I'm using TOR browser and Wireshark to monitor IP traffic. I noticed that every now and then there are packets flowing from/to other IPs. Checking them, I noticed they are TOR relays, which I think it's strange as they are not my guard node (they are not even in my TOR circuit). What is it about?
It's OK - this traffic is used for network integrity and to make a new circuits, so there's no problem at all! Also - you should open not just an
ORPort for a way better integration+speeds, but a
DirPort to propagate the mirror of Tor network directory services - it will help you collaterally because of increasing speeds and connectivity of the other nodes you will occasionally use