Re: [tor-relays] Log warning : possible (zlib) compression bomb on middle relays

Hi everybody Am 02.11.2020 um 11:05 schrieb Guinness: I'm wondering if this is an attack or a new feature (haven't checked yet) but I'd like to know how many users are impacted. The interesting informations are : * Number of warnings * What kind of relay it is (middle, exit, entry) Relay

Re: [tor-relays] Log warning : possible (zlib) compression bomb on middle relays

Same here - obviously something happening all over in Tor (timezone is CET): Nov 02 05:29:24.000 [warn] Possible compression bomb; abandoning stream. Nov 02 05:29:25.000 [warn] Possible compression bomb; abandoning stream. Nov 02 05:29:29.000 [warn] Possible compression bomb; abandoning stream. No

Re: [tor-relays] Log warning : possible (zlib) compression bomb on middle relays

same here, my 4 relays (guards) all had this log entry, with one of them the log entries are spread over a quarter of an hour (2 tor instances runnnig on this one): (this one is on Central European time zone, CET) Nov 2 05:15:22 : Possible compression bomb; abandoning stream. Nov 2 05:15:23 : m

Re: [tor-relays] Log warning : possible (zlib) compression bomb on middle relays

Same on my US exit relay: Nov 02 04:03:50.000 [warn] Possible zlib bomb; abandoning stream. Nov 02 04:03:50.000 [warn] Possible zlib bomb; abandoning stream. Christoph Graf November 2, 2020 at 11:59 AM Same here on my bridge: Nov  2 06:21:04 raspipfupf Tor[

Re: [tor-relays] Log warning : possible (zlib) compression bomb on middle relays

also saw this on my Tor exit dannydevito, but these messages only appeared once in logs (UTC time) Nov  2 04:21:44 dannydevito Tor: Possible zlib bomb; abandoning stream. Nov  2 04:22:42 dannydevito Tor: Possible compression bomb; abandoning stream. Nov  2 04:22:42 dannydevito syslogd: last mes

Re: [tor-relays] Log warning : possible (zlib) compression bomb on middle relays

Here, too. Between 3 and 12 lines, all within 1-3 seconds. Not totally sure about my arithmetic between time zones, but all seem to be within 5 minutes. Bridge,middle, exits included. --Torix Sent with ProtonMail Secure Email. ‐‐‐ Original Message ‐‐‐ On Monday, November 2, 2020 10:0

Re: [tor-relays] Log warning : possible (zlib) compression bomb on middle relays

Same here on my bridge: Nov  2 06:21:04 raspipfupf Tor[2556]: Possible zlib bomb; abandoning stream. Nov  2 06:21:04 raspipfupf Tor[2556]: Possible zlib bomb; abandoning stream. Time is UTC+1, nothing before and after Cheers, Christoph On 02.11.20 11:05, Guinness wrote: Hi all, We are at lea

Re: [tor-relays] Log warning : possible (zlib) compression bomb on middle relays

I see the same warnings on my bridge (uptime since last restart about 3 days) as well. Nov 02 04:52:10.000 [warn] Possible compression bomb; abandoning stream. Nov 02 04:52:10.000 [warn] Possible compression bomb; abandoning stream. Nov 02 04:52:10.000 [warn] Possible zlib bomb; abandoning stream

Re: [tor-relays] Log warning : possible (zlib) compression bomb on middle relays

A similar observation on a middle+guard (times in UTC). Nothing since then, no other issues observed: -- Nov 02 04:11:12: Possible compression bomb; abandoning stream. Nov 02 04:12:09: Possible zlib bomb; abandoning stream. Nov 02 04:12:

Re: [tor-relays] Log warning : possible (zlib) compression bomb on middle relays

On Mon, 2 Nov 2020 11:05:43 +0100 Guinness allegedly wrote: > I'm wondering if this is an attack or a new feature (haven't checked > yet) but I'd like to know how many users are impacted. > > The interesting informations are : > * Number of warnings > * What kind of relay it is (middle, exit,

Re: [tor-relays] Log warning : possible (zlib) compression bomb on middle relays

Hello, same here on my middle relay running 0.4.4.5: ... Nov 02 05:20:48.000 [warn] Possible compression bomb; abandoning stream. Nov 02 05:20:48.000 [warn] Possible compression bomb; abandoning stream. Nov 02 05:20:48.000 [warn] Possible compression bomb; abandoning stream. Nov 02 05:21:49.000

Re: [tor-relays] Log warning : possible (zlib) compression bomb on middle relays

Hi Guinness, On Mon, Nov 2, 2020 at 12:31 PM Guinness wrote: > I'm wondering if this is an attack or a new feature (haven't checked > yet) but I'd like to know how many users are impacted. > > The interesting informations are : > * Number of warnings > * What kind of relay it is (middle, exit,

[tor-relays] Log warning : possible (zlib) compression bomb on middle relays

Hi all, We are at least 3 users running middle relays from 0.4.4.5 and after having some logs like those : ``` Nov 02 05:30:55.000 [warn] Possible compression bomb; abandoning stream. Nov 02 05:30:55.000 [warn] Possible zlib bomb; abandoning stream. Nov 02 05:30:56.000 [warn] Possible compression