At 06:20 1/31/2015 -0500, grarpamp wrote:
Yet during the time of an outage, you might try to leave the old tor running and. . .
I see the idea here but it's a lot of fiddling and preparation. If it continues to happen and I suspect a bug, I'll upgrade the relay version and run 'tcpdump' with a ring-buffer capture that holds the last two or three hours of traffic. Then I just have to stop the 'tcpdump' and review what happened. Look for ICMP "not reachable," injected RST's etc.
If my "just because your paranoid doesn't mean they're not out to get you" theory is correct, it may never happen again. Certainly the spooks of the world all read the Tor mailing lists.
tor-relays@lists.torproject.org