Detecting anomalies in the Tor anonymity network