drop tor relay info / notices.log · parse circuit events + reachability
parses circuit open/extend/close · guard/middle/exit role changes · reachability self-tests · bandwidth burst accounting lines
heuristic log parsing only · no live tor network probe · timestamps without year inferred from file mtime · not definitive proof