Hi,
I'm looking at ExitPortStatistics. Since the spec [1] is not very specific, I wanted to confirm that my assumption is correct:
The current tor implementation includes the 10 most relevant ports, correct? (highest number of bytes or stream)
example: exit-streams-opened 80=5178868,182=1092,443=3499276,5000=29600,5753=8920,6881=43496,8080=31184,8333=472,8999=16572,51413=51496,other=1925104
so the ports 80 182 443 5000 5753 6881 8080 8333 8999 51413
are the most used exit ports on that given relay (not by that order).
thanks, nusenu
[1] https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#n1082:
"exit-kibibytes-written" port=N,port=N,... NL [At most once.] "exit-kibibytes-read" port=N,port=N,... NL [At most once.] List of mappings from ports to the number of kibibytes that the relay has written to or read from exit connections to that port, rounded up to the next full kibibyte. Relays may limit the number of listed ports and subsume any remaining kibibytes under port "other". "exit-streams-opened" port=N,port=N,... NL [At most once.] List of mappings from ports to the number of opened exit streams to that port, rounded up to the nearest multiple of 4. Relays may limit the number of listed ports and subsume any remaining opened streams under port "other".
On 29/01/17 13:56, nusenu wrote:
Hi,
Hi nusenu,
I'm looking at ExitPortStatistics. Since the spec [1] is not very specific, I wanted to confirm that my assumption is correct:
The current tor implementation includes the 10 most relevant ports, correct? (highest number of bytes or stream)
Those are the 10 ports with the highest number of (written and read) bytes, unrelated to the number of stream. And all lines below report statistics for these 10 ports plus "other".
All the best, Karsten
example: exit-streams-opened 80=5178868,182=1092,443=3499276,5000=29600,5753=8920,6881=43496,8080=31184,8333=472,8999=16572,51413=51496,other=1925104
so the ports 80 182 443 5000 5753 6881 8080 8333 8999 51413
are the most used exit ports on that given relay (not by that order).
thanks, nusenu
[1] https://gitweb.torproject.org/torspec.git/tree/dir-spec.txt#n1082:
"exit-kibibytes-written" port=N,port=N,... NL [At most once.] "exit-kibibytes-read" port=N,port=N,... NL [At most once.] List of mappings from ports to the number of kibibytes that the relay has written to or read from exit connections to that port, rounded up to the next full kibibyte. Relays may limit the number of listed ports and subsume any remaining kibibytes under port "other". "exit-streams-opened" port=N,port=N,... NL [At most once.] List of mappings from ports to the number of opened exit streams to that port, rounded up to the nearest multiple of 4. Relays may limit the number of listed ports and subsume any remaining opened streams under port "other".
tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev
Karsten Loesing:
Those are the 10 ports with the highest number of (written and read) bytes, unrelated to the number of stream. And all lines below report statistics for these 10 ports plus "other".
Oh thanks, so it is not possible to find out which is the most frequent exit port by number of streams opened, that's a pity.
On 29/01/17 17:12, nusenu wrote:
Karsten Loesing:
Those are the 10 ports with the highest number of (written and read) bytes, unrelated to the number of stream. And all lines below report statistics for these 10 ports plus "other".
Oh thanks, so it is not possible to find out which is the most frequent exit port by number of streams opened, that's a pity.
Well, that one is easy: port 80. :)
$ wget https://collector.torproject.org/recent/relay-descriptors/extra-infos/2017-0... $ grep exit-streams 2017-01-29-16-05-00-extra-infos | sort | uniq exit-streams-opened 43=1008,53=588,80=243856,110=16,143=12,443=181796,993=36,995=32,8080=116,8443=52,other=4 exit-streams-opened 43=1348,80=158920,81=132,443=84212,554=16,3389=1064,6669=60,8000=48,8080=128,8333=24,other=1820 exit-streams-opened 43=1460,80=204496,81=184,443=99272,554=12,563=828,995=16,1500=1428,8080=144,8333=36,other=2320 exit-streams-opened 43=1676,80=139148,81=108,443=73020,3389=1876,6669=180,8080=120,8333=32,8443=272,11371=4,other=1372 exit-streams-opened 43=460,80=100744,443=55304,995=16,1500=572,3389=860,8000=20,8080=48,8333=20,9999=4,other=916 exit-streams-opened 43=716,80=137808,81=64,443=62068,563=32,1500=584,3389=1572,8080=144,8087=36,8333=16,other=1064 exit-streams-opened 80=1306188,81=1404,182=120,443=1133872,5000=328,8080=11324,24188=12,35485=4,45684=4,51413=2536,other=143596 exit-streams-opened 80=252636,443=132288,554=20,1500=1284,3389=2000,6669=148,8000=100,8080=144,8333=44,8443=860,other=4252 exit-streams-opened 81=2052,119=84,182=1620,8001=200,8080=62488,8182=428,8333=184,33480=60,33486=32,40038=12,other=64732 exit-streams-opened other=0
Okay, in the last line we can't say this. But in all other lines the "other" entry has fewer streams than port 80 which is among the top 10. Only the last line does not include port 80, and the "other" entry has more streams than top-1 port 8080. Could be that this relay does not permit exiting to port 80. Or that port 80 was 11th or 12th in terms of bytes.
Hope this is useful anyway.
All the best, Karsten
Karsten Loesing:
Oh thanks, so it is not possible to find out which is the most frequent exit port by number of streams opened, that's a pity.
Well, that one is easy: port 80. :)
Ok, maybe I should have said that differently:
"so it is not possible to find out which are the top 10 (or N) exit ports by number of streams opened"
(but we can determine the most frequent exit port if other is lower than the biggest value provided)
Okay, in the last line we can't say this. But in all other lines the "other" entry has fewer streams than port 80 which is among the top 10. Only the last line does not include port 80, and the "other" entry has more streams than top-1 port 8080. Could be that this relay does not permit exiting to port 80. Or that port 80 was 11th or 12th in terms of bytes.
Hope this is useful anyway.
Yes, thanks.
On 29/01/17 17:54, nusenu wrote:
Karsten Loesing:
Oh thanks, so it is not possible to find out which is the most frequent exit port by number of streams opened, that's a pity.
Well, that one is easy: port 80. :)
Ok, maybe I should have said that differently:
"so it is not possible to find out which are the top 10 (or N) exit ports by number of streams opened"
(but we can determine the most frequent exit port if other is lower than the biggest value provided)
You're right that we cannot reliably determine the top 10 exit ports by number of streams opened.
The idea was to pick the same 10 ports for all three metrics (read bytes, written bytes, opened streams) rather than the top 10 ports for each statistic. This allows comparisons of all three metrics for a given port.
All the best, Karsten
Okay, in the last line we can't say this. But in all other lines the "other" entry has fewer streams than port 80 which is among the top 10. Only the last line does not include port 80, and the "other" entry has more streams than top-1 port 8080. Could be that this relay does not permit exiting to port 80. Or that port 80 was 11th or 12th in terms of bytes.
Hope this is useful anyway.
Yes, thanks.
tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev
-
Karsten Loesing -
nusenu