if an exit node decides to trace back a Tor message to its source, will it be able to identify the same packet at the middle node, and from then identify the same packet at the entry node? assuming they have access to the internet logs of all nodes. As I understand the identity of the middle node will be obvious to the exit node. And the entry node identity is also obvious to the middle node.
I'm asking this to understand if, with access to the right logs, is it guaranteed that someone can identify the source and destination of any Tor message. I'm not asking about time correlation at the entry/exit nodes.