3 ms·
I don't quite follow. You can't inject an RST packet unless you know someone is trying to connect to a Tor node, so you still need to supervise all the routes,
by openasocket 10y ago
I don't quite follow. You can't inject an RST packet unless you know someone is trying to connect to a Tor node, so you still need to supervise all the routes, right?
- betaby 10y agoAnd ignoring RST may work. In fact that method worked against earlier implementations of the great firewall of China.
- detaro 10y agoYou can sniff the traffic out-of-band, possibly implement it on already existing spy/monitoring infrastructure.
- spydum 10y agoDifference is I can do traffic analysis and RST generation over lots of machines (if it gets slow, worst case my RST gets there late). Changing routes/forwarding table action has to happen on machine moving large data, in real time.