3

In my pcap file capturing Tor traffic, there are connections to 2 Directory Servers (x.x.x.x:9001 and y.y.y.y:443) and they started nearly at the same time.

My question is that is it normal or not? and why does Tor client connect to multiple Directory Servers?

amin
  • 251
  • 2
  • 4

1 Answers1

1

yes, it's normal. The multiple connections to Directory servers and the nodes mirroring a signed image of Directory are for load balancing and censorship resistance purposes.

Alexey Vesnin
  • 6,385
  • 3
  • 15
  • 36