# \#p2p **URL:** https://bnoc.xyz/tag/p2p/3.md [Latest](https://bnoc.xyz/latest.md) · [Categories](https://bnoc.xyz/categories.md) · [Tags](https://bnoc.xyz/tags.md) --- ## [/Satoshi:31.0.0/ peers with no service flags and protocol 70015 pushed transactions, then stopped together on Oct 18](https://bnoc.xyz/t/satoshi-31-0-0-peers-with-no-service-flags-and-protocol-70015-pushed-transactions-then-stopped-together-on-oct-18/193)
**Author:** [@benunskilled](https://bnoc.xyz/u/benunskilled)\ **Replies:** 10\ **Last updated:** [October 22, 2026, 11:07pm UTC](https://bnoc.xyz/t/satoshi-31-0-0-peers-with-no-service-flags-and-protocol-70015-pushed-transactions-then-stopped-together-on-oct-18/193 "2026-10-22T23:07:43Z")
My listening node (Core 31.1) got inbound connections from a small fleet announcing /Satoshi:31.0.0/ that, as far as I can tell, isn’t Bitcoin Core. Who: 6,591 sessions from 22 IPv4 addresses (Oct 6–18), each in a diffe… --- ## [Effect of Linux Kernel CVE-2026-99999 (CVSS 9.3, PwnScape) on the Bitcoin network](https://bnoc.xyz/t/effect-of-linux-kernel-cve-2026-99999-cvss-9-3-pwnscape-on-the-bitcoin-network/189)
**Author:** [@b10c](https://bnoc.xyz/u/b10c)\ **Replies:** 3\ **Last updated:** [October 19, 2026, 8:30pm UTC](https://bnoc.xyz/t/effect-of-linux-kernel-cve-2026-99999-cvss-9-3-pwnscape-on-the-bitcoin-network/189 "2026-10-19T20:30:11Z")
VPS providers have been patching and restarting the hosts of their VPS / cloud servers following CVE-2026-99999 for the past days since the vulnerability was made public on the 15th. Some of these likely run Bitcoin node… --- ## [Request: Bitcoin and/or Lightning packet captures](https://bnoc.xyz/t/request-bitcoin-and-or-lightning-packet-captures/111)
**Author:** [@cndolo](https://bnoc.xyz/u/cndolo)\ **Replies:** 8\ **Last updated:** [October 19, 2026, 7:27pm UTC](https://bnoc.xyz/t/request-bitcoin-and-or-lightning-packet-captures/111 "2026-10-19T19:27:15Z")
Hi, I’m currently working on a research project and looking to strengthen my dataset with more vantage points besides my own. We are interested in traffic analysis, and in particular (for now) detection and classificati… --- ## [Follow-up to data request: research paper on passive, network attack](https://bnoc.xyz/t/follow-up-to-data-request-research-paper-on-passive-network-attack/188)
**Author:** [@cndolo](https://bnoc.xyz/u/cndolo)\ **Replies:** 1\ **Last updated:** [October 19, 2026, 7:26pm UTC](https://bnoc.xyz/t/follow-up-to-data-request-research-paper-on-passive-network-attack/188 "2026-10-19T19:26:40Z")
Hi, A few months ago, I posted here requesting packet captures of Bitcoin/LN traffic that I needed for a research project. I got traces from @b10c in time and @jonhbit provided LN traces as well but the paper was alread… --- ## [Address Relay under stress: Attack Characteristics and Measuring Its Effects](https://bnoc.xyz/t/address-relay-under-stress-attack-characteristics-and-measuring-its-effects/164)
**Author:** [@stratospher](https://bnoc.xyz/u/stratospher)\ **Replies:** 12\ **Last updated:** [October 9, 2026, 5:30pm UTC](https://bnoc.xyz/t/address-relay-under-stress-attack-characteristics-and-measuring-its-effects/164 "2026-10-09T17:30:19Z")
This is joint work with @mzumsande. It’s a companion piece to this post, digging into the data from the address spam attack. Below is a summary of our analysis. The address spam propagated through normal address gossip.… --- ## [Passive Traffic Analysis of Bitcoin P2P v2](https://bnoc.xyz/t/passive-traffic-analysis-of-bitcoin-p2p-v2/161)
**Author:** [@victorandre957](https://bnoc.xyz/u/victorandre957)\ **Replies:** 3\ **Last updated:** [October 9, 2026, 2:36pm UTC](https://bnoc.xyz/t/passive-traffic-analysis-of-bitcoin-p2p-v2/161 "2026-10-09T14:36:06Z")
I started working on this subject after reading the discussion in 0xB10C/project-ideas#12. The question that interested me was relatively simple: after BIP324 removes the cleartext Bitcoin message framing, what can a … --- ## [Outbound connection success rates of a Bitcoin node](https://bnoc.xyz/t/outbound-connection-success-rates-of-a-bitcoin-node/142)
**Author:** [@b10c](https://bnoc.xyz/u/b10c)\ **Replies:** 14\ **Last updated:** [September 30, 2026, 10:21pm UTC](https://bnoc.xyz/t/outbound-connection-success-rates-of-a-bitcoin-node/142 "2026-09-30T22:21:27Z")
To have data for a simulation, I’ve been looking at the rate of successful outbound connections my nodes are making. I’m parsing and using the following log messages for this: trying TRANSPORT connection (CONN\_TYPE) to… --- ## [ViaBTC bitpeers sending the same \`block\` message multiple times during forks](https://bnoc.xyz/t/viabtc-bitpeers-sending-the-same-block-message-multiple-times-during-forks/178)
**Author:** [@b10c](https://bnoc.xyz/u/b10c)\ **Replies:** 2\ **Last updated:** [September 27, 2026, 12:49am UTC](https://bnoc.xyz/t/viabtc-bitpeers-sending-the-same-block-message-multiple-times-during-forks/178 "2026-09-27T00:49:36Z")
Just a network observations I wanted to write down. Nothing problematic. While looking into peers sending us the same block multiple times in a short time-frame, I came across this interaction with a peer: 2026-04-20T… --- ## [/btcwire:0.5.0/hemi-soak:1.0/ annoucing its address on many ports (82.221.101.217)](https://bnoc.xyz/t/btcwire-0-5-0-hemi-soak-1-0-annoucing-its-address-on-many-ports-82-221-101-217/170)
**Author:** [@stratospher](https://bnoc.xyz/u/stratospher)\ **Replies:** 4\ **Last updated:** [September 21, 2026, 11:09pm UTC](https://bnoc.xyz/t/btcwire-0-5-0-hemi-soak-1-0-annoucing-its-address-on-many-ports-82-221-101-217/170 "2026-09-21T23:09:21Z")
I found it hard to believe the number of IP addresses received including duplicates rose to 460,241 addresses on 31 august in a node I was looking at. Apparently 99.2% of all the addresses which got rate limited in net\_… --- ## [Address Relay under stress](https://bnoc.xyz/t/address-relay-under-stress/163)
**Author:** [@mzumsande](https://bnoc.xyz/u/mzumsande)\ **Replies:** 7\ **Last updated:** [September 15, 2026, 4:36pm UTC](https://bnoc.xyz/t/address-relay-under-stress/163 "2026-09-15T16:36:35Z")
This is joint work with @stratospher. From April 2026 to July 2026, there was a period of increased address relay caused by some entity spamming the network. In this post, we will discuss what consequences it had on the… --- ## [/python-bitcoinlib:0.12.2/ client getting addr-ratelimited (since 2026-04-10)](https://bnoc.xyz/t/python-bitcoinlib-0-12-2-client-getting-addr-ratelimited-since-2026-04-10/116)
**Author:** [@b10c](https://bnoc.xyz/u/b10c)\ **Replies:** 8\ **Last updated:** [September 2, 2026, 3:12pm UTC](https://bnoc.xyz/t/python-bitcoinlib-0-12-2-client-getting-addr-ratelimited-since-2026-04-10/116 "2026-09-02T15:12:59Z")
Since 2026-04-10 at about 16:30 UTC I’ve seen multiple IPv4 addresses connect to my monitoring nodes gossiping addresses via addr (and not addrv2) at a higher rate. These addresses are frequently rate-limited. IPs are: … --- ## [Unreachable addresses in Bitcoin GETADDR responses](https://bnoc.xyz/t/unreachable-addresses-in-bitcoin-getaddr-responses/155)
**Author:** [@danielabrozzoni](https://bnoc.xyz/u/danielabrozzoni)\ **Replies:** 3\ **Last updated:** [August 15, 2026, 12:21pm UTC](https://bnoc.xyz/t/unreachable-addresses-in-bitcoin-getaddr-responses/155 "2026-08-15T12:21:57Z")
In the past few months we saw many unreachable addresses being gossipped on the p2p network (see this thread or this one). This refers to unsolicited ADDR messages, but I wondered if we could find some more information o… --- ## [Small getaddr responses from 897 nodes (/Satoshi:27.0.0/ on AS63949)](https://bnoc.xyz/t/small-getaddr-responses-from-897-nodes-satoshi-27-0-0-on-as63949/121)
**Author:** [@naiyoma](https://bnoc.xyz/u/naiyoma)\ **Replies:** 13\ **Last updated:** [July 31, 2026, 7:25am UTC](https://bnoc.xyz/t/small-getaddr-responses-from-897-nodes-satoshi-27-0-0-on-as63949/121 "2026-07-31T07:25:32Z")
I ran this crawler(https://github.com/virtu/p2p-crawler.git) over the weekend and observed a cluster of 897 nodes that returned a getaddr response of 256 peers. This is way below the usual \< 990. All the nodes have… --- ## [Did the number of reachable nodes in residential ISPs increase since Bitcoin Core v30.0?](https://bnoc.xyz/t/did-the-number-of-reachable-nodes-in-residential-isps-increase-since-bitcoin-core-v30-0/122)
**Author:** [@b10c](https://bnoc.xyz/u/b10c)\ **Replies:** 9\ **Last updated:** [May 12, 2026, 3:07pm UTC](https://bnoc.xyz/t/did-the-number-of-reachable-nodes-in-residential-isps-increase-since-bitcoin-core-v30-0/122 "2026-05-12T15:07:54Z")
With the release of Bitcoin Core v30.0 on 2025-10-10, the -natpmp has been enabled by default. The hope is that this will increase the number of reachable nodes in residential ISPs. The release notes mention: The -natp… --- ## [Observability tooling for P2Poolv2](https://bnoc.xyz/t/observability-tooling-for-p2poolv2/103)
**Author:** [@jungly](https://bnoc.xyz/u/jungly)\ **Replies:** 2\ **Last updated:** [April 1, 2026, 4:11am UTC](https://bnoc.xyz/t/observability-tooling-for-p2poolv2/103 "2026-04-01T04:11:53Z")
Question Given your experience of observing bitcoin p2p and stale rates, what tooling or extra data in p2p messages you wish bitcoin had that will give you better insights into latency, stale rates, compact block miss ra… --- ## [Increased b-msghand thread utilization due to runestone transactions on 2026-02-17](https://bnoc.xyz/t/increased-b-msghand-thread-utilization-due-to-runestone-transactions-on-2026-02-17/81)
**Author:** [@b10c](https://bnoc.xyz/u/b10c)\ **Replies:** 15\ **Last updated:** [March 23, 2026, 11:00am UTC](https://bnoc.xyz/t/increased-b-msghand-thread-utilization-due-to-runestone-transactions-on-2026-02-17/81 "2026-03-23T11:00:40Z")
I noticed my peer-observer nodes spending a lot of time in b-msghand thread today on 2026-02-17 starting around 1:30 am UTC. Note that the screenshots are UTC+1. (red means we spend 1000ms out of 1000ms (i.e. 100%) o… --- ## [Attack on I2P: Bitcoin nodes not reachable via I2P](https://bnoc.xyz/t/attack-on-i2p-bitcoin-nodes-not-reachable-via-i2p/79)
**Author:** [@b10c](https://bnoc.xyz/u/b10c)\ **Replies:** 5\ **Last updated:** [February 12, 2026, 8:57pm UTC](https://bnoc.xyz/t/attack-on-i2p-bitcoin-nodes-not-reachable-via-i2p/79 "2026-02-12T20:57:07Z")
There’s an Ongoing Attack on I2P Network Causing Degraded Performance that’s also affecting Bitcoin node connectivity via I2P. I run four Bitcoin nodes with I2P connectivity, and all seem to be affected. My monitoring i… --- ## [Bitcoin Core addr gossip is rate-limited right after connection open](https://bnoc.xyz/t/bitcoin-core-addr-gossip-is-rate-limited-right-after-connection-open/47)
**Author:** [@b10c](https://bnoc.xyz/u/b10c)\ **Replies:** 7\ **Last updated:** [December 8, 2025, 5:26pm UTC](https://bnoc.xyz/t/bitcoin-core-addr-gossip-is-rate-limited-right-after-connection-open/47 "2025-12-08T17:26:13Z")
On my peer-observer monitoring, I have a dashboard with the number of connected peers that have at least one address rate-limited. For each node (ignoring hazel and mike with different configurations), it shows a few pee… --- ## [Waves of (bad) addresses being gossiped](https://bnoc.xyz/t/waves-of-bad-addresses-being-gossiped/61)
**Author:** [@b10c](https://bnoc.xyz/u/b10c)\ **Replies:** 1\ **Last updated:** [November 26, 2025, 5:06pm UTC](https://bnoc.xyz/t/waves-of-bad-addresses-being-gossiped/61 "2025-11-26T17:06:31Z")
I recently re-observed something I previously looked into in 2023. Every couple of hours, at seemingly random intervals and times, my peers (i.e. the whole network) starts sending a spike in addresses. When I looked into… --- ## [Increased b-msghand thread utilization due to many 352 byte runestone inscriptions on 2025-11-17](https://bnoc.xyz/t/increased-b-msghand-thread-utilization-due-to-many-352-byte-runestone-inscriptions-on-2025-11-17/58)
**Author:** [@b10c](https://bnoc.xyz/u/b10c)\ **Replies:** 5\ **Last updated:** [November 26, 2025, 4:15pm UTC](https://bnoc.xyz/t/increased-b-msghand-thread-utilization-due-to-many-352-byte-runestone-inscriptions-on-2025-11-17/58 "2025-11-26T16:15:40Z")
While looking at a peer-observer dashboard for time spent in the b-msghand (P2P message handling thread) of Bitcoin Core, I noticed that some of the nodes (especially dave with many connections) were active in that threa… --- ## [Gossip Observer: New project to monitor the Lightning P2P network](https://bnoc.xyz/t/gossip-observer-new-project-to-monitor-the-lightning-p2p-network/54)
**Author:** [@jonhbit](https://bnoc.xyz/u/jonhbit)\ **Replies:** 0\ **Last updated:** [November 14, 2025, 9:51pm UTC](https://bnoc.xyz/t/gossip-observer-new-project-to-monitor-the-lightning-p2p-network/54 "2025-11-14T21:51:28Z")
For the past few months (since plebfi miami), I’ve been working on a project to monitor the Lightning gossip network by collecting gossip messages from numerous nodes. The repo with the code used, the raw data collected … --- ## [Statistical and clustering analysis of attributes of Bitcoin backbone nodes (2023)](https://bnoc.xyz/t/statistical-and-clustering-analysis-of-attributes-of-bitcoin-backbone-nodes-2023/27)
**Author:** [@b10c](https://bnoc.xyz/u/b10c)\ **Replies:** 0\ **Last updated:** [October 14, 2025, 12:34pm UTC](https://bnoc.xyz/t/statistical-and-clustering-analysis-of-attributes-of-bitcoin-backbone-nodes-2023/27 "2025-10-14T12:34:52Z")
https://www.sciencedirect.com/science/article/pii/S2096720924000733 Abstract Bitcoin is a decentralized digital cryptocurrency. Its network is a Peer-to-peer(P2P) network consisting of distributed nodes. Some of these n… --- ## [Bitcoin Network Topology Discovery Using Timing Analysis (2023)](https://bnoc.xyz/t/bitcoin-network-topology-discovery-using-timing-analysis-2023/26)
**Author:** [@b10c](https://bnoc.xyz/u/b10c)\ **Replies:** 0\ **Last updated:** [October 14, 2025, 12:30pm UTC](https://bnoc.xyz/t/bitcoin-network-topology-discovery-using-timing-analysis-2023/26 "2025-10-14T12:30:52Z")
Abstract The cryptocurrency Bitcoin consists of a set of miners that are connected to a peer-to-peer network. Within said network, messages are efficiently forwarded between clients using a gossip protocol. The exact…