Questions tagged [traffic-analysis]
The traffic-analysis tag has no usage guidance.
31 questions
0
votes
1
answer
165
views
Finding new .onion websites
My question is about the ways to discover new hidden (.onion) websites.
With regular Internet domain names, we have search engines that crawl the web, and we can also resort to additional techniques ...
- 101
0
votes
1
answer
61
views
Is Transmission Control Protocol of in a tamper proof (by 'tiny' explosions) device not the only way to circumvent transport correlation attacks?
Goal: I am trying to build an anonymous voting system and am wondering if Tor is sufficient to anonymize data by command-run-on(s), only when the proxy-onion-node has encrypted IP addresses that are ...
0
votes
1
answer
267
views
Traffic monitoring of specific hidden services
I offer onion hosting to the general public and I am having some issues with many hidden services when they share an instance of Tor with a very busy service. When there is a very busy hidden service ...
- 1
0
votes
0
answers
75
views
ISP frequently clears internet connection and knocks out relay circuits
reading fritzbox log, it shows a nightly scheduled ip re-establishment. This is due to anticipated disconnect from ISP side in immediate future.
The relay node is knocked off circuits and all need ...
- 103
0
votes
1
answer
681
views
Does Google analytics track users with Tor browser?
I have visited some of my sites with the Tor browser and checked Google Analytics(GA4) to track the activity in real-time.
but I did not have any data in my G.A panel!
Is it reasonable that G.A ...
- 1
1
vote
1
answer
109
views
While using TOR, why do I also see traffic flowing to hosts other than the guard node?
I'm using TOR browser and Wireshark to monitor IP traffic. I noticed that every now and then there are packets flowing from/to other IPs. Checking them, I noticed they are TOR relays, which I think it'...
kuma
0
votes
1
answer
305
views
What percentage/ratio of entry nodes reside in 14 Eyes or NATO affiliated countries?
I spent a good amount of time editing my Tor configuration files to switch in between entry nodes and found that eventually after excluding all nodes, I was lastly routed through Kyrgyzstan. I only ...
0
votes
1
answer
430
views
How can I analyze Tor traffic on my relay?
I'm doing a research on Onion routing (Tor). I've successfully set up a middle relay for the purpose of analyzing Tor traffic. I'd like to:
See all circuits that my relay is currently part of
See &...
0
votes
1
answer
133
views
How does TOR divide bandwidth fairly between clients?
Is there some sort of limitation/throttling logic at all? And if so, is it based on the tor client instance, connection or IP address?
What if I download a file over HTTP and download the first half ...
- 103
0
votes
2
answers
94
views
Is it ok to run other services on an Exit relay?
The Tor documentation suggests not to host an exit relay on your home network (or at least if it's your only connection) because all your local traffic will be viewed as coming from Tor as well, and ...
- 113
1
vote
2
answers
591
views
Tor deanonymization via ISPs
We known that an adversary can deanonymize a user (on clearnet) if it controls both the guard and the exit node.
But is that neccesary?
We know that the NSA gets huge amounts of data from the internet....
- 11
0
votes
1
answer
74
views
IRC traffic while using tor
I sniffed the traffic using wireshark while using IRC via TOR, the traffic is encrypted of course cuz its done i in the application layer (i think, correct 4 me if i am wrong). now the traffic is ...
user30207
0
votes
1
answer
113
views
Is websites/services hosted on tor network safe?
I understand that a server can run services (such as nginx) then listen to localhost, then run Tor Server to create a unique tor address and accept traffic from other Tor Servers into it.
My question ...
- 103
2
votes
1
answer
1k
views
Why is my Tor bridge relay not getting any traffic?
I used to run a Tor bridge on Windows at home, where I have a 300/150 Mbps ISP. This Windows has memory leak and crashes after some hours, ad I believe that was making my bridge never get traffic.
A ...
- 215
0
votes
1
answer
632
views
How to monitor traffic usage on a Tor bridge on Linux?
I'll buy a small server and will install some Ubuntu distro on it, and among other things I'll install a Tor bridge that won't be an exit replay. I also will use it as a SOCKS proxy for a Firefox, I ...
- 215
3
votes
1
answer
228
views
Does Tor still monitor "shadow" relays?
I've been researching methods to monitor hidden services for a university project. I came across this paper which talks about injecting relays as hidden service directories to gather onion addresses. ...
- 31
0
votes
1
answer
500
views
How secure is Tor? Can Tor's traffic be monitored by an attacker?
In the first episode of the first season of Mr.Robot, Elliot is able to monitor Rohit's traffic even though he was using Tor and .onion sites. How did Elliot do that? Would it be possible to do that ...
- 103
0
votes
2
answers
433
views
Does the Tor browser counter wiretapping?
I have learned about Tor quite recently. Where I live, new laws are made
for digital surveillance. It looks like the law will gain new tools with
the motivation to prevent terrorism. There is a lot of ...
0
votes
1
answer
269
views
Simulating Correlation attacks on Tor using Shadow
Is it possible to simulate correlation attacks on Tor using Shadow? If it's possible what's the easiest way to implement it? If it's not possible, then is there any other simulators that can be used ...
- 101
2
votes
1
answer
1k
views
Net Neutrality Implications [closed]
If the "net neutrality" thing is stopped, will it affect Tor users?
What about Onion services?
I am not qualified to add more details on "net neutrality" so feel free to add to this post
1
vote
0
answers
342
views
Clarification of Risks to Anonymity [closed]
My goal is to get a clear sense of what is required to maintain anonymity. In a sense I'm mapping the flow of traffic in my head and trying to understand how certain traffic might interact in ways ...
- 11
0
votes
1
answer
191
views
Tracking users via google APIs?
if i open website1.com in one tab and it uses some google analytics or google fonts api, then open website2.org in another tab which also uses google products...
do the google domains see different ...
0
votes
1
answer
54
views
Alterations to Tor and finding a way to run tests and simulations [duplicate]
For one of my assignments I have to conduct a research paper. I decided to propose a solution vulnerabilities TOR has with traffic analysis.
I'm suggesting adding in random delays,random hop count ...
- 101
0
votes
1
answer
123
views
Suspcious IMAP traffic between my machine and a Tor entry node
I was running Wireshark and noticed that my machine sends IMAP requests to 37.187.22.131, which, according to my TorBrowser, is the entry node I'm connected to. Likewise, my machine seems to be ...
3
votes
1
answer
1k
views
How does de-anonymization work?
I heard that someone, who can read the traffic of many tor nodes (like the government of a country where many nodes are located) can find out which user is sending/reading data to/from which resource ...
- 195
5
votes
3
answers
6k
views
Is the “Ron's Coffee” Tor-related hack technically possible in episode 1x01 of Mr. Robot?
In the episode 1x01 of Mr. Robot, Elliot confronts the owner of Ron's Coffee. He basically states that the man is hosting illegal (child pornography) content served in the form of a website that the ...
- 53
1
vote
1
answer
2k
views
Does Tor usage increase the traffic volume compared to other browsers?
Let's say I visit some page via Chrome with in/out packages at the level of 10MB.
Could we know (theoretically) how the traffic volume will be affected if I visit the same site via Tor? Will Tor ...
- 163
3
votes
3
answers
151
views
Can Tor run on messaging applications on my phone, and how?
I would like to know if Tor can cooperate with other applications, if the information leaks can be stopped and I can be anonymous. For instance on a messaging application, if someone were to try to ...
2
votes
1
answer
121
views
traffic-analysis
I am (very) new to Tor.
As I understand it, each time a data-package passes a Tor-relay, it is encrypted/decrypted, thereby changing in size only marginally. It seems to me that if somebody monitors ...
- 21
4
votes
3
answers
699
views
Does caploader able to identify Tor traffic in the network?
I found this blog post which says that they were able to identify Tor traffic by using a software called caploader? Have any one tried this software? I wasn't able to try it by myself as the protocol ...
- 71
1
vote
0
answers
72
views
Is traffic analysis easier for relay adversaries than for network adversaries?
I gather that relay adversaries employ traffic analysis to determine that two of their relays are part of the same circuit. And I vaguely recall a comment, perhaps on the Tor Project blog, that ...
- 2,997