Tor Exit Node port stats
While being at Camp 2007 I feel somewhat safe. Time to do good stuff, and stuff I wanted to do for a long time. Time to run a Tor exit node.
I often heard that it's a golden rule for Tor users to not abuse the network by using file-sharing on it. Tor is slow and that's what slows its spread among users.
That interested me and so I wrote a small script to grep out tor connections out of netstat and filter ports that appear only once. Sample output here:
2710 2 87 2 47251 2 20335 2 49152 3 6969 3 80 4 4662 14 6881 30 4642 35 Total: 331
Port 80 is web, I always assumed web is used most. Port 6881 is Bittorrent. Sad, but true. Ports 4662 & 4642 belong to some other file-sharing app, too. High random ports can also be a hint for P2P. Who gives a shit about well-known ports when your programs connect to each other automatically?
The number of connections may not be enough to call these statistics empirically satisfying, but now I've got a clue what main Tor traffic looks like.