Skip to content
Snippets Groups Projects

Two circuits for one domain (Circuit visualizer sometimes shows the "wrong" exit node)

    • Closed (moved) Issue created by cypherpunks @cypherpunks

    Making an arbitrary number of new circuits (either with the new identity button or when the Tor client creates circuits while browsing) eventually causes the circuit view in Torbutton to show the wrong exit node.

    I have noticed this in Tor Browser 5.0.3 through Tor Browser 5.0.7

    A far as I can tell, this is not related to architecture or OS nor to my network or even to machines owned by me. Also the problem is not limited to any particular website and it has nothing to do with JavaScript. I noticed this on Linux 64-bit and 32-bit on every Tor Browser version above and Windows 64-bit and 32-bit on version 5.0.3 (I've not checked since then). However I have not tested this in Mac OS X at all.

    When testing this I found that the number of new circuits that are needed to reproduce this varies. Sometimes it happened first time I visited check.torproject.org, other times I spent 10-15 minutes creating new identities.

    A screenshot can be found on stack exchange. https://tor.stackexchange.com/questions/9460/why-does-torbutton-circuit-view-not-consistently-show-the-correct-exit-node

    To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information

    Child items 0

    • No child items are currently assigned. Use child items to break down this issue into smaller parts.

    Activity

    • cypherpunks added component::applications/tor browser owner::tbb-team priority::medium severity::normal status::new type::defect labels

      added component::applications/tor browser owner::tbb-team priority::medium severity::normal status::new type::defect labels

    • Georg Koppen
      Georg Koppen @gk ·

      Trac:
      Cc: N/A to gk

    • B
      bugzilla @bugzilla ·

      Circuit visualizer shows the last exit node that was used by check.torproject.org

      Trac:
      Reviewer: N/A to N/A

    • B
      bugzilla @bugzilla ·

      Right after New Identity:

      getFirstPartyURI failed for chrome://browser/content/browser.xul: 0x80070057
[09-10 14:17:28] Torbutton INFO: tor SOCKS: https://check.torproject.org/?lang=en_US via torproject.org:81a70b4ee5a36062744b2f8290e9c706
[09-10 14:17:28] Torbutton INFO: controlPort >> 650 STREAM 573 NEW 0 check.torproject.org:443 SOURCE_ADDR=127.0.0.1:55083 PURPOSE=USER
[09-10 14:17:29] Torbutton INFO: controlPort >> 650 STREAM 573 SENTCONNECT 51 check.torproject.org:443
[09-10 14:17:29] Torbutton INFO: streamEvent.CircuitID: 51
[09-10 14:17:29] Torbutton INFO: controlPort << getinfo circuit-status
[09-10 14:17:29] Torbutton INFO: controlPort >> 250+circuit-status=
52 BUILT $GUARD,$F88D1795F4977A3D1D7FCB1E6159ECE53B13A4B4~YesWeScan,$DD8BD7307017407FCC36F8D04A688F74A0774C02~DFRI0 BUILD_FLAGS=NEED_CAPACITY PURPOSE=GENERAL TIME_CREATED=2016-09-10T14:17:15.376318 SOCKS_USERNAME="--unknown--" SOCKS_PASSWORD="6a92a8a6d482f3fdafcbc5e6206efef6"
51 BUILT $GUARD,$C64BD98931AA5C945270CE9C6882FF7AB6603B86~DrInsekTor,$DED6892FF89DBD737BA689698A171B2392EB3E82~ThorExit BUILD_FLAGS=NEED_CAPACITY PURPOSE=GENERAL TIME_CREATED=2016-09-10T14:17:14.376260 SOCKS_USERNAME="torproject.org" SOCKS_PASSWORD="81a70b4ee5a36062744b2f8290e9c706"
50 BUILT $GUARD,$5D7D8E6CB9F57303D9437ED4DE46EA14CED3B16B~Iridium33,$578E007E5E4535FBFEF7758D8587B07B4C8C5D06~marylou1 BUILD_FLAGS=NEED_CAPACITY PURPOSE=GENERAL TIME_CREATED=2016-09-10T14:17:13.377203
.
250 OK
[09-10 14:17:29] Torbutton INFO: controlPort << getconf bridge
[09-10 14:17:29] Torbutton INFO: controlPort >> 250 Bridge
[09-10 14:17:29] Torbutton INFO: controlPort << getinfo ns/id/GUARD
[09-10 14:17:29] Torbutton INFO: controlPort >> 250+ns/id/GUARD 443 80
s Fast Guard HSDir Running Stable V2Dir Valid
w Bandwidth=31100
.
250 OK
[09-10 14:17:29] Torbutton INFO: controlPort << getinfo ip-to-country/GUARD
[09-10 14:17:29] Torbutton INFO: controlPort >> 250-ip-to-country/GUARD
250 OK
[09-10 14:17:29] Torbutton INFO: controlPort << getconf bridge
[09-10 14:17:29] Torbutton INFO: controlPort >> 250 Bridge
[09-10 14:17:29] Torbutton INFO: controlPort << getinfo ns/id/C64BD98931AA5C945270CE9C6882FF7AB6603B86
[09-10 14:17:29] Torbutton INFO: controlPort >> 250+ns/id/C64BD98931AA5C945270CE9C6882FF7AB6603B86=
r DrInsekTor xkvZiTGqXJRScM6caIL/erZgO4Y VBGrvhnai+xG76hmJOUcQqKXlj4 2016-09-09 23:32:51 91.143.91.142 443 80
s Fast Guard HSDir Running Stable V2Dir Valid
w Bandwidth=7700
.
250 OK
[09-10 14:17:29] Torbutton INFO: controlPort << getinfo ip-to-country/91.143.91.142
[09-10 14:17:29] Torbutton INFO: controlPort >> 250-ip-to-country/91.143.91.142=de
250 OK
[09-10 14:17:29] Torbutton INFO: controlPort << getconf bridge
[09-10 14:17:29] Torbutton INFO: controlPort >> 250 Bridge
[09-10 14:17:29] Torbutton INFO: controlPort << getinfo ns/id/DED6892FF89DBD737BA689698A171B2392EB3E82
[09-10 14:17:29] Torbutton INFO: controlPort >> 250+ns/id/DED6892FF89DBD737BA689698A171B2392EB3E82=
r ThorExit 3taJL/idvXN7polpihcbI5LrPoI 2u1NvHQZ0Is4j5oFHN5qkE6UiOo 2016-09-10 05:10:49 92.222.38.67 443 80
s Exit Fast Guard Running Stable V2Dir Valid
w Bandwidth=8410
.
250 OK
[09-10 14:17:29] Torbutton INFO: controlPort << getinfo ip-to-country/92.222.38.67
[09-10 14:17:29] Torbutton INFO: controlPort >> 250-ip-to-country/92.222.38.67=fr
250 OK
[09-10 14:17:29] Torbutton WARN: no SOCKS credentials found for current document.
[09-10 14:17:29] Torbutton INFO: controlPort >> 650 STREAM 573 REMAP 51 138.201.14.212:443 SOURCE=EXIT
[09-10 14:17:29] Torbutton INFO: controlPort >> 650 STREAM 573 SUCCEEDED 51 138.201.14.212:443
[09-10 14:17:29] Torbutton INFO: tor SOCKS: http://ocsp.digicert.com/ via torproject.org:81a70b4ee5a36062744b2f8290e9c706
[09-10 14:17:29] Torbutton INFO: controlPort >> 650 STREAM 574 NEW 0 ocsp.digicert.com:80 SOURCE_ADDR=127.0.0.1:55084 PURPOSE=USER
getFirstPartyURI failed for chrome://browser/content/browser.xul: 0x80070057
[09-10 14:17:31] Torbutton INFO: controlPort >> 650 STREAM 574 SENTCONNECT 53 ocsp.digicert.com:80
[09-10 14:17:31] Torbutton INFO: streamEvent.CircuitID: 53
[09-10 14:17:31] Torbutton INFO: controlPort << getinfo circuit-status
[09-10 14:17:31] Torbutton INFO: controlPort >> 250+circuit-status=
52 BUILT $GUARD,$F88D1795F4977A3D1D7FCB1E6159ECE53B13A4B4~YesWeScan,$DD8BD7307017407FCC36F8D04A688F74A0774C02~DFRI0 BUILD_FLAGS=NEED_CAPACITY PURPOSE=GENERAL TIME_CREATED=2016-09-10T14:17:15.376318 SOCKS_USERNAME="--unknown--" SOCKS_PASSWORD="6a92a8a6d482f3fdafcbc5e6206efef6"
51 BUILT $GUARD,$C64BD98931AA5C945270CE9C6882FF7AB6603B86~DrInsekTor,$DED6892FF89DBD737BA689698A171B2392EB3E82~ThorExit BUILD_FLAGS=NEED_CAPACITY PURPOSE=GENERAL TIME_CREATED=2016-09-10T14:17:14.376260 SOCKS_USERNAME="torproject.org" SOCKS_PASSWORD="81a70b4ee5a36062744b2f8290e9c706"
50 BUILT $GUARD,$5D7D8E6CB9F57303D9437ED4DE46EA14CED3B16B~Iridium33,$578E007E5E4535FBFEF7758D8587B07B4C8C5D06~marylou1 BUILD_FLAGS=NEED_CAPACITY PURPOSE=GENERAL TIME_CREATED=2016-09-10T14:17:13.377203
53 BUILT $GUARD,$8672E8A01B4D3FA4C0BBE21C740D4506302EA487~OrangeLine,$B7828C22ECC3DA13480DAC1ECD4194F89F742EF6~RedMonster BUILD_FLAGS=NEED_CAPACITY PURPOSE=GENERAL TIME_CREATED=2016-09-10T14:17:30.376175 SOCKS_USERNAME="torproject.org" SOCKS_PASSWORD="81a70b4ee5a36062744b2f8290e9c706"
.
250 OK
[09-10 14:17:31] Torbutton INFO: controlPort << getconf bridge
[09-10 14:17:31] Torbutton INFO: controlPort >> 250 Bridge
[09-10 14:17:31] Torbutton INFO: controlPort << getinfo ns/id/GUARD
[09-10 14:17:31] Torbutton INFO: controlPort >> 250+ns/id/GUARD 443 80
s Fast Guard HSDir Running Stable V2Dir Valid
w Bandwidth=31100
.
250 OK
[09-10 14:17:31] Torbutton INFO: controlPort << getinfo ip-to-country/GUARD
[09-10 14:17:31] Torbutton INFO: controlPort >> 250-ip-to-country/GUARD
250 OK
[09-10 14:17:31] Torbutton INFO: controlPort << getconf bridge
[09-10 14:17:31] Torbutton INFO: controlPort >> 250 Bridge
[09-10 14:17:31] Torbutton INFO: controlPort << getinfo ns/id/8672E8A01B4D3FA4C0BBE21C740D4506302EA487
[09-10 14:17:31] Torbutton INFO: controlPort >> 250+ns/id/8672E8A01B4D3FA4C0BBE21C740D4506302EA487=
r OrangeLine hnLooBtNP6TAu+IcdA1FBjAupIc dHTwCCmyYGhzBYpMarPMbpLoT7Y 2016-09-10 04:26:08 188.166.23.127 443 80
s Fast Guard Running Stable V2Dir Valid
w Bandwidth=77000
.
250 OK
[09-10 14:17:31] Torbutton INFO: controlPort << getinfo ip-to-country/188.166.23.127
[09-10 14:17:31] Torbutton INFO: controlPort >> 250-ip-to-country/188.166.23.127=nl
250 OK
[09-10 14:17:31] Torbutton INFO: controlPort << getconf bridge
[09-10 14:17:31] Torbutton INFO: controlPort >> 250 Bridge
[09-10 14:17:31] Torbutton INFO: controlPort << getinfo ns/id/B7828C22ECC3DA13480DAC1ECD4194F89F742EF6
[09-10 14:17:31] Torbutton INFO: controlPort >> 250+ns/id/B7828C22ECC3DA13480DAC1ECD4194F89F742EF6=
r RedMonster t4KMIuzD2hNIDawezUGU+J90LvY YDtIYcJGv1/3/16v37Oi91vRmms 2016-09-10 04:19:16 31.220.43.190 110 9300
s Exit Fast HSDir Running Stable V2Dir Valid
w Bandwidth=12000
.
250 OK
[09-10 14:17:31] Torbutton INFO: controlPort << getinfo ip-to-country/31.220.43.190
[09-10 14:17:31] Torbutton INFO: controlPort >> 250-ip-to-country/31.220.43.190=nl
250 OK
[09-10 14:17:31] Torbutton WARN: no SOCKS credentials found for current document.
[09-10 14:17:31] Torbutton INFO: controlPort >> 650 STREAM 574 REMAP 53 93.184.220.29:80 SOURCE=EXIT
[09-10 14:17:31] Torbutton INFO: controlPort >> 650 STREAM 574 SUCCEEDED 53 93.184.220.29:80
getFirstPartyURI failed for chrome://browser/content/browser.xul: 0x80070057
[09-10 14:17:32] Torbutton INFO: tor SOCKS: https://check.torproject.org/torcheck/img/tor-on.png via torproject.org:81a70b4ee5a36062744b2f8290e9c706
[09-10 14:17:32] Torbutton INFO: tor SOCKS: https://check.torproject.org/torcheck/img/tor-on.png via torproject.org:81a70b4ee5a36062744b2f8290e9c706
getFirstPartyURI failed for chrome://browser/content/browser.xul: 0x80070057
[09-10 14:17:36] Torbutton INFO: controlPort >> 650 STREAM 572 CLOSED 52 93.184.220.29:80 REASON=END REMOTE_REASON=DONE
[09-10 14:17:37] Torbutton INFO: controlPort >> 650 STREAM 573 CLOSED 51 138.201.14.212:443 REASON=END REMOTE_REASON=DONE

      Trac:
      Summary: Circuit visualizer sometimes shows the wrong exit node to Two circuits for one domain (Circuit visualizer sometimes shows the "wrong" exit node)
      Keywords: tbb-torbutton tbb-circuit-display deleted, N/A added

    • Georg Koppen
      Georg Koppen @gk ·

      So, what is the bug about now, after the log got pasted? Originally, I assumed this bug is about the circuit display not getting updated properly (the description goes basically to https://i.stack.imgur.com/uRiTV.png). But the tbb-circuit-display keyword got removed with the log. So, if the issue is a different one now, why got this bug hjiacked?

      Trac:
      Status: new to needs_information

    • B
      bugzilla @bugzilla ·

      Replying to gk: The issue is the same as on your screenshot. But it turned out that the reason was different, and circuit visualizer was OK (comment:2). Don't you like logs? It shows that

      [09-10 14:17:31] Torbutton INFO: controlPort >> 250+circuit-status=
52 BUILT $GUARD,$F88D1795F4977A3D1D7FCB1E6159ECE53B13A4B4~YesWeScan,$DD8BD7307017407FCC36F8D04A688F74A0774C02~DFRI0 BUILD_FLAGS=NEED_CAPACITY PURPOSE=GENERAL TIME_CREATED=2016-09-10T14:17:15.376318 SOCKS_USERNAME="--unknown--" SOCKS_PASSWORD="6a92a8a6d482f3fdafcbc5e6206efef6"
51 BUILT $GUARD,$C64BD98931AA5C945270CE9C6882FF7AB6603B86~DrInsekTor,$DED6892FF89DBD737BA689698A171B2392EB3E82~ThorExit BUILD_FLAGS=NEED_CAPACITY PURPOSE=GENERAL TIME_CREATED=2016-09-10T14:17:14.376260 SOCKS_USERNAME="torproject.org" SOCKS_PASSWORD="81a70b4ee5a36062744b2f8290e9c706"
50 BUILT $GUARD,$5D7D8E6CB9F57303D9437ED4DE46EA14CED3B16B~Iridium33,$578E007E5E4535FBFEF7758D8587B07B4C8C5D06~marylou1 BUILD_FLAGS=NEED_CAPACITY PURPOSE=GENERAL TIME_CREATED=2016-09-10T14:17:13.377203
53 BUILT $GUARD,$8672E8A01B4D3FA4C0BBE21C740D4506302EA487~OrangeLine,$B7828C22ECC3DA13480DAC1ECD4194F89F742EF6~RedMonster BUILD_FLAGS=NEED_CAPACITY PURPOSE=GENERAL TIME_CREATED=2016-09-10T14:17:30.376175 SOCKS_USERNAME="torproject.org" SOCKS_PASSWORD="81a70b4ee5a36062744b2f8290e9c706"

      circuits 51 and 53 are for the same domain SOCKS_USERNAME="torproject.org" SOCKS_PASSWORD="81a70b4ee5a36062744b2f8290e9c706". So Tor Check shows IP of the first exit node (CID 51), and the circuit visualizer shows IP of the last exit node (CID 53).

      Trac:
      Status: needs_information to new

    • bugzilla mentioned in issue #18859 (moved)

      mentioned in issue #18859 (moved)

    • bugzilla mentioned in issue #19843 (moved)

      mentioned in issue #19843 (moved)

    • traumschule mentioned in issue #28075 (moved)

      mentioned in issue #28075 (moved)

    • Trac mentioned in issue tpo/applications/tor-browser#28075 (closed)

      mentioned in issue tpo/applications/tor-browser#28075 (closed)

    • Trac moved to tpo/applications/torbutton#18138 (moved)

      moved to tpo/applications/torbutton#18138 (moved)

    Please register or sign in to reply