Actually I think I got it (edit: ya, got it). Firefox is using SOCKS4a, MOZ as user_id, and port/ip of the requested site. Can't believe I didn't see that, again, until I posted.
---------------------------- Original post:
Anyone happen to know why one might receive an unexpected [FIN, ACK]? (EOF)
I'm trying to connect to a SOCKS4 server, and usually get accepted with 0x5a. After sending my first GET request immediately 150ms later it'll send me a FIN back. Sometimes before.
It works absolutely fine in Firefox. My HTTP request matches exactly. Except my connection request is different. I'm using the standard 9 byte auth (01/04/port/ip/null), but Firefox is using something entirely different after the 01/04 and it's 12 bytes, 3 bigger than mine.
firefox:
mine:Quote:
0000 00 1c df cd 60 9e 00 1f bc 08 1a 97 08 00 45 00 ....`.........E.
0010 00 40 22 1c 40 00 40 06 28 5a c0 a8 02 03 18 80 .@".@.@.(Z......
0020 15 17 96 5d 54 01 0b 9b af cf 07 64 5d 70 80 18 ...]T......d]p..
0030 00 5b 96 42 00 00 01 01 08 0a 08 e5 8d f7 00 00 .[.B............
0040 00 00 04 01 00 50 48 e9 59 c5 4d 4f 5a 00 .....PH.Y.MOZ.
I don't know if that's the cause, but I'm running out of ideas here.Quote:
0000 00 1c df cd 60 9e 00 1f bc 08 1a 97 08 00 45 00 ....`.........E.
0010 00 3d b2 42 40 00 40 06 3b d3 c0 a8 02 03 c1 b2 .=.B@.@.;.......
0020 c8 47 a1 d0 04 38 88 c8 af 8b 76 65 da 7f 80 18 .G...8....ve....
0030 00 5b 25 8b 00 00 01 01 08 0a 09 2d 1e 2c 08 bf .[%........-.,..
0040 12 93 04 01 04 38 c1 b2 c8 47 00 .....8...G.
