[tor-relays] Compression bomb from dizum

Mailing Lists tor-relays
1

Got the following in my log today:
Nov 06 18:19:01.000 [warn] Possible compression bomb; abandoning stream.
Nov 06 18:19:01.000 [warn] Unable to decompress HTTP body (tried Zstandard compressed, on Directory connection (client reading) with 45.66.33.45:80).
45.66.33.45 is tor.dizum.com, a Tor directory authority.

False positive or a problem generating directory info at dizum?

···

_______________________________________________
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

2

I got the same at 2 relays at 18:02:56.000

···

On 11/6/21 10:39 PM, Logforme wrote:

Got the following in my log today:
Nov 06 18:19:01.000 [warn] Possible compression bomb; abandoning stream.
Nov 06 18:19:01.000 [warn] Unable to decompress HTTP body (tried Zstandard compressed, on Directory connection (client reading) with 45.66.33.45:80).
45.66.33.45 is tor.dizum.com, a Tor directory authority.

False positive or a problem generating directory info at dizum?

--
Toralf

3

I would think false positive here considering that it comes from "dizum".

Lets keep an eye out for more though.

Thanks!
David

···

On 06 Nov (21:39:44), Logforme wrote:

Got the following in my log today:
Nov 06 18:19:01.000 [warn] Possible compression bomb; abandoning stream.
Nov 06 18:19:01.000 [warn] Unable to decompress HTTP body (tried Zstandard
compressed, on Directory connection (client reading) with 45.66.33.45:80).
45.66.33.45 is tor.dizum.com, a Tor directory authority.

False positive or a problem generating directory info at dizum?

--
smhtN6GS89mA/K6UVSGViMyg06C3llc28/cEM0NvTcI=