Snowflake 57 byte sends

Since 2022/09/28 10:59:16 I started to notice in my logs lines like this:
2022/09/30 10:39:32 Traffic throughput (up|down): 57 B|5 KB -- (22 OnMessages, 1 Sends, over 0 seconds)
Connection sends 57 bytes, receives several kilobytes and lasts for several seconds.
Within 3 days 862 such connections were collected in my log.
Do anyone knows origins of such behaviour? Is it related to attacks? To new kind of censorship?

I’m seeing the same, alot.
Running standalone with unrestricted NAT.

1 Like

I doubt if this is anything dire. I expect it relates to the very heavy load on the snowflake servers due to the massive amounts of traffic recently.

···

On Sep 30, 2022, at 12:30 PM, fa7 via Tor Project Forum <notifications_at_torproject1_discoursemail_com_7symmg8vsw4428_0a0598b2@icloud.com> wrote:

| fa7
September 30 |

  • | - |

I’m seeing the same, alot.
Running standalone with unrestricted NAT.


Visit Topic or reply to this email to respond.

To unsubscribe from these emails, click here.

The timing matches up a problem with ephemeral ports on the bridge. It should be fixed since 2022-09-30 21:06:13.

Likely what was happening is: the proxy made a WebSocket connection to the bridge; the bridge frontend process was unable to make an internal connection; so the frontend process terminated the WebSocket connection almost immediately. It was probabilistic, only affecting a fraction of connection attempts.

Since 2022-09-28 10:57:26 the snowflake-server log is full of “connect: cannot assign requested address”

1 Like

@dcf I still see them now:

2022/10/01 11:08:41 Traffic throughput (up|down): 57 B|10 KB -- (42 OnMessages, 1 Sends, over 0 seconds)
2022/10/01 11:08:55 Traffic throughput (up|down): 57 B|11 KB -- (54 OnMessages, 1 Sends, over 0 seconds)
2022/10/01 11:09:34 Traffic throughput (up|down): 57 B|7 KB -- (23 OnMessages, 1 Sends, over 0 seconds)
2022/10/01 11:13:42 Traffic throughput (up|down): 57 B|14 KB -- (79 OnMessages, 1 Sends, over 1 seconds)

@dcf No further 57 B sends after ~ 2022/10/01 13:00:00

There was a period without such sends yesterday.
But today I see them again:

2022/10/02 09:46:29 Traffic throughput (up|down): 57 B|6 KB -- (25 OnMessages, 1 Sends, over 0 seconds)
2022/10/02 09:46:54 Traffic throughput (up|down): 57 B|14 KB -- (108 OnMessages, 1 Sends, over 0 seconds)
2022/10/02 09:47:02 Traffic throughput (up|down): 57 B|10 KB -- (41 OnMessages, 1 Sends, over 0 seconds)
2022/10/02 09:47:12 Traffic throughput (up|down): 57 B|9 KB -- (46 OnMessages, 1 Sends, over 2 seconds)

See here:

1 Like