3

In my pcap file capturing Tor traffic, there are connections to 2 Directory Servers (x.x.x.x:9001 and y.y.y.y:443) and they started nearly at the same time.

My question is that is it normal or not? and why does Tor client connect to multiple Directory Servers?

Improve this question

1 Answer 1

Reset to default
1

yes, it's normal. The multiple connections to Directory servers and the nodes mirroring a signed image of Directory are for load balancing and censorship resistance purposes.

Improve this answer
2
  • Do you have any links to sources to support your answer? (I'm not saying it's incorrect!) That way the OP can go away and read up on the exact details. Perhaps the Tor Directory Protocol specification?
    – Richard Horrocks
    Dec 27, 2015 at 20:40
  • @RichardHorrocks do you need a point in source? The protocol spec is not clarifying this matter, and for a good reason : it's obvious. The more directory sourcves we have - the safer we are
    – Alexey Vesnin ♦
    Jan 26, 2016 at 22:02

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .