operating here
and the project(s),
I need to raise an alarm with someone in charge
to help try fixing it.
BTW please don't ask why I don't upgrade to OSX 10.7, please don't ask.
(It is the final official o.s. this model can supposedly run.
Altho I could try some files that might provide 'faked' 64-bit EFI/BIOS,
that's only good for booting-up later OSX versions tho
[not for e.g. Tails etc].
Otherwise with 10.7 I would lose so many things
such as Rosetta
and create [more] sandboxing issues
etc etc etc etc etc etc etc.
As long as I can build & update such projects as OpenSSL, GNU stuff, and others,
and then link the other projects to them,
I won't care what Apple does or doesn't do.
See? ;p
But I would _still_ rather have a real open-src tower/server system.
That's the bottom line for me.
)
Sorry this got so long & wordy.
Thank you/anyone for reading & possible help.
**Trac**:
**Username**: SciFihttps://gitlab.torproject.org/legacy/trac/-/issues/12720tor-0.2.4.22 configure static fails unless -ldl -lz after -lcrypto2020-06-13T15:31:52Zcypherpunkstor-0.2.4.22 configure static fails unless -ldl -lz after -lcrypto./configure --enable-static-tor --with-libevent-dir=/home/cypherpunks/libevent-2.0.21-stable --enable-static-openssl --with-openssl-dir=/home/cypherpunks/openssl-1.0.1h --with-zlib-dir=/home/cypherpunks/zlib-1.2.8
fails at checking on o..../configure --enable-static-tor --with-libevent-dir=/home/cypherpunks/libevent-2.0.21-stable --enable-static-openssl --with-openssl-dir=/home/cypherpunks/openssl-1.0.1h --with-zlib-dir=/home/cypherpunks/zlib-1.2.8
fails at checking on openssl directory
If I edit configure and I replace the line 7005:
LIBS="$tor_saved_LIBS -lssl -lcrypto $TOR_LIB_GDI"
with:
LIBS="-lssl -lcrypto $TOR_LIB_GDI $tor_saved_LIBS -lz"
then configure is complete and compilation is ok.
Please fix this for the next release.Tor: 0.2.4.x-finalhttps://gitlab.torproject.org/legacy/trac/-/issues/12670HiddenServicePort TARGET IPv6 address2020-06-13T14:54:37ZgrarpampHiddenServicePort TARGET IPv6 addressThe man page HiddenServicePort does not say anything about TARGET being an IPv6 address. Since Tor is becoming IPv6 enabled it probably should (ie: ::1, and precedence). There are some combinations to consider supporting if not already d...The man page HiddenServicePort does not say anything about TARGET being an IPv6 address. Since Tor is becoming IPv6 enabled it probably should (ie: ::1, and precedence). There are some combinations to consider supporting if not already done (latter dependant on host if tor is not bound to both)...
4 -> TARGET 4
6 -> TARGET 6
4 -> TARGET 6
6 -> TARGET 4Tor: 0.2.6.x-finalhttps://gitlab.torproject.org/legacy/trac/-/issues/12669Tor 0.2.4.22 memory leak (again)2020-06-13T14:37:34ZTracTor 0.2.4.22 memory leak (again)Hi,
I will try to give you all information about my problem. I started small project after getting BeagleBone Black motherboard, but i have issue with my Tor installation.
BeagleBone Black have only 512MB of RAM, but that is not proble...Hi,
I will try to give you all information about my problem. I started small project after getting BeagleBone Black motherboard, but i have issue with my Tor installation.
BeagleBone Black have only 512MB of RAM, but that is not problem, Tor + arm debian installation use less then 180MB of RAM. But day after day Tor start using more and more memory. First day Tor was running on 50MB second 100 and last news are 160MB. I guess that after one week system will go down.
If i run restart, that will fix this issue, but then my uptime goes back to 0 and that is not what i want to see. My relay have few flags in this time fast/valid/exit/running but if i need to restart him every day with cron job i lose flags and stability. Only extra settings are:
## Set a maximum of 4 gigabytes each way per period.
AccountingMax 4 GB
I use personal exit rules on my server.
Have a nice day!
**Trac**:
**Username**: BeagleBoneTor: 0.2.4.x-finalhttps://gitlab.torproject.org/legacy/trac/-/issues/12661Some directory authorities reject IP ranges long after we ask them to stop2020-06-13T16:03:28ZTracSome directory authorities reject IP ranges long after we ask them to stopWhat's going on here?
-------------------
Jul 20 00:45:16.000 [warn] http status 400 ("Authdir is rejecting routers in this range.") response from dirserver '193.23.244.244:80'. Please correct.
Jul 20 00:45:16.000 [warn] http status 40...What's going on here?
-------------------
Jul 20 00:45:16.000 [warn] http status 400 ("Authdir is rejecting routers in this range.") response from dirserver '193.23.244.244:80'. Please correct.
Jul 20 00:45:16.000 [warn] http status 400 ("Authdir is rejecting routers in this range.") response from dirserver '171.25.193.9:443'. Please correct.
Jul 20 00:45:16.000 [warn] http status 400 ("Authdir is rejecting routers in this range.") response from dirserver '194.109.206.212:80'. Please correct.
Jul 20 00:45:16.000 [warn] http status 400 ("Authdir is rejecting routers in this range.") response from dirserver '128.31.0.34:9131'. Please correct.
Jul 20 00:45:16.000 [warn] http status 400 ("Authdir is rejecting routers in this range.") response from dirserver '154.35.32.5:80'. Please correct.
Jul 20 00:45:16.000 [warn] http status 400 ("Authdir is rejecting routers in this range.") response from dirserver '76.73.17.194:9030'. Please correct.
Jul 20 00:45:16.000 [warn] http status 400 ("Authdir is rejecting routers in this range.") response from dirserver '208.83.223.34:443'. Please correct.
**Trac**:
**Username**: tmpname0901https://gitlab.torproject.org/legacy/trac/-/issues/12574Include unnamed family members in family2020-06-13T14:37:22ZcypherpunksInclude unnamed family members in familyMy relay path was using two members of the same family. PPTOR0006, PPTOR0014. According to Atlas they are in the same family:
https://atlas.torproject.org/#details/0C45FAE12326D376997F8A233A402A6B5BB25404
This was discussed on the tor-t...My relay path was using two members of the same family. PPTOR0006, PPTOR0014. According to Atlas they are in the same family:
https://atlas.torproject.org/#details/0C45FAE12326D376997F8A233A402A6B5BB25404
This was discussed on the tor-talk mailing list:
https://lists.torproject.org/pipermail/tor-talk/2014-July/033777.html
Roger Dingledine said:
"It looks like PTOR0014 has the Unnamed flag. I wonder if Tor clients are disregarding it because it's not named by fingerprint in the descriptor, and because it has the Unnamed flag rather than the Named flag.
Seems like a bug."
I am posting this using the public account. If you need more information you can e-mail me at soulplane11 at gmail dot com.Tor: unspecifiedhttps://gitlab.torproject.org/legacy/trac/-/issues/12565Atlas gived me error at relay questioning2020-06-13T18:06:19ZTracAtlas gived me error at relay questioningFrom today, when I try to question my statistics, Atlas doesn't show me, it gives me an error message that my query isn't properly formatted.This is happening from this morning, around 7 o'clock CEST, yesterday evening there were no erro...From today, when I try to question my statistics, Atlas doesn't show me, it gives me an error message that my query isn't properly formatted.This is happening from this morning, around 7 o'clock CEST, yesterday evening there were no errors, I didn't install any addons from yesterday.
Globe gives me an error message too.
I have traffic on my relay, vidalia doesn't give me any error messages
**Trac**:
**Username**: spectreVidalia: 0.2.15Philipp Winterphw@torproject.orgPhilipp Winterphw@torproject.orghttps://gitlab.torproject.org/legacy/trac/-/issues/12561Tor boots up but can't connect anywhere, OS X 10.92020-06-13T14:37:20ZTracTor boots up but can't connect anywhere, OS X 10.9Tor is able to connect to the Tor network but can't connect to any website (neither normal websites nor Hidden Services). It used to work just fine some months ago. Debug log attached. Issue exists on both standalone Tor (tested using to...Tor is able to connect to the Tor network but can't connect to any website (neither normal websites nor Hidden Services). It used to work just fine some months ago. Debug log attached. Issue exists on both standalone Tor (tested using torsocks) and TBB but the log is from standalone because it was easier to get.
I did a reinstall of OS X a few hours ago, so I'm sure I'm not missing anything like a crypto library.
In particular, this line - error repeatedly appears throughout the debug log (just once in the attachment, but multiple times in other tests):
> [debug] int tor_tls_read(tor_tls_t *, char *, size_t)(): read returned r=-1, err=-2
Tor (standalone) was installed using Homebrew.
**Trac**:
**Username**: tgkokkhttps://gitlab.torproject.org/legacy/trac/-/issues/12558Tor doesn't show warning for non-reachable IPv6 OR port2020-06-13T14:37:19ZTracTor doesn't show warning for non-reachable IPv6 OR portI recently upgraded my routers firmware. After that, I restarted Tor as usual. After one day, I noticed that atlas is showing my relay as offline since restart.
After more than hour of investigating, I found out that my router gave my R...I recently upgraded my routers firmware. After that, I restarted Tor as usual. After one day, I noticed that atlas is showing my relay as offline since restart.
After more than hour of investigating, I found out that my router gave my Raspberry Pi a new IPv6 interface ID. Due to this, my port forwarding didn't work anymore.
The strange thing is: In my tor logs, I saw this:
"Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor."
Looks like Tor was just referring to my IPv4 OR Port, which was still reachable, and didn't notice my non-reachable IPv6 OR Port. This issue should be fixed.
**Trac**:
**Username**: anonghttps://gitlab.torproject.org/legacy/trac/-/issues/12555Socks5 password authentication not working2020-06-13T14:37:18ZstarlightSocks5 password authentication not workingconfigured relay with
Socks5ProxyUsername user
Socks5ProxyPassword pass
added to FF 'prefs.js'
user_pref("network.proxy.socks_username", "user");
user_pref("network.proxy.socks_password", "pass");
not working as far as I can tell
Wi...configured relay with
Socks5ProxyUsername user
Socks5ProxyPassword pass
added to FF 'prefs.js'
user_pref("network.proxy.socks_username", "user");
user_pref("network.proxy.socks_password", "pass");
not working as far as I can tell
Wireshark of connection shows
Socks Protocol
Version: 5
Client Authentication Methods
Authentication Method Count: 1
Method[0]: 0 (No authentication)
so relay is not enforcing authentication
and I don't see any options for requiring
that it do soTor: unspecifiedhttps://gitlab.torproject.org/legacy/trac/-/issues/12493why do I have an exit flag?2020-06-13T14:37:04ZTracwhy do I have an exit flag?I have reject*:* set in torrc and the atlas says I have an exit flag.
https://atlas.torproject.org/#details/0EFDE7593A6B070D816B23FB628EE441788A6870
here's my torrc:
NB: the wiki formatting for the below text file WAS being corrupted...I have reject*:* set in torrc and the atlas says I have an exit flag.
https://atlas.torproject.org/#details/0EFDE7593A6B070D816B23FB628EE441788A6870
here's my torrc:
NB: the wiki formatting for the below text file WAS being corrupted by the characters used to obscure my e-mail address text string before I put in the wiki formatting for preformatted text (I did not choose/enter those characters, I think the arm wizard may have done that obsfucation for me), could that be related to this issue?
```
# This is a tor configuration made by arm. To change the configuration by hand
# edit this file then either...
# - tell arm to reset tor by pressing 'x'
# - run 'pkill -sighup tor'
# - or restart tor
#
# Descriptions of all of these configuration attributes (and many more) are
# available in the tor man page.
DataDirectory /var/lib/tor/.arm/tor_data # location to store runtime data
Log notice file /var/lib/tor/.arm/tor_log # location to log notices, warnings, and errors
ControlPort 9052 # port controllers can connect to
CookieAuthentication 1 # method for controller authentication
RunAsDaemon 1 # runs as a background process
ORPort 9001 # port used for relaying traffic
DirPort 9030 # port used for mirroring directory information
Nickname rdewald # name for this relay
ContactInfo rdewald{---At>>}rdewald[_doT__]com # contact information in case there's an issue
ExitPolicy reject *:* # prevents us from connecting to non-relays
DisableDebuggerAttachment 0 # Makes lsof and netstat work
```
**Trac**:
**Username**: rdewaldhttps://gitlab.torproject.org/legacy/trac/-/issues/12473ARM does not display correct fingerprint after change2014-06-26T18:50:00ZTracARM does not display correct fingerprint after changeI originally set-up my relay incorrectly as an exit and I didn't realize this until I got the e-mail from tor-weather that it was stable (I am on a home cable Internet connection). I moved that torrc and created a new one using the ARM ...I originally set-up my relay incorrectly as an exit and I didn't realize this until I got the e-mail from tor-weather that it was stable (I am on a home cable Internet connection). I moved that torrc and created a new one using the ARM wizard.
The finger print for my new relay is 0EFDE7593A6B070D816B23FB628EE441788A6870
the attached screen-shot displays what ARM shows
**Trac**:
**Username**: rdewaldDamian JohnsonDamian Johnsonhttps://gitlab.torproject.org/legacy/trac/-/issues/12448assign_onionskin_to_cpuworker: Assertion cpuworker failed2020-06-13T14:36:58ZTracassign_onionskin_to_cpuworker: Assertion cpuworker failed[Вс 22. июн 15:55:12 2014] Ошибка Tor - Произошла внутренняя ошибка Tor. Пожалуйста, сообщите следующее сообщение об ошибке разработчикам Tor на bugs.torproject.org: "assign_onionskin_to_cpuworker(): Bug: cpuworker.c:680: assign_onionski...[Вс 22. июн 15:55:12 2014] Ошибка Tor - Произошла внутренняя ошибка Tor. Пожалуйста, сообщите следующее сообщение об ошибке разработчикам Tor на bugs.torproject.org: "assign_onionskin_to_cpuworker(): Bug: cpuworker.c:680: assign_onionskin_to_cpuworker: Assertion cpuworker failed; aborting."
**Trac**:
**Username**: nisparelhttps://gitlab.torproject.org/legacy/trac/-/issues/12227ASan stack-buffer-overflow in prune_v2_cipher_list -- not exploitable2020-06-13T14:36:44ZstarlightASan stack-buffer-overflow in prune_v2_cipher_list -- not exploitableFound a minor buffer overflow when
running live relay with 'tor' and
'openssl' both compiled with
AddressSanitizer.
tortls.c:1492: unsigned char cipherid[2];
should be three characters and the
final byte initialized to zero for
...Found a minor buffer overflow when
running live relay with 'tor' and
'openssl' both compiled with
AddressSanitizer.
tortls.c:1492: unsigned char cipherid[2];
should be three characters and the
final byte initialized to zero for
ssl2_get_cipher_by_char()
to function correctly and to avoid
an ASan access exception.
Tested patch that resolves this
issue is attached.
Compiled with gcc 4.8.1 and with
these added options:
tor-0.2.4.22
-O1 # instead of -O2
-fsanitize=address
-fno-omit-frame-pointer
openssl-1.0.1h
-fstack-protector-all
--param ssp-buffer-size=1
-fsanitize=address
-fno-omit-frame-pointer
-DOPENSSL_NO_BUF_FREELISTTor: 0.2.4.x-finalhttps://gitlab.torproject.org/legacy/trac/-/issues/12192TOR does not function on hardened linux kernel with PaX2020-06-13T14:36:37ZcypherpunksTOR does not function on hardened linux kernel with PaXThe latest version of TOR is suffering from an RWX mprotect issue which grsec is blocking for security reasons.
[user@localhost]$ tor
tor: error while loading shared libraries: cannot make segment writable for relocation: Permission den...The latest version of TOR is suffering from an RWX mprotect issue which grsec is blocking for security reasons.
[user@localhost]$ tor
tor: error while loading shared libraries: cannot make segment writable for relocation: Permission denied
dmesg:
[ 1392.928420] grsec: denied RWX mprotect of /usr/bin/tor by /usr/bin/tor[tor:1003] uid/euid:1000/1000 gid/egid:100/100, parent /usr/bin/bash[bash:1001] uid/euid:1000/1000 gid/egid:100/100
------------
strace:
1157 brk(0) = 0xcc9ffc5d390
1157 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
1157 open("/home/user/GNUstep/Library/Libraries/tls/x86_64/libz.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
1157 stat("/home/user/GNUstep/Library/Libraries/tls/x86_64", 0x707c3ec3a3a0) = -1 ENOENT (No such file or directory)
1157 open("/home/user/GNUstep/Library/Libraries/tls/libz.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
1157 stat("/home/user/GNUstep/Library/Libraries/tls", 0x707c3ec3a3a0) = -1 ENOENT (No such file or directory)
1157 open("/home/user/GNUstep/Library/Libraries/x86_64/libz.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
1157 stat("/home/user/GNUstep/Library/Libraries/x86_64", 0x707c3ec3a3a0) = -1 ENOENT (No such file or directory)
1157 open("/home/user/GNUstep/Library/Libraries/libz.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
1157 stat("/home/user/GNUstep/Library/Libraries", 0x707c3ec3a3a0) = -1 ENOENT (No such file or directory)
1157 open("/usr/lib/tls/x86_64/libz.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
1157 stat("/usr/lib/tls/x86_64", 0x707c3ec3a3a0) = -1 ENOENT (No such file or directory)
1157 open("/usr/lib/tls/libz.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
1157 stat("/usr/lib/tls", 0x707c3ec3a3a0) = -1 ENOENT (No such file or directory)
1157 open("/usr/lib/x86_64/libz.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
1157 stat("/usr/lib/x86_64", 0x707c3ec3a3a0) = -1 ENOENT (No such file or directory)
1157 open("/usr/lib/libz.so.1", O_RDONLY|O_CLOEXEC) = 3
1157 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0000#\0\0\0\0\0\0@\0\0\0\0\0\0\0\20S\1\0\0\0\0\0\0\0\0\0@\0008\0\7\0@\0\34\0\33\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0<G\1\0\0\0\0\0<G\1\0\0\0\0\0\0\0 \0\0\0\0\0\1\0\0\0\6\0\0\0\260L\1\0\0\0\0\0\260L!\0\0\0\0\0\260L!\0\0\0\0\0P\5\0\0\0\0\0\0X\5\0\0\0\0\0\0\0\0 \0\0\0\0\0\2\0\0\0\6\0\0\0\320M\1\0\0\0\0\0\320M!\0\0\0\0\0\320M!\0\0\0\0\0\360\1\0\0\0\0\0\0\360\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0\310\1\0\0\0\0\0\0\310\1\0\0\0\0\0\0\310\1\0\0\0\0\0\0$\0\0\0\0\0\0\0$\0\0\0\0\0\0\0\4\0\0\0\0\0\0\0P\345td\4\0\0\0\210+\1\0\0\0\0\0\210+\1\0\0\0\0\0\210+\1\0\0\0\0\0\264\3\0\0\0\0\0\0\264\3\0\0\0\0\0\0\4\0\0\0\0\0\0\0Q\345td\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\0\0\0\0R\345td\4\0\0\0\260L\1\0\0\0\0\0\260L!\0\0\0\0\0\260L!\0\0\0\0\0P\3\0\0\0\0\0\0P\3\0\0\0\0\0\0\1\0\0\0\0\0\0\0\4\0\0\0\24\0\0\0\3\0\0\0GNU\0r\22\244\307\251\227G\251\\\356\216\244g_\266\"\27\357F&\0\0\0\0\247\0\0\0\27\0\0\0\10\0\0\0\t\0\0\0\0\3h\24\f\3$\24\221\0\223A;\0\16\30\234\1\4DQ\f\0\210,\0\303\"\224\27\212\203\0c0\262G\212PC ,\20\35\210\341\200\213A\220\23e$g\304\201V\0.\20\2\200\0\20\0\0\0\0\27\0\0\0\0\0\0\0\31\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\32\0\0\0\33\0\0\0\0\0\0\0\0\0\0\0\34\0\0\0\35\0\0\0\37\0\0\0\0\0\0\0\0\0\0\0 \0\0\0!\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\"\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0#\0\0\0\0\0\0\0\0\0\0\0$\0\0\0\0\0\0\0%\0\0\0&\0\0\0'\0\0\0\0\0\0\0)\0\0\0*\0\0\0,\0\0\0.\0\0\0\0\0\0\0\0\0\0\0/\0\0\0000\0\0\0001\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0002\0\0\0003\0\0\0\0\0\0\0004\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0005\0\0\0\0\0\0\0\0\0\0\0006\0\0\0\0\0\0\0007\0\0\0008\0\0\0\0\0\0\0", 832) = 832
1157 fstat(3, {st_dev=makedev(8, 3), st_ino=135701, st_mode=S_IFREG|0755, st_nlink=1, st_uid=0, st_gid=0, st_blksize=4096, st_blocks=176, st_size=88592, st_atime=2014/06/02-22:17:38, st_mtime=2013/10/21-04:39:42, st_ctime=2013/10/27-12:37:30}) = 0
1157 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x66443bcdd000
1157 mmap(NULL, 2183688, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x66443b8aa000
1157 mprotect(0x66443b8bf000, 2093056, PROT_NONE) = 0
1157 mmap(0x66443babe000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x14000) = 0x66443babe000
1157 close(3) = 0
1157 open("/usr/lib/libm.so.6", O_RDONLY|O_CLOEXEC) = 3
1157 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\200U\0\0\0\0\0\0@\0\0\0\0\0\0\0@2\20\0\0\0\0\0\0\0\0\0@\0008\0\t\0@\0\36\0\35\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0\370\1\0\0\0\0\0\0\370\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0P\227\17\0\0\0\0\0P\227\17\0\0\0\0\0P\227\17\0\0\0\0\0\36\0\0\0\0\0\0\0\36\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\224*\20\0\0\0\0\0\224*\20\0\0\0\0\0\0\0 \0\0\0\0\0\1\0\0\0\6\0\0\0\220-\20\0\0\0\0\0\220-0\0\0\0\0\0\220-0\0\0\0\0\0|\3\0\0\0\0\0\0\310\3\0\0\0\0\0\0\0\0 \0\0\0\0\0\2\0\0\0\6\0\0\0\250-\20\0\0\0\0\0\250-0\0\0\0\0\0\250-0\0\0\0\0\0\20\2\0\0\0\0\0\0\20\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0008\2\0\0\0\0\0\0008\2\0\0\0\0\0\0008\2\0\0\0\0\0\0D\0\0\0\0\0\0\0D\0\0\0\0\0\0\0\4\0\0\0\0\0\0\0P\345td\4\0\0\0p\227\17\0\0\0\0\0p\227\17\0\0\0\0\0p\227\17\0\0\0\0\0\374\22\0\0\0\0\0\0\374\22\0\0\0\0\0\0\4\0\0\0\0\0\0\0Q\345td\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0R\345td\4\0\0\0\220-\20\0\0\0\0\0\220-0\0\0\0\0\0\220-0\0\0\0\0\0p\2\0\0\0\0\0\0p\2\0\0\0\0\0\0\1\0\0\0\0\0\0\0\4\0\0\0\24\0\0\0\3\0\0\0GNU\0\272\371\360@.\300}\311\243\260\355\27\271\374=\n1\233\264\251\4\0\0\0\20\0\0\0\1\0\0\0GNU\0\0\0\0\0\2\0\0\0\6\0\0\0 \0\0\0\0\0\0\0\35\3\0\0\24\0\0\0@\0\0\0\f\0\0\0%\0`\0\0\240.\"\200\0\26\211\0 E\"\2\0\300``i\10\212\0\t\0\0\0\0\0\0\0\0\0\0\0\0\212P\20\1\10\0\0\4\1\302\24\1 \210\"\0\304\243X\240\n\6\216\0\212\0\0\4\0@\0\0 \20\0\5\0\5\r\7\7\22A\0\1\0\10\0\0@\0\t\0\20\4D\30\4\200a(\22@\4\1\nE\221 @\200\f\22\1\0\0\0\0\0\0\0\0\4\2\0\0\0@\0\200\2\20\322\0\1\10\4\301 E\1\0\310\"\0\4\2\0\202\0\4\0\0\0\4\0Y\4\2\0\n\200\1\0\0\4\0\20 \3\0\0\210 \10\20\0\0", 832) = 832
1157 fstat(3, {st_dev=makedev(8, 3), st_ino=136763, st_mode=S_IFREG|0755, st_nlink=1, st_uid=0, st_gid=0, st_blksize=4096, st_blocks=2080, st_size=1063360, st_atime=2014/06/02-21:25:52, st_mtime=2014/05/16-04:15:29, st_ctime=2014/05/24-20:19:08}) = 0
1157 mmap(NULL, 3158360, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x66443b5a6000
1157 mprotect(0x66443b6a9000, 2093056, PROT_NONE) = 0
1157 mmap(0x66443b8a8000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x102000) = 0x66443b8a8000
1157 close(3) = 0
1157 open("/usr/lib/libevent-2.0.so.5", O_RDONLY|O_CLOEXEC) = 3
1157 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20\320\0\0\0\0\0\0@\0\0\0\0\0\0\0000n\4\0\0\0\0\0\0\0\0\0@\0008\0\7\0@\0\33\0\32\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0TP\4\0\0\0\0\0TP\4\0\0\0\0\0\0\0 \0\0\0\0\0\1\0\0\0\6\0\0\0\230Z\4\0\0\0\0\0\230Z$\0\0\0\0\0\230Z$\0\0\0\0\0\230\22\0\0\0\0\0\0\220\31\0\0\0\0\0\0\0\0 \0\0\0\0\0\2\0\0\0\6\0\0\0\240]\4\0\0\0\0\0\240]$\0\0\0\0\0\240]$\0\0\0\0\0\340\1\0\0\0\0\0\0\340\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0\310\1\0\0\0\0\0\0\310\1\0\0\0\0\0\0\310\1\0\0\0\0\0\0$\0\0\0\0\0\0\0$\0\0\0\0\0\0\0\4\0\0\0\0\0\0\0P\345td\4\0\0\0\254\254\3\0\0\0\0\0\254\254\3\0\0\0\0\0\254\254\3\0\0\0\0\0\f\27\0\0\0\0\0\0\f\27\0\0\0\0\0\0\4\0\0\0\0\0\0\0Q\345td\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\0\0\0\0R\345td\4\0\0\0\230Z\4\0\0\0\0\0\230Z$\0\0\0\0\0\230Z$\0\0\0\0\0h\5\0\0\0\0\0\0h\5\0\0\0\0\0\0\1\0\0\0\0\0\0\0\4\0\0\0\24\0\0\0\3\0\0\0GNU\0\226u\327\347\265Y\250/\345B\356\211\316\340\t8\3\n\226\235\0\0\0\0\372\3\0\0]\0\0\0@\0\0\0\f\0\0\0 \203\0B\1\200,p\201\210I\200\0\20\0\0\202\4d\4\1\24\201\304\4\3\3Tm\0\5\222\21\24\306\30(\200:(@\3@\340\0\0\0Jl\10\314\25\300\212\250@\240\3 \1\24*\10\270\3\1\"\10\10\4\0 Q\264A\36T\264\0#\200\10\0\2\2\0\5\10\236\t\246\0\5\214\22\5\t\2\31\31\n\5\200\0 \0\4\1\20(\5\4\0\0\200\0\4@\20\30\3\307\324\320\16\225p AC@\10\n\10(\310\350]\0\4p\4\1X\300$\n\300\10\2\322R\226bA\20\2\224\4\300)\205\201@\10\"\0\4\f4S\265v\n\243\1\4\0\22\311\200\0\320\200\200\202Q\0@L\220\16\200@ \0\20\0D\"\0p\0m0\32\4R\240 \0\2\320L-\t\0\310D)!(\0\4\0\1\1 \300@\0\220@e\2\0000\"\10\230Q\f\200\200\232\20$\0\20\2\200\244\0004\0\4\20\0d U\7`\26\1\200\0\2\224\320\1\21H\0\2\21\10\1\10D\311R\4F0\34a\f5\312\200\r.\240`\1@\30\0\20\210\3450\rE\0\21R\3s\210@\f\0\1\5\5\10\202\"", 832) = 832
1157 fstat(3, {st_dev=makedev(8, 3), st_ino=142850, st_mode=S_IFREG|0755, st_nlink=1, st_uid=0, st_gid=0, st_blksize=4096, st_blocks=576, st_size=292080, st_atime=2014/06/03-12:42:45, st_mtime=2013/10/24-00:48:28, st_ctime=2013/10/27-12:38:54}) = 0
1157 mmap(NULL, 2389032, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x66443b35e000
1157 mprotect(0x66443b3a4000, 2093056, PROT_NONE) = 0
1157 mmap(0x66443b5a3000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x45000) = 0x66443b5a3000
1157 mmap(0x66443b5a5000, 1064, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x66443b5a5000
1157 close(3) = 0
1157 open("/usr/lib/libssl.so.1.0.0", O_RDONLY|O_CLOEXEC) = 3
1157 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\240y\1\0\0\0\0\0@\0\0\0\0\0\0\0X\301\6\0\0\0\0\0\0\0\0\0@\0008\0\7\0@\0\35\0\32\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\314\"\6\0\0\0\0\0\314\"\6\0\0\0\0\0\0\0 \0\0\0\0\0\1\0\0\0\6\0\0\0\310,\6\0\0\0\0\0\310,&\0\0\0\0\0\310,&\0\0\0\0\0h\223\0\0\0\0\0\0h\224\0\0\0\0\0\0\0\0 \0\0\0\0\0\2\0\0\0\6\0\0\0\210]\6\0\0\0\0\0\210]&\0\0\0\0\0\210]&\0\0\0\0\0\360\1\0\0\0\0\0\0\360\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0\310\1\0\0\0\0\0\0\310\1\0\0\0\0\0\0\310\1\0\0\0\0\0\0$\0\0\0\0\0\0\0$\0\0\0\0\0\0\0\4\0\0\0\0\0\0\0P\345td\4\0\0\0\0\241\5\0\0\0\0\0\0\241\5\0\0\0\0\0\0\241\5\0\0\0\0\0\344\22\0\0\0\0\0\0\344\22\0\0\0\0\0\0\4\0\0\0\0\0\0\0Q\345td\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0R\345td\4\0\0\0\310,\6\0\0\0\0\0\310,&\0\0\0\0\0\310,&\0\0\0\0\00083\0\0\0\0\0\00083\0\0\0\0\0\0\1\0\0\0\0\0\0\0\4\0\0\0\24\0\0\0\3\0\0\0GNU\0\246B\237F\375\200^\360r\"j\304\362\34CL\16x7\304\0\0\0\0\353\3\0\0q\1\0\0@\0\0\0\f\0\0\0\0\30\211i\24H\25\23E\21\10 \2\2\0B.5L\0\v\n\4\10\216\250H\1\0<\20B\0(\0\4\0\0\0\10\0\0\n\0\0\6\33\0\6\10\3\340\304\1\"l\224\210\0\35O\2!\0\30Y\t\20@\6\301\10\5\210\4\0\0@\2\210,A\0\242 \22\0Y\0\10\321\0\5p\20\200\2\21\r@\23@\0\10\10:\1\211\200\226\204\0\200D\0028NB\10\10\260,\215\0 \304\2\"\210\200\202\0\1\0\304Aq\220\200\222 \2 \200\4\1P\24P\0\30\"\"\0*@bA\341\10\10\2 \1F\242\301D\32\2\25\1@\244\n\1G \3\0010\"FF\2\0B\0\5 @@\240\34\20\2@\2\202\214\31a B!\2060` A\37v\204A@\1\326\203B\230\26\3\3\0H@0\210\266\0\4 \10\200@\4\222C\200\330\200\nB,\0,\t\20\10H\"l\10 B\24\346\0\t\21 r\20\2\n \4\4\2112\24\4\1 $\204\0\4\360\250p1\212\f\4\35\3\0\4\7\0@\0\1Cp\1\2\0\20\300 \10` \2H\0\21\0250\0\212\246\30\311\211\3", 832) = 832
1157 fstat(3, {st_dev=makedev(8, 3), st_ino=138401, st_mode=S_IFREG|0555, st_nlink=1, st_uid=0, st_gid=0, st_blksize=4096, st_blocks=968, st_size=492396, st_atime=2014/06/02-22:17:38, st_mtime=2014/04/07-16:27:39, st_ctime=2014/04/09-23:26:41}) = 0
1157 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x66443bcdc000
1157 mmap(NULL, 2539824, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x66443b0f1000
1157 mprotect(0x66443b154000, 2093056, PROT_NONE) = 0
1157 mmap(0x66443b353000, 45056, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x62000) = 0x66443b353000
1157 close(3) = 0
1157 open("/usr/lib/libcrypto.so.1.0.0", O_RDONLY|O_CLOEXEC) = 3
1157 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0-\6\0\0\0\0\0@\0\0\0\0\0\0\0\350\37 \0\0\0\0\0\0\0\0\0@\0008\0\7\0@\0\35\0\32\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0,\312\35\0\0\0\0\0,\312\35\0\0\0\0\0\0\0 \0\0\0\0\0\1\0\0\0\6\0\0\0\270\317\35\0\0\0\0\0\270\317=\0\0\0\0\0\270\317=\0\0\0\0\0\tO\2\0\0\0\0\0`\215\2\0\0\0\0\0\0\0 \0\0\0\0\0\2\0\0\0\6\0\0\0\260m\37\0\0\0\0\0\260m?\0\0\0\0\0\260m?\0\0\0\0\0\0\2\0\0\0\0\0\0\0\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0\310\1\0\0\0\0\0\0\310\1\0\0\0\0\0\0\310\1\0\0\0\0\0\0$\0\0\0\0\0\0\0$\0\0\0\0\0\0\0\4\0\0\0\0\0\0\0P\345td\4\0\0\0\250 \32\0\0\0\0\0\250 \32\0\0\0\0\0\250 \32\0\0\0\0\0<\217\0\0\0\0\0\0<\217\0\0\0\0\0\0\4\0\0\0\0\0\0\0Q\345td\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0R\345td\4\0\0\0\270\317\35\0\0\0\0\0\270\317=\0\0\0\0\0\270\317=\0\0\0\0\0H\240\1\0\0\0\0\0H\240\1\0\0\0\0\0\1\0\0\0\0\0\0\0\4\0\0\0\24\0\0\0\3\0\0\0GNU\0\37\335\354\267\233\265\350L2\312\24\276\rw\35\27\16\21\350\1\0\0\0\0\371\3\0\0t\0\0\0\0\2\0\0\17\0\0\0\1\0\30\205D\4\201\200a\200\2\0%L\4\200\201\0\0\10\30\206\4\200\10\2!\300\220\0@\0\201\204\3\21\204\244`\0F\10\fH\0\3\200\24\201\0\212\4\t\3\311\204\10\2l\30\200\2\0051\10H\1\204\10\0 \0\254\24t\201\23(T\4\0\22BE\t@\340\20\f\224\34\0\0Q\0\300 \1\0H(\f\300C\10D\211\2\0\34\0\0@\2 \210\21Q,\224\205\200\0@\fh\"\16\0\0@\0\24@\0\0\0\6\220\16\0\0(\5\7\0f\0b\264\2\2\4\200\220@\0T2\10\0\0\0\0\340\0\0\1\3\t\f\202\24#\10\v\10\0A\200\2 \4\202;\4@\27\5\2\17@\242`\v\0245\201\2E\306\2\0\210\21\0\0'\200\0\202!\f\204\0\2\0010\341\10\10\0\240 \273\0\2250\201\204\20\0a\10B\10\34\10\240\21\r\0@\4 \"\4\4\0@\204\261\201\f\200\300\31\24p4\200\2\0\6Ta\0\220D!\2\244\200@A\20@i@\n\240\240\223\0\23$\354\2D&\270\10\20\0C\1\0H$\0\0C\4\2B\254\21@\4 \"@\2\16 \0\0\5\221Q", 832) = 832
1157 fstat(3, {st_dev=makedev(8, 3), st_ino=138402, st_mode=S_IFREG|0555, st_nlink=1, st_uid=0, st_gid=0, st_blksize=4096, st_blocks=4648, st_size=2378773, st_atime=2014/06/02-22:17:38, st_mtime=2014/04/07-16:27:39, st_ctime=2014/04/09-23:26:41}) = 0
1157 mmap(NULL, 4218136, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x66443aceb000
1157 mprotect(0x66443aec8000, 2093056, PROT_NONE) = 0
1157 mmap(0x66443b0c7000, 155648, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1dc000) = 0x66443b0c7000
1157 mmap(0x66443b0ed000, 15640, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x66443b0ed000
1157 close(3) = 0
1157 open("/usr/lib/libpthread.so.0", O_RDONLY|O_CLOEXEC) = 3
1157 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0000`\0\0\0\0\0\0@\0\0\0\0\0\0\0h\225\1\0\0\0\0\0\0\0\0\0@\0008\0\t\0@\0%\0\"\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0\370\1\0\0\0\0\0\0\370\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\0%\1\0\0\0\0\0\0%\1\0\0\0\0\0\0%\1\0\0\0\0\0\36\0\0\0\0\0\0\0\36\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\244\177\1\0\0\0\0\0\244\177\1\0\0\0\0\0\0\0 \0\0\0\0\0\1\0\0\0\6\0\0\0`\213\1\0\0\0\0\0`\213!\0\0\0\0\0`\213!\0\0\0\0\0`\7\0\0\0\0\0\0000I\0\0\0\0\0\0\0\0 \0\0\0\0\0\2\0\0\0\6\0\0\0000\215\1\0\0\0\0\0000\215!\0\0\0\0\0000\215!\0\0\0\0\0000\2\0\0\0\0\0\0000\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0008\2\0\0\0\0\0\0008\2\0\0\0\0\0\0008\2\0\0\0\0\0\0D\0\0\0\0\0\0\0D\0\0\0\0\0\0\0\4\0\0\0\0\0\0\0P\345td\4\0\0\0 %\1\0\0\0\0\0 %\1\0\0\0\0\0 %\1\0\0\0\0\0,\v\0\0\0\0\0\0,\v\0\0\0\0\0\0\4\0\0\0\0\0\0\0Q\345td\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0R\345td\4\0\0\0`\213\1\0\0\0\0\0`\213!\0\0\0\0\0`\213!\0\0\0\0\0\240\4\0\0\0\0\0\0\240\4\0\0\0\0\0\0\1\0\0\0\0\0\0\0\4\0\0\0\24\0\0\0\3\0\0\0GNU\0000\357\306+hc4\325\3\21\334\313\303\206=\3238&\306\250\4\0\0\0\20\0\0\0\1\0\0\0GNU\0\0\0\0\0\2\0\0\0\6\0\0\0 \0\0\0\0\0\0\0\345\1\0\0V\0\0\0 \0\0\0\v\0\0\0\31#\2\261\1\10\20\2@@a\370\3\10\10\25\200 \0\0\0\0\200\300\321Q\0\0\0\22\353\3020D\0\10\20A\0\2\0\2\f\1\200\v\221\1\330\240\r\240@\230 \244\200\21\n\202-l@g\214V\24\0\224 \200$H\200P(\1\22\f\311B\240\220\22\10\f \2ZdA\245c\4@\n\n\n\0\2009\1(\314@\204\201@\22\10(\fD\0\0\0\200Q\10\200\35\4B\320\2608A\0\1\0\0\265\0300\0\200`\2\20\"\0\tA\20\1\5\0P(\251\22G(\0\0\202\4\230@\4\0\20\340T\0\2@\2\2\20\3010D\26\200\0", 832) = 832
1157 fstat(3, {st_dev=makedev(8, 3), st_ino=137645, st_mode=S_IFREG|0755, st_nlink=1, st_uid=0, st_gid=0, st_blksize=4096, st_blocks=296, st_size=149301, st_atime=2014/06/02-20:23:46, st_mtime=2014/05/16-04:15:20, st_ctime=2014/05/24-20:19:08}) = 0
1157 mmap(NULL, 2217104, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x66443aacd000
1157 mprotect(0x66443aae5000, 2097152, PROT_NONE) = 0
1157 mmap(0x66443ace5000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x18000) = 0x66443ace5000
1157 mmap(0x66443ace7000, 13456, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x66443ace7000
1157 close(3) = 0
1157 open("/usr/lib/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
1157 read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20\1\2\0\0\0\0\0@\0\0\0\0\0\0\0\230\246\32\0\0\0\0\0\0\0\0\0@\0008\0\n\0@\0F\0C\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0000\2\0\0\0\0\0\0000\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\200\6\27\0\0\0\0\0\200\6\27\0\0\0\0\0\200\6\27\0\0\0\0\0\36\0\0\0\0\0\0\0\36\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0l?\32\0\0\0\0\0l?\32\0\0\0\0\0\0\0 \0\0\0\0\0\1\0\0\0\6\0\0\0hE\32\0\0\0\0\0hE:\0\0\0\0\0hE:\0\0\0\0\0XS\0\0\0\0\0\0\250\231\0\0\0\0\0\0\0\0 \0\0\0\0\0\2\0\0\0\6\0\0\0`{\32\0\0\0\0\0`{:\0\0\0\0\0`{:\0\0\0\0\0\360\1\0\0\0\0\0\0\360\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0p\2\0\0\0\0\0\0p\2\0\0\0\0\0\0p\2\0\0\0\0\0\0D\0\0\0\0\0\0\0D\0\0\0\0\0\0\0\4\0\0\0\0\0\0\0\7\0\0\0\4\0\0\0hE\32\0\0\0\0\0hE:\0\0\0\0\0hE:\0\0\0\0\0\20\0\0\0\0\0\0\0\200\0\0\0\0\0\0\0\10\0\0\0\0\0\0\0P\345td\4\0\0\0\240\6\27\0\0\0\0\0\240\6\27\0\0\0\0\0\240\6\27\0\0\0\0\0004j\0\0\0\0\0\0004j\0\0\0\0\0\0\4\0\0\0\0\0\0\0Q\345td\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0R\345td\4\0\0\0hE\32\0\0\0\0\0hE:\0\0\0\0\0hE:\0\0\0\0\0\230:\0\0\0\0\0\0\230:\0\0\0\0\0\0\1\0\0\0\0\0\0\0\4\0\0\0\24\0\0\0\3\0\0\0GNU\0\35\262)\34\4\5yc\17U\0335h\320\274\207X\252%\327\4\0\0\0\20\0\0\0\1\0\0\0GNU\0\0\0\0\0\2\0\0\0\6\0\0\0 \0\0\0\0\0\0\0\363\3\0\0\n\0\0\0\0\1\0\0\16\0\0\0\0000\20D\240 \2\1\210\3\346\220\305E\214\0\300\0\10\0\5\200\0`\300\200\0\r\212\f\0\4\20\0\210D2\10.@\210P4, \16\"H&\204\300\214\4\10\0\2\2\16\241\254\32\4f\300\0\3002\0\300\0P\1 \201\10\204\v ($\0\4 P\0\20X\200\312DB(\0\6\200\20\30B\0 @\200\0\tP\0Q\212@\20\0\0\0\0\10\0\0\21\20", 832) = 832
1157 fstat(3, {st_dev=makedev(8, 3), st_ino=137622, st_mode=S_IFREG|0755, st_nlink=1, st_uid=0, st_gid=0, st_blksize=4096, st_blocks=4000, st_size=2047384, st_atime=2014/06/02-20:23:46, st_mtime=2014/05/16-04:15:28, st_ctime=2014/05/24-20:19:08}) = 0
1157 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x66443bcdb000
1157 mmap(NULL, 3858192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x66443a71f000
1157 mprotect(0x66443a8c3000, 2097152, PROT_NONE) = 0
1157 mmap(0x66443aac3000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1a4000) = 0x66443aac3000
1157 mmap(0x66443aac9000, 16144, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x66443aac9000
1157 close(3) = 0
1157 open("/usr/lib/libdl.so.2", O_RDONLY|O_CLOEXEC) = 3
1157 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\320\16\0\0\0\0\0\0@\0\0\0\0\0\0\0\3201\0\0\0\0\0\0\0\0\0\0@\0008\0\t\0@\0\36\0\35\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0\370\1\0\0\0\0\0\0\370\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\220\32\0\0\0\0\0\0\220\32\0\0\0\0\0\0\220\32\0\0\0\0\0\0\36\0\0\0\0\0\0\0\36\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0h \0\0\0\0\0\0h \0\0\0\0\0\0\0\0 \0\0\0\0\0\1\0\0\0\6\0\0\0`-\0\0\0\0\0\0`- \0\0\0\0\0`- \0\0\0\0\0@\3\0\0\0\0\0\0\260\3\0\0\0\0\0\0\0\0 \0\0\0\0\0\2\0\0\0\6\0\0\0\210-\0\0\0\0\0\0\210- \0\0\0\0\0\210- \0\0\0\0\0\20\2\0\0\0\0\0\0\20\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0008\2\0\0\0\0\0\0008\2\0\0\0\0\0\0008\2\0\0\0\0\0\0D\0\0\0\0\0\0\0D\0\0\0\0\0\0\0\4\0\0\0\0\0\0\0P\345td\4\0\0\0\260\32\0\0\0\0\0\0\260\32\0\0\0\0\0\0\260\32\0\0\0\0\0\0\274\0\0\0\0\0\0\0\274\0\0\0\0\0\0\0\4\0\0\0\0\0\0\0Q\345td\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0R\345td\4\0\0\0`-\0\0\0\0\0\0`- \0\0\0\0\0`- \0\0\0\0\0\240\2\0\0\0\0\0\0\240\2\0\0\0\0\0\0\1\0\0\0\0\0\0\0\4\0\0\0\24\0\0\0\3\0\0\0GNU\0!7\275\r\227\247\270\313\20\30y]\f\363\203\375x\376\305\"\4\0\0\0\20\0\0\0\1\0\0\0GNU\0\0\0\0\0\2\0\0\0\6\0\0\0 \0\0\0\0\0\0\0\33\0\0\0\33\0\0\0\2\0\0\0\7\0\0\0\230\2\21\0\200H\0\4\22\0\0@\203(\10\236\33\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\0\0\0\0\35\0\0\0\0\0\0\0\36\0\0\0\0\0\0\0\37\0\0\0\0\0\0\0 \0\0\0\0\0\0\0!\0\0\0#\0\0\0$\0\0\0&\0\0\0'\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0\0\0\0\0\0\0\0\0\0\0\353\26\251\30a\257\0\371\301S\200\30\273\25sB\257\304M\17\221!\374\370\6\2\4\371\3733\373\17\371\31sB\372\31sB\225\263_\31\177\236\320\30a\242\222\6", 832) = 832
1157 fstat(3, {st_dev=makedev(8, 3), st_ino=137336, st_mode=S_IFREG|0755, st_nlink=1, st_uid=0, st_gid=0, st_blksize=4096, st_blocks=32, st_size=14672, st_atime=2014/06/02-21:01:01, st_mtime=2014/05/16-04:15:29, st_ctime=2014/05/24-20:19:08}) = 0
1157 mmap(NULL, 2109712, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x66443a51b000
1157 mprotect(0x66443a51e000, 2093056, PROT_NONE) = 0
1157 mmap(0x66443a71d000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x66443a71d000
1157 close(3) = 0
1157 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x66443bcda000
1157 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x66443bcd9000
1157 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x66443bcd8000
1157 arch_prctl(ARCH_SET_FS, 0x66443bcd9700) = 0
1157 mprotect(0x66443aac3000, 16384, PROT_READ) = 0
1157 mprotect(0x66443a71d000, 4096, PROT_READ) = 0
1157 mprotect(0x66443ace5000, 4096, PROT_READ) = 0
1157 mprotect(0x66443babe000, 4096, PROT_READ) = 0
1157 mprotect(0x66443b0c7000, 110592, PROT_READ) = 0
1157 mprotect(0x66443b353000, 16384, PROT_READ) = 0
1157 mprotect(0x66443b5a3000, 4096, PROT_READ) = 0
1157 mprotect(0x66443b8a8000, 4096, PROT_READ) = 0
1157 mprotect(0xcc9fe78f000, 1843200, PROT_READ|PROT_WRITE) = -1 EACCES (Permission denied)
1157 writev(2, [{"tor", 3}, {": ", 2}, {"error while loading shared libraries", 36}, {": ", 2}, {"", 0}, {"", 0}, {"cannot make segment writable for relocation", 43}, {": ", 2}, {"Permission denied", 17}, {"\n", 1}], 10) = 106
1157 exit_group(127) = ?
1157 +++ exited with 127 +++https://gitlab.torproject.org/legacy/trac/-/issues/12163Tor 0.2.4.22 doesn't bind to low IPv6 ports2020-06-13T14:36:29ZTracTor 0.2.4.22 doesn't bind to low IPv6 portsIPv4 works fine with a low port number (445 in my case), but IPv6 doesn't.
Config:
ORPort 445
ORPort [2001:db8:a:b::c]:445
[warn] Could not bind to 2001:db8:a:b::c:445:
| > | Permission denied
Now when I change the IPv6 port to a hi...IPv4 works fine with a low port number (445 in my case), but IPv6 doesn't.
Config:
ORPort 445
ORPort [2001:db8:a:b::c]:445
[warn] Could not bind to 2001:db8:a:b::c:445:
| > | Permission denied
Now when I change the IPv6 port to a higher number everything works fine:
ORPort [2001:db8:a:b::c]:4445
OS is Ubuntu; Linux version 3.13.0-24-generic (buildd@batsu) (gcc version 4.8.2 (Ubuntu 4.8.2-19ubuntu1) ) #47-Ubuntu SMP Fri May 2 23:30:00 UTC 2014
**Trac**:
**Username**: rommelbakTor: unspecifiedhttps://gitlab.torproject.org/legacy/trac/-/issues/12160ORPort self-testing fails behind tcp proxy when using version 0.2.4.222020-06-13T14:38:31ZTracORPort self-testing fails behind tcp proxy when using version 0.2.4.22I was using 0.2.3.25 behind a tcp proxy (haproxy) with the following config and it correctly passed ORPort reachability test. But after upgrading to 0.2.4.22 the same config fails to pass ORPort reachability test.
```
ORPort 443 NoListe...I was using 0.2.3.25 behind a tcp proxy (haproxy) with the following config and it correctly passed ORPort reachability test. But after upgrading to 0.2.4.22 the same config fails to pass ORPort reachability test.
```
ORPort 443 NoListen
ORPort 127.0.0.1:444 NoAdvertise
```
Tor 0.2.3.25
```
May 29 21:05:22.000 [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor.
May 29 21:05:22.000 [info] mark_my_descriptor_dirty(): Decided to publish new relay descriptor: ORPort found reachable
```
Tor 0.2.4.22
```
May 29 20:56:42.000 [notice] Now checking whether ORPort 1.2.3.4:443 and DirPort 1.2.3.4:995 are reachable... (this may take up to 20 minutes -- look for log messages indicating success)
May 29 20:56:42.000 [info] consider_testing_reachability(): Testing reachability of my ORPort: 1.2.3.4:443.
May 29 20:57:41.000 [info] consider_testing_reachability(): Testing reachability of my ORPort: 1.2.3.4:443.
May 29 20:57:42.000 [info] circuit_testing_failed(): Our testing circuit (to see if your ORPort is reachable) has failed. I'll try again later.
May 29 20:58:42.000 [info] consider_testing_reachability(): Testing reachability of my ORPort: 1.2.3.4:443.
May 29 20:59:43.000 [info] consider_testing_reachability(): Testing reachability of my ORPort: 1.2.3.4:443.
May 29 21:00:44.000 [info] consider_testing_reachability(): Testing reachability of my ORPort: 1.2.3.4:443.
May 29 21:01:45.000 [info] consider_testing_reachability(): Testing reachability of my ORPort: 1.2.3.4:443.
May 29 21:01:46.000 [info] circuit_testing_failed(): Our testing circuit (to see if your ORPort is reachable) has failed. I'll try again later.
```
If I shut down haproxy and change 0.2.4.22 config to:
```
ORPort 443
```
it passes ORPort reachability testing.
```
May 29 21:17:31.000 [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor.
May 29 21:17:31.000 [info] mark_my_descriptor_dirty(): Decided to publish new relay descriptor: ORPort found reachable
```
I have logs of level info in all 3 of the above test situations if you need them, but reproducing the situation should be quite easy.
BTW, there was no other backend set for haproxy, it just passes connections from PUBLIC_IP:443 to a single backend (Tor) at 127.0.0.1:444
**Trac**:
**Username**: kargigTor: 0.2.5.x-finalAndrea ShepardAndrea Shepardhttps://gitlab.torproject.org/legacy/trac/-/issues/12109somebody on the Internet is asking me to respond to ssl heartbeat messages2020-06-13T14:36:24Zcypherpunkssomebody on the Internet is asking me to respond to ssl heartbeat messagesPossible malicious relay using the heartbleed exploit. Or a false positive ID flag. Or a user with no heartbleed patch installed. I am a non-exit relay.
LOG from the IDS-built-in (Norton):
23/5/2014 05:59:57 pm,High,An intrusion attem...Possible malicious relay using the heartbleed exploit. Or a false positive ID flag. Or a user with no heartbleed patch installed. I am a non-exit relay.
LOG from the IDS-built-in (Norton):
23/5/2014 05:59:57 pm,High,An intrusion attempt by 109.201.138.201 was blocked.,Blocked, ,Attack: OpenSSL Heartbleed CVE-2014-0160, , ,"109.201.138.201, 57244"," (xxx.xxx.xxx.xxx, 443)",109.201.138.201,"TCP, Port 57244",,
23/5/2014 05:59:57 pm,High,An intrusion attempt by 109.201.138.201 was blocked.,Blocked, ,Attack: OpenSSL Heartbleed CVE-2014-0160 3, , ,"109.201.138.201, 57244"," (xxx.xxx.xxx.xxx, 443)",109.201.138.201,"TCP, Port 57244",,
23/5/2014 04:59:59 pm,High,An intrusion attempt by 109.201.138.201 was blocked.,Blocked, ,Attack: OpenSSL Heartbleed CVE-2014-0160, , ,"109.201.138.201, 52269"," (xxx.xxx.xxx.xxx, 443)",109.201.138.201,"TCP, Port 52269",,
23/5/2014 04:59:59 pm,High,An intrusion attempt by 109.201.138.201 was blocked.,Blocked, ,Attack: OpenSSL Heartbleed CVE-2014-0160 3, , ,"109.201.138.201, 52269"," (xxx.xxx.xxx.xxx, 443)",109.201.138.201,"TCP, Port 52269",,
23/5/2014 06:00:00 am,High,An intrusion attempt by 109.201.138.201 was blocked.,Blocked, ,Attack: OpenSSL Heartbleed CVE-2014-0160, , ,"109.201.138.201, 53919"," (xxx.xxx.xxx.xxx, 443)",109.201.138.201,"TCP, Port 53919",,
23/5/2014 06:00:00 am,Info,Intrusion Prevention Signature Auto Block has blocked IP: 109.201.138.201 for a period of: 30 minutes,Detected, ,,No
23/5/2014 06:00:00 am,High,An intrusion attempt by 109.201.138.201 was blocked.,Blocked, ,Attack: OpenSSL Heartbleed CVE-2014-0160 3, , ,"109.201.138.201, 53919"," (xxx.xxx.xxx.xxx, 443)",109.201.138.201,"TCP, Port 53919",,
23/5/2014 05:00:01 am,High,An intrusion attempt by 109.201.138.201 was blocked.,Blocked, ,Attack: OpenSSL Heartbleed CVE-2014-0160, , ,"109.201.138.201, 48941"," (xxx.xxx.xxx.xxx, 443)",109.201.138.201,"TCP, Port 48941",,
23/5/2014 05:00:01 am,Info,Intrusion Prevention Signature Auto Block has blocked IP: 109.201.138.201 for a period of: 30 minutes,Detected, ,,No
23/5/2014 05:00:01 am,High,An intrusion attempt by 109.201.138.201 was blocked.,Blocked, ,Attack: OpenSSL Heartbleed CVE-2014-0160 3, , ,"109.201.138.201, 48941"," (xxx.xxx.xxx.xxx, 443)",109.201.138.201,"TCP, Port 48941",,
23/5/2014 04:00:01 am,High,An intrusion attempt by 109.201.138.201 was blocked.,Blocked, ,Attack: OpenSSL Heartbleed CVE-2014-0160, , ,"109.201.138.201, 43936"," (xxx.xxx.xxx.xxx, 443)",109.201.138.201,"TCP, Port 43936",,
23/5/2014 04:00:01 am,High,An intrusion attempt by 109.201.138.201 was blocked.,Blocked, ,Attack: OpenSSL Heartbleed CVE-2014-0160 3, , ,"109.201.138.201, 43936"," (xxx.xxx.xxx.xxx, 443)",109.201.138.201,"TCP, Port 43936",,
23/5/2014 03:00:01 am,High,An intrusion attempt by 109.201.138.201 was blocked.,Blocked, ,Attack: OpenSSL Heartbleed CVE-2014-0160, , ,"109.201.138.201, 38913"," (xxx.xxx.xxx.xxx, 443)",109.201.138.201,"TCP, Port 38913",,
<etc>Tor: unspecified