From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from sog-mx-3.v43.ch3.sourceforge.com ([172.29.43.193] helo=mx.sourceforge.net) by sfs-ml-2.v29.ch3.sourceforge.com with esmtp (Exim 4.76) (envelope-from ) id 1XBblI-0004v1-KU for bitcoin-development@lists.sourceforge.net; Mon, 28 Jul 2014 03:38:08 +0000 Received-SPF: pass (sog-mx-3.v43.ch3.sourceforge.com: domain of mckay.com designates 37.1.88.131 as permitted sender) client-ip=37.1.88.131; envelope-from=robert@mckay.com; helo=mail.mckay.com; Received: from mail.mckay.com ([37.1.88.131]) by sog-mx-3.v43.ch3.sourceforge.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.76) id 1XBblH-0008Cc-1P for bitcoin-development@lists.sourceforge.net; Mon, 28 Jul 2014 03:38:08 +0000 Received: from www-data by mail.mckay.com with local (Exim 4.76) (envelope-from ) id 1XBbNp-0005Rk-QE for bitcoin-development@lists.sourceforge.net; Mon, 28 Jul 2014 04:13:53 +0100 To: X-PHP-Originating-Script: 0:func.inc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Date: Mon, 28 Jul 2014 04:13:53 +0100 From: Robert McKay In-Reply-To: References: <20140728024030.GA17724@savin> Message-ID: X-Sender: robert@mckay.com User-Agent: Roundcube Webmail/0.5.3 X-Spam-Score: -2.2 (--) X-Spam-Report: Spam Filtering performed by mx.sourceforge.net. See http://spamassassin.org/tag/ for more details. -1.5 SPF_CHECK_PASS SPF reports sender host as permitted sender for sender-domain -0.0 SPF_PASS SPF: sender matches SPF record -0.6 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature X-Headers-End: 1XBblH-0008Cc-1P Subject: Re: [Bitcoin-development] Abnormally Large Tor node accepting only Bitcoin traffic X-BeenThere: bitcoin-development@lists.sourceforge.net X-Mailman-Version: 2.1.9 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Jul 2014 03:38:08 -0000 Here's a packet dump of a connected client: http://wari.mckay.com/~rm/unknown.tcpdump Doesn't seem particularly abusive.. only one connection, not doing much traffic. I don't have any easy way to deserialize this and see if it's doing anything unusual but it's there if someone wants to have a go. Rob On Sun, 27 Jul 2014 22:49:11 -0400, Michael Wozniak wrote: > It’s in my logs: > > 2014-07-28 02:00:24 receive version message: /Satoshi:0.9.2/: version > 70002, blocks=302684, us=******:8333, them=0.0.0.0:0, > peer=5.9.93.101:33928 > > > On Jul 27, 2014, at 10:45 PM, Gregory Maxwell > wrote: > >> On Sun, Jul 27, 2014 at 7:40 PM, Peter Todd >> wrote: >>> Anyway, just goes to show that we need to implement better incoming >>> connection limiting. gmaxwell has a good scheme with interactive >>> proof-of-memory - where's your latest writeup? >> >> Or its a complete snipe hunt, I'm unable to find any nodes with it >> connected to them. Does anyone here have any? >> >> Last discussion on the measures for anti-global-resource-consumption >> was at https://bitcointalk.org/index.php?topic=310323.0 but it >> hasn't >> seemed to be a huge issue such that adding more protocol surface >> area >> was justified. >> >> >> ------------------------------------------------------------------------------ >> Infragistics Professional >> Build stunning WinForms apps today! >> Reboot your WinForms applications with our WinForms controls. >> Build a bridge from your legacy apps to the future. >> >> http://pubads.g.doubleclick.net/gampad/clk?id=153845071&iu=/4140/ostg.clktrk >> _______________________________________________ >> Bitcoin-development mailing list >> Bitcoin-development@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/bitcoin-development > > > > ------------------------------------------------------------------------------ > Infragistics Professional > Build stunning WinForms apps today! > Reboot your WinForms applications with our WinForms controls. > Build a bridge from your legacy apps to the future. > > http://pubads.g.doubleclick.net/gampad/clk?id=153845071&iu=/4140/ostg.clktrk > _______________________________________________ > Bitcoin-development mailing list > Bitcoin-development@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/bitcoin-development