Compare Tor traffic by country to general traffic from that country
We have a growing set of graphs for how many users we're seeing from Egypt connecting to the public Tor relays.
In the past day or so our graph dived. How can we distinguish an attack on Tor in particular from an attack on connectivity in general?
We should find a good data source that measures overall flows in/out of various countries. Then we can graph both curves on top of each other and have a better intuition about what's really going on.
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information