[HOME] [DOWNLOAD] [DOCS] [NEWS] [SUPPORT] [TIPS] [ISSUES] [DONATE]

Whonix Gateway syslogs question

Hello, I’ve been keeping an eye on my whonix gateway logs lately and noticed two things. The first is this:

I am also seeing “Time has been changed” spamming my logs. It happens a dozen times a day for about 20 minutes each time. Should I do something about this? What does it mean?

The second thing is:

Jul 05 16:51:21 host Tor[1217]: We tried for 15 seconds to connect to ‘[scrubbed]’ using exit $786926E8C497A6924ED69E23D48B13E92D1E07EE~memcpy at 163.172.67.180. Retrying on a new circuit.
Jul 05 16:51:36 host Tor[1217]: We tried for 15 seconds to connect to ‘[scrubbed]’ using exit $0818DAE0E2DDF795AEDEAC60B15E71901084F281~edwardsnowden1 at 109.163.234.8. Retrying on a new circuit.
Jul 05 16:51:36 host Tor[1217]: Tried for 130 seconds to get a connection to [scrubbed]:443. Giving up.

Several dozens of lines like that. Also occures 20+ times a day. Should I be concerned or do anything about it?

I’ve made no modifications to the gateway or VM settings. I’m using it with Virtualbox in a linux distro. The gateway is completely up to date.

Distributor ID: Whonix
Description: Whonix GNU/Linux 8.8 (jessie)
Release: 8.8
Codename: jessie

Linux host 3.16.0-4-686-pae #1 SMP Debian 3.16.43-2+deb8u2 (2017-06-26) i686 GNU/Linux

I’m not sure but I guess this could be caused by the gradual time adjustment by sdwdate.

Edit: just found this: https://phabricator.whonix.org/T691

1 Like

Stephanie:

Should I be concerned

https://www.whonix.org/wiki/FAQ#Am_I_compromised.3F

@Patrick, I didn’t think I was compromised. Not at all. I thought maybe there was a bug in my gateway.

Thank you for your replies. So everything is fine overall? I’ll ignore both kinds of activity in my logs.

Time has changed...

Small thing but gotta ask, do you freeze or hibernate? Perhaps it unsyncs the clock hence barrage of going back time.

Nope, I don’t freeze or hibernate at all. I boot the gateway and the time messages just happen randomly.

[Imprint] [Privacy Policy] [Cookie Policy] [Terms of Use] [E-Sign Consent] [DMCA] [Investors] [Priority Support] [Professional Support]