[Bug]: NCSI 探测 www.msftncsi.com 解析不了，导致右下角网络图标依旧停留在wifi

[Such438]

操作系统 / v2rayN / Core 版本

最新且每个版本都有类似

预期情况

Windows 网络图标的逻辑：NCSI 探测 www.msftncsi.com 解析不了 → 图标永远停在"无 Internet"，我关闭了ipv4

实际情况

找到真相了——不是"刷新的慢"，是根本没恢复：

• singbox_tun 系统 DNS = 172.18.0.2（v2rayN 又把 bug 带回来了）
• nslookup 全部超时（DNS 全挂）
• 旧核心进程 PID 24792 还在跑——launcher 还没激活

Windows 网络图标的逻辑：NCSI 探测 www.msftncsi.com 解析不了 → 图标永远停在"无 Internet"，不是慢，是探测一直失败。先临时救回当前网络：

Thought for 10s, ran 2 shell commands

DNS 回来了！注意看输出：www.google.com → 198.18.0.36、www.baidu.com → 198.18.0.35——FakeIP 正常响应（198.18.0.0/15 就是 fakeip 范围），说明 DNS 引擎工作正常，只是脚本的 [FAIL] 是误报（fakeip 响应不含 "Non-authoritative" 字样）。确认网络通了：

Thought for 7s, ran 1 shell command

网络通了（baidu 0.16s / google 1.2s 走代理 / NCSI 探测内容正常返回 "Microsoft NCSI"）——下一轮探测后图标就会恢复 Internet。

复现方法

真相：你的 DNS bug 又复发了——v2rayN 把 singbox_tun 的系统 DNS 恢复成了 172.18.0.2（这是它每次重启核心后的默认动作），而旧进程（PID 24792）内存里的配置还是 bug 顺序 → DNS 查询全被 drop → NCSI 探测（www.msftncsi.com）永远解析失败 → 图标永远卡在"无 Internet"。

它不是在慢慢刷新，是探测一直不成功，永远不会自己变好。

那"慢"的部分确实存在（机制性）

Windows 网络图标由 NCSI 驱动：DNS 探测 + HTTP 拉取 ncsi.txt（必须返回 "Microsoft NCSI"）。触发时机和重试规律：

┌──────────┬────────────────────────────────────┐
│ 机制 │ 说明 │
├──────────┼────────────────────────────────────┤
│ 触发 │ 仅接口状态/地址/DNS 变化时主动探测 │
├──────────┼────────────────────────────────────┤
│ 失败重试 │ 退避式，最长 1~2 分钟一轮 │
├──────────┼────────────────────────────────────┤
│ 恢复 │ 探测成功 → 立即变 Internet │
└──────────┴────────────────────────────────────┘

所以哪怕网络已恢复，图标也要等下一轮探测（最多 1-2 分钟）——这是"感觉慢"的部分，而"卡住不动"是 DNS 挂。

已处理

1. ✅ 临时救回：接口 DNS 改回 223.5.5.5 → DNS 通（baidu 0.16s / google 1.2s）→ NCSI 内容已验证返回 "Microsoft NCSI"，图标 1-2 分钟内自己变正常
2. ✅ 顺手修了 fix-tun-dns.ps1 的误报判断（fakeip 响应不含 "Non-authoritative"）

根治（就剩这一步）

在 v2rayN 里重启核心（或重启 v2rayN）——让 launcher 生效。重启后：

• hijack-dns 排最前 → 系统 DNS 就算再变回 172.18.0.2 也照常解析
• NCSI 探测永远成功 → 图标问题从根上消失，不用再手动改任何东西

软件日志

不说了

内核日志

2026/08/09 09:06:06.985330 [Warning] [1657110949] app/proxyman/inbound: connection ends > proxy/http: failed to read http request > read tcp 127.0.0.1:10808->127.0.0.1:44130: wsarecv: An existing connection was forcibly closed by the remote host.
2026/08/09 09:06:06.995226 from 127.0.0.1:44137 accepted http://s1.symcb.com/pca3-g5.crl [socks >> proxy]
2026/08/09 09:06:07.618349 from 127.0.0.1:44137 accepted http://sv.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQe6LNDJdqx%2BJOp7hVgTeaGFJ%2FCQgQUljtT8Hkzl699g%2B8uK8zKt4YecmYCEGNJB2TAYSuYQ3vz3gg7KdE%3D [socks >> proxy]
2026/08/09 09:06:08.080153 from 127.0.0.1:44143 accepted //nav.smartscreen.microsoft.com:443 [socks >> proxy]
2026/08/09 09:06:08.240327 from 127.0.0.1:44137 accepted http://sv.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQe6LNDJdqx%2BJOp7hVgTeaGFJ%2FCQgQUljtT8Hkzl699g%2B8uK8zKt4YecmYCEGNJB2TAYSuYQ3vz3gg7KdE%3D [socks >> proxy]
2026/08/09 09:06:08.656796 from 127.0.0.1:44137 accepted http://sv.symcb.com/sv.crl [socks >> proxy]
+0800 2026-08-09 09:06:09 ERROR [1278553495 2m58s] connection: connection download closed: raw-read tcp 192.168.1.254:44213->223.109.195.138:443: An existing connection was forcibly closed by the remote host.
2026/08/09 09:06:09.891122 from 127.0.0.1:44151 accepted //checkappexec.microsoft.com:443 [socks >> proxy]
2026/08/09 09:06:18.066736 from tcp:127.0.0.1:44164 accepted tcp:catalog.gamepass.com:443 [socks >> proxy]
+0800 2026-08-09 09:06:26 ERROR [869856831 5.70s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10375: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:26 ERROR [1415158040 5.80s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10374: An existing connection was forcibly closed by the remote host.
[Shadowsocks] 🇺🇸 美国 | SS | US 01(550e8400-e29b-41d4-a716-446655440000-uscom:20011)
v2rayN - V7.24.6 - X64 | D:\v2rayN-windows-64\ | D:\v2rayN-windows-64\v2rayN.exe | Microsoft Windows NT 10.0.26200.0
启动服务 (2026/08/09 09:06:29)...
+0800 2026-08-09 09:06:29 ERROR [1592009703 7m21s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10148: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [381378 10m11s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10051: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [4093319056 10m45s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10027: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [466395005 22.55s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10363: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [237653928 9m53s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10054: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [2746744703 10m46s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10024: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [1779454158 10m46s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10022: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [2229966896 1m18s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10335: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [1037942462 10m48s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10015: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [421281829 10m38s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10041: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [2966249502 10m34s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10044: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [2081204262 10m46s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10023: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [3772893694 10m23s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10048: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [3876988168 10m42s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10038: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [1847273620 10m17s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10049: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [1865243584 7m27s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10139: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [2952369336 9m0s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10068: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [1163815561 8m0s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10091: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [2510110752 9m0s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10069: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [3506643427 9m0s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10071: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [2348668901 7m49s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10119: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [2792902930 1m32s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10323: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [650575026 3m36s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10226: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [3258109322 1m31s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10329: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [1978511524 19.18s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10369: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [1523898868 8m0s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10088: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [3865552837 3m35s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10228: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [1135198440 2m59s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10271: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [1033181704 7m21s] connection: connection download closed: raw-read tcp 127.0.0.1:27951->127.0.0.1:10808: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [3190413738 5m34s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10184: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [261414330 3m58s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10208: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [3424339703 1m3s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10340: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [1830531456 59.97s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10341: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [2178954434 1m25s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10333: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [2226937101 3m3s] connection: connection download closed: raw-read tcp 127.0.0.1:2181->127.0.0.1:10808: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [449321889 3m58s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10209: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [1948848528 3m3s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10258: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [3762204235 3m19s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10244: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [3507860915 3m57s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10215: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [1027582555 3m24s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10241: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [137948808 1m33s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10322: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [1306148098 1m41s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10320: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [3045246940 2m59s] connection: connection download closed: raw-read tcp 127.0.0.1:48806->127.0.0.1:10808: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [328763617 1m6s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10338: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [1488618777 3m3s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10260: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [580799147 2m22s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10297: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [1274259263 2m38s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10293: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [607326577 2m59s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10274: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [1915211865 1m33s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10321: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [1603621290 1m32s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10324: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [1831935097 1m7s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10337: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [840878727 57.12s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10344: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [33972553 1m6s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10339: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:06:29 ERROR [3720439174 20.99s] connection: connection upload closed: raw-read tcp4 172.18.0.1:35615->172.18.0.2:10367: An existing connection was forcibly closed by the remote host.
Xray 26.7.28 (Xray, Penetrates Everything.) 5ca6f4b (go1.26.5 windows/amd64)
A unified platform for anti-censorship.
2026/08/09 09:06:30.201485 [Info] infra/conf/serial: Reading config: &{Name:config.json Format:json}
2026/08/09 09:06:30.219160 [Warning] common/errors: The feature Shadowsocks (with no Forward Secrecy, etc.) is deprecated, not recommended for using and might be removed. Please migrate to VLESS Encryption as soon as possible.
2026/08/09 09:06:31.009467 [Warning] core: Xray 26.7.28 started
2026/08/09 09:06:31.021512 from 127.0.0.1:23345 accepted http://91.108.56.200:80/api [socks >> proxy]
2026/08/09 09:06:31.052826 from tcp:127.0.0.1:42684 rejected proxy/socks: failed to read request > EOF
2026/08/09 09:06:31.067704 from 127.0.0.1:14217 accepted //frontier-pc.douyin.com:443 [socks -> direct]
2026/08/09 09:06:31.069130 from DNS accepted udp:223.5.5.5:53 [direct-dns-2 -> direct]
2026/08/09 09:06:31.069130 from 127.0.0.1:24771 accepted //frontier-im.douyin.com:443 [socks -> direct]
[Shadowsocks] 🇺🇸 美国 | SS | US 01(550e8400-e29b-41d4-a716-446655440000-uscom:20011)
2026/08/09 09:06:31.176347 from 127.0.0.1:32308 accepted //mon.zijieapi.com:443 [socks -> direct]
2026/08/09 09:06:31.328152 from 127.0.0.1:42679 accepted //frontier-pc.douyin.com:443 [socks -> direct]
2026/08/09 09:06:31.328679 from 127.0.0.1:23840 accepted //frontier-im.douyin.com:443 [socks -> direct]
2026/08/09 09:06:31.344148 from 127.0.0.1:28685 accepted //mtalk.google.com:5228 [socks -> proxy]
2026/08/09 09:06:31.344148 from DNS accepted https://cloudflare-dns.com/dns-query [dns-module -> proxy]
2026/08/09 09:06:31.381814 from 127.0.0.1:51648 accepted //91.108.56.200:443 [socks >> proxy]
2026/08/09 09:06:31.391075 from 127.0.0.1:51650 accepted //91.108.56.200:443 [socks >> proxy]
2026/08/09 09:06:31.405290 from 127.0.0.1:51651 accepted //91.108.56.200:443 [socks >> proxy]
2026/08/09 09:06:31.420398 from 127.0.0.1:23340 accepted //mon.zijieapi.com:443 [socks -> direct]
2026/08/09 09:06:31.450927 from 127.0.0.1:23341 accepted http://91.108.56.200:80/api [socks >> proxy]
2026/08/09 09:06:31.481591 from 127.0.0.1:23343 accepted http://91.108.56.200:80/api [socks >> proxy]
2026/08/09 09:06:31.501345 from 127.0.0.1:63250 accepted //mcs.zijieapi.com:443 [socks -> direct]
2026/08/09 09:06:31.622621 from 127.0.0.1:27319 accepted //accounts.google.com:443 [socks -> proxy]
2026/08/09 09:06:32.185800 from tcp:127.0.0.1:27323 accepted tcp:www.google.com:443 [socks -> proxy]
2026/08/09 09:06:32.197190 [Warning] [290687705] app/proxyman/inbound: connection ends > proxy/http: connection ends > proxy/http: failed to write response > write tcp 127.0.0.1:10808->127.0.0.1:23341: wsasend: An established connection was aborted by the software in your host machine.
2026/08/09 09:06:32.209655 [Warning] [182933937] app/proxyman/inbound: connection ends > proxy/http: connection ends > proxy/http: failed to write response > write tcp 127.0.0.1:10808->127.0.0.1:23343: wsasend: An established connection was aborted by the software in your host machine.
2026/08/09 09:06:33 当前延迟: 202 ms，none
2026/08/09 09:06:33.724669 from tcp:127.0.0.1:27332 accepted tcp:www.google.com:443 [socks -> proxy]
2026/08/09 09:06:34.319779 from 127.0.0.1:27334 accepted //frontier.zijieapi.com:443 [socks -> direct]
2026/08/09 09:06:34.625550 from 127.0.0.1:1950 accepted //mtalk.google.com:5228 [socks -> proxy]
2026/08/09 09:06:34.786411 from 127.0.0.1:1951 accepted //skydrive.wns.windows.com:443 [socks >> proxy]
2026/08/09 09:06:34.786411 from DNS accepted https://cloudflare-dns.com/dns-query [dns-module -> proxy]
2026/08/09 09:06:34.928714 from 127.0.0.1:1952 accepted //frontier.zijieapi.com:443 [socks -> direct]
2026/08/09 09:06:35.421914 from 127.0.0.1:1956 accepted //ftp.hp.com:443 [socks -> direct]
2026/08/09 09:06:35.532866 from 127.0.0.1:58795 accepted //frontier-im.douyin.com:443 [socks -> direct]
2026/08/09 09:06:35.534526 from 127.0.0.1:49054 accepted //imapi.douyin.com:443 [socks -> direct]
2026/08/09 09:06:35.669821 from 127.0.0.1:35130 accepted //mcs.zijieapi.com:443 [socks -> direct]
2026/08/09 09:06:36.729149 from 127.0.0.1:59686 accepted //vc-gate-edge.ndcpp.com:443 [socks -> direct]
2026/08/09 09:06:38.786745 [Error] app/dns: failed to retrieve response for skydrive.wns.windows.com. > Post "https://cloudflare-dns.com/dns-query": context deadline exceeded
2026/08/09 09:06:39.560396 from 127.0.0.1:30156 accepted //live.douyin.com:443 [socks -> direct]
2026/08/09 09:06:39.694958 from 127.0.0.1:33033 accepted //bytelink100-ws.douyin.com:443 [socks -> direct]
2026/08/09 09:06:39.881849 from 127.0.0.1:33036 accepted //frontier.zijieapi.com:443 [socks -> direct]
2026/08/09 09:06:41.523107 from 127.0.0.1:5062 accepted //www-hj.douyin.com:443 [socks -> direct]
2026/08/09 09:06:41.579010 from 127.0.0.1:31752 accepted //mcs.zijieapi.com:443 [socks -> direct]
2026/08/09 09:06:41.886132 from 127.0.0.1:4181 accepted //www-hj.douyin.com:443 [socks -> direct]
2026/08/09 09:06:42.996685 from tcp:127.0.0.1:4186 accepted tcp:99.84.41.99:443 [socks >> proxy]
2026/08/09 09:06:42.996685 from DNS accepted https://cloudflare-dns.com/dns-query [dns-module -> proxy]
2026/08/09 09:06:45.752173 [Error] app/dns: failed to retrieve response for portswigger.net. > Post "https://cloudflare-dns.com/dns-query": io: read/write on closed pipe
2026/08/09 09:06:45.752173 from 127.0.0.1:41389 accepted //mtalk.google.com:5228 [socks -> proxy]
2026/08/09 09:06:49.435918 from 127.0.0.1:41402 accepted //mobile.events.data.microsoft.com:443 [socks >> proxy]
2026/08/09 09:06:49.435918 from DNS accepted https://cloudflare-dns.com/dns-query [dns-module -> proxy]
2026/08/09 09:06:52.865893 from 127.0.0.1:41408 accepted //api.deepseek.com:443 [socks -> direct]
2026/08/09 09:06:53.436213 [Error] app/dns: failed to retrieve response for mobile.events.data.microsoft.com. > Post "https://cloudflare-dns.com/dns-query": context deadline exceeded
2026/08/09 09:06:54.778452 from 127.0.0.1:41413 accepted //api5-normal.mchost.guru:443 [socks -> direct]
2026/08/09 09:06:57.823390 from 127.0.0.1:49500 accepted //mtalk.google.com:443 [socks -> proxy]
2026/08/09 09:06:57.823390 from 127.0.0.1:41419 accepted //mobile.events.data.microsoft.com:443 [socks >> proxy]
2026/08/09 09:06:57.823910 from DNS accepted https://cloudflare-dns.com/dns-query [dns-module -> proxy]
2026/08/09 09:06:57.828194 from tcp:127.0.0.1:49502 accepted tcp:99.84.41.99:443 [socks >> proxy]
2026/08/09 09:07:00.409371 from 127.0.0.1:54858 accepted //mon.zijieapi.com:443 [socks -> direct]
2026/08/09 09:07:01.823785 [Error] app/dns: failed to retrieve response for mobile.events.data.microsoft.com. > Post "https://cloudflare-dns.com/dns-query": context deadline exceeded
2026/08/09 09:07:01.823785 from DNS accepted https://cloudflare-dns.com/dns-query [dns-module -> proxy]
2026/08/09 09:07:01.828857 [Error] app/dns: failed to retrieve response for portswigger.net. > Post "https://cloudflare-dns.com/dns-query": context deadline exceeded
2026/08/09 09:07:02.483748 from 127.0.0.1:54863 accepted http://pcs-sdk-server.alibaba.com/l?umid=&csid=21e01476ac6b52a9488ee31fa4099390&acnt=&hosttype=2&log=Check%20service%20status%20after%20loading%20success [socks -> direct]
2026/08/09 09:07:02.596847 from 127.0.0.1:54863 accepted http://err.taobao.com/error1.html [socks -> direct]
2026/08/09 09:07:02.681118 from 127.0.0.1:54869 accepted //error.taobao.com:443 [socks -> direct]
2026/08/09 09:07:05.196483 from 127.0.0.1:54874 accepted //api3.goofish.pro:443 [socks -> direct]
2026/08/09 09:07:09.889027 from 127.0.0.1:36358 accepted //mtalk.google.com:443 [socks -> proxy]
2026/08/09 09:07:09.891660 from tcp:127.0.0.1:36360 accepted tcp:99.84.41.99:443 [socks >> proxy]
2026/08/09 09:07:09.891660 from DNS accepted https://cloudflare-dns.com/dns-query [dns-module -> proxy]
2026/08/09 09:07:13.116443 from 127.0.0.1:36366 accepted //skydrive.wns.windows.com:443 [socks >> proxy]
2026/08/09 09:07:13.892143 [Error] app/dns: failed to retrieve response for portswigger.net. > Post "https://cloudflare-dns.com/dns-query": context deadline exceeded
2026/08/09 09:07:13.892143 from DNS accepted https://cloudflare-dns.com/dns-query [dns-module -> proxy]
2026/08/09 09:07:17.116894 [Error] app/dns: failed to retrieve response for skydrive.wns.windows.com. > Post "https://cloudflare-dns.com/dns-query": context deadline exceeded
2026/08/09 09:07:18.468028 from 127.0.0.1:13054 accepted //pc-mon.zijieapi.com:443 [socks -> direct]
2026/08/09 09:07:21.931863 from tcp:127.0.0.1:13062 accepted tcp:99.84.41.99:443 [socks >> proxy]
2026/08/09 09:07:21.931863 from DNS accepted https://cloudflare-dns.com/dns-query [dns-module -> proxy]
[Shadowsocks] 🇺🇸 美国 | SS | US 01(550e8400-e29b-41d4-a716-446655440000-uscom:20011)
v2rayN - V7.24.6 - X64 | D:\v2rayN-windows-64\ | D:\v2rayN-windows-64\v2rayN.exe | Microsoft Windows NT 10.0.26200.0
启动服务 (2026/08/09 09:07:21)...
+0800 2026-08-09 09:07:21 ERROR [2244811727 40.39s] connection: connection upload closed: raw-read tcp4 172.18.0.1:27330->172.18.0.2:10017: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:07:21 ERROR [4022286880 42.28s] connection: connection upload closed: raw-read tcp4 172.18.0.1:27330->172.18.0.2:10013: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:07:21 ERROR [2656669426 46.55s] connection: connection upload closed: raw-read tcp4 172.18.0.1:27330->172.18.0.2:10002: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:07:21 ERROR [2828597311 40.45s] connection: connection upload closed: raw-read tcp4 172.18.0.1:27330->172.18.0.2:10016: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:07:21 ERROR [589305131 48ms] connection: connection download closed: raw-read tcp 127.0.0.1:13062->127.0.0.1:10808: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:07:21 ERROR [1320640463 21.56s] connection: connection upload closed: raw-read tcp4 172.18.0.1:27330->172.18.0.2:10026: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:07:21 ERROR [3161978928 19.29s] connection: connection upload closed: raw-read tcp4 172.18.0.1:27330->172.18.0.2:10029: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:07:21 ERROR [2331830293 42.9s] connection: connection upload closed: raw-read tcp4 172.18.0.1:27330->172.18.0.2:10014: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:07:21 ERROR [3431995647 45.24s] connection: connection upload closed: raw-read tcp4 172.18.0.1:27330->172.18.0.2:10008: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:07:21 ERROR [1348688596 46.44s] connection: connection upload closed: raw-read tcp4 172.18.0.1:27330->172.18.0.2:10003: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:07:21 ERROR [1743272719 42.41s] connection: connection upload closed: raw-read tcp4 172.18.0.1:27330->172.18.0.2:10012: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:07:21 ERROR [1135307902 40.9s] connection: connection upload closed: raw-read tcp4 172.18.0.1:27330->172.18.0.2:10018: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:07:21 ERROR [288299048 27.18s] connection: connection upload closed: raw-read tcp4 172.18.0.1:27330->172.18.0.2:10024: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:07:21 ERROR [1274114252 3.51s] connection: connection upload closed: raw-read tcp4 172.18.0.1:27330->172.18.0.2:10036: An existing connection was forcibly closed by the remote host.
Xray 26.7.28 (Xray, Penetrates Everything.) 5ca6f4b (go1.26.5 windows/amd64)
A unified platform for anti-censorship.
2026/08/09 09:07:22.827305 [Info] infra/conf/serial: Reading config: &{Name:config.json Format:json}
2026/08/09 09:07:22.844252 [Warning] common/errors: The feature Shadowsocks (with no Forward Secrecy, etc.) is deprecated, not recommended for using and might be removed. Please migrate to VLESS Encryption as soon as possible.
2026/08/09 09:07:23.544995 [Warning] core: Xray 26.7.28 started
2026/08/09 09:07:23.560684 from 127.0.0.1:10992 accepted //91.108.56.200:443 [socks >> proxy]
2026/08/09 09:07:23.575580 from 127.0.0.1:10994 accepted //91.108.56.200:443 [socks >> proxy]
2026/08/09 09:07:23.590039 from 127.0.0.1:10995 accepted http://91.108.56.200:80/api [socks >> proxy]
2026/08/09 09:07:23.604671 from tcp:127.0.0.1:65077 rejected proxy/socks: failed to read request > EOF
2026/08/09 09:07:23.605198 from 127.0.0.1:10996 accepted http://91.108.56.200:80/api [socks >> proxy]
2026/08/09 09:07:23.612805 from 127.0.0.1:65076 accepted http://err.taobao.com/error1.html [socks -> direct]
2026/08/09 09:07:23.612805 from DNS accepted udp:223.5.5.5:53 [direct-dns-2 -> direct]
2026/08/09 09:07:23.635363 from 127.0.0.1:10998 accepted http://91.108.56.200:80/api [socks >> proxy]
2026/08/09 09:07:23.726708 from 127.0.0.1:15889 accepted //error.taobao.com:443 [socks -> direct]
[Shadowsocks] 🇺🇸 美国 | SS | US 01(550e8400-e29b-41d4-a716-446655440000-uscom:20011)
2026/08/09 09:07:23.753283 from 127.0.0.1:15890 accepted //api.trae.com.cn:443 [socks -> direct]
2026/08/09 09:07:23.774613 from 127.0.0.1:29067 accepted //frontier-pc.douyin.com:443 [socks -> direct]
2026/08/09 09:07:23.774613 from 127.0.0.1:7592 accepted //mon.zijieapi.com:443 [socks -> direct]
2026/08/09 09:07:23.774613 from 127.0.0.1:39262 accepted //frontier-im.douyin.com:443 [socks -> direct]
2026/08/09 09:07:23.962750 from 127.0.0.1:30334 accepted //mtalk.google.com:5228 [socks -> proxy]
2026/08/09 09:07:23.964079 from DNS accepted https://cloudflare-dns.com/dns-query [dns-module -> proxy]
2026/08/09 09:07:23.990302 from 127.0.0.1:26972 accepted //security.zijieapi.com:443 [socks -> direct]
2026/08/09 09:07:24.033846 from 127.0.0.1:5881 accepted //mon.zijieapi.com:443 [socks -> direct]
2026/08/09 09:07:24.033846 from 127.0.0.1:65074 accepted //frontier-pc.douyin.com:443 [socks -> direct]
2026/08/09 09:07:24.034367 from 127.0.0.1:13663 accepted //frontier-im.douyin.com:443 [socks -> direct]
2026/08/09 09:07:24.034913 from 127.0.0.1:10989 accepted //91.108.56.200:443 [socks >> proxy]
2026/08/09 09:07:24.043895 from 127.0.0.1:65311 accepted //www-hj.douyin.com:443 [socks -> direct]
2026/08/09 09:07:24.107693 from 127.0.0.1:63593 accepted //mcs.zijieapi.com:443 [socks -> direct]
2026/08/09 09:07:24.171381 from 127.0.0.1:19703 accepted //www-hj.douyin.com:443 [socks -> direct]
2026/08/09 09:07:24.372732 [Warning] [17642490] app/proxyman/inbound: connection ends > proxy/http: connection ends > proxy/http: failed to write response > write tcp 127.0.0.1:10808->127.0.0.1:10998: wsasend: An established connection was aborted by the software in your host machine.
2026/08/09 09:07:24.620831 from 127.0.0.1:22363 accepted //vc-gate-edge.ndcpp.com:443 [socks -> direct]
2026/08/09 09:07:24.737489 from tcp:127.0.0.1:22369 accepted tcp:www.google.com:443 [socks -> proxy]
2026/08/09 09:07:24.740396 [Warning] [4018918415] app/proxyman/inbound: connection ends > proxy/http: failed to read http request > read tcp 127.0.0.1:10808->127.0.0.1:65076: wsarecv: An existing connection was forcibly closed by the remote host.
2026/08/09 09:07:26 当前延迟: 201 ms，none
2026/08/09 09:07:26.118016 from 127.0.0.1:22377 accepted //mobile.events.data.microsoft.com:443 [socks >> proxy]
2026/08/09 09:07:26.118653 from DNS accepted https://cloudflare-dns.com/dns-query [dns-module -> proxy]
2026/08/09 09:07:26.795208 from tcp:127.0.0.1:22378 accepted tcp:www.google.com:443 [socks -> proxy]
2026/08/09 09:07:26.996493 from 127.0.0.1:22380 accepted //safebrowsing.googleapis.com:443 [socks -> proxy]
2026/08/09 09:07:27.076396 from 127.0.0.1:23153 accepted //vc-gate-edge.ndcpp.com:443 [socks -> direct]
2026/08/09 09:07:27.274752 from 127.0.0.1:23156 accepted //frontier.zijieapi.com:443 [socks -> direct]
2026/08/09 09:07:27.284937 from 127.0.0.1:14118 accepted //mtalk.google.com:5228 [socks -> proxy]
2026/08/09 09:07:27.529925 from 127.0.0.1:14120 accepted //frontier.zijieapi.com:443 [socks -> direct]
2026/08/09 09:07:29.931917 from 127.0.0.1:57626 accepted //mcs.zijieapi.com:443 [socks -> direct]
2026/08/09 09:07:30.119225 [Error] app/dns: failed to retrieve response for mobile.events.data.microsoft.com. > Post "https://cloudflare-dns.com/dns-query": context deadline exceeded
2026/08/09 09:07:30.462737 from 127.0.0.1:1460 accepted //www-hj.douyin.com:443 [socks -> direct]
2026/08/09 09:07:30.566601 from 127.0.0.1:34291 accepted //www-hj.douyin.com:443 [socks -> direct]
2026/08/09 09:07:32.260517 from 127.0.0.1:10025 accepted //live.douyin.com:443 [socks -> direct]
2026/08/09 09:07:32.449611 from 127.0.0.1:55381 accepted //bytelink100-ws.douyin.com:443 [socks -> direct]
2026/08/09 09:07:32.493209 from 127.0.0.1:55383 accepted //frontier.zijieapi.com:443 [socks -> direct]
2026/08/09 09:07:34.733258 from 127.0.0.1:64697 accepted //p3-sign.douyinpic.com:443 [socks -> direct]
2026/08/09 09:07:35.418672 from 127.0.0.1:21571 accepted //mon.zijieapi.com:443 [socks -> direct]
2026/08/09 09:07:35.536079 from 127.0.0.1:20644 accepted //frontier-im.douyin.com:443 [socks -> direct]
2026/08/09 09:07:35.537657 from 127.0.0.1:18549 accepted //imapi.douyin.com:443 [socks -> direct]
2026/08/09 09:07:48.347724 from 127.0.0.1:18591 accepted //api2.goofish.pro:443 [socks -> direct]
2026/08/09 09:07:48.362900 from 127.0.0.1:18594 accepted //www.goofish.pro:443 [socks -> direct]
2026/08/09 09:07:51.360907 from 127.0.0.1:19121 accepted //www.google.com:443 [socks -> proxy]
2026/08/09 09:07:51.392825 from 127.0.0.1:60364 accepted //optimizationguide-pa.googleapis.com:443 [socks -> proxy]
2026/08/09 09:07:51.514683 from 127.0.0.1:58503 accepted //p3-pc-sign.douyinpic.com:443 [socks -> direct]
2026/08/09 09:07:51.556715 from 127.0.0.1:7032 accepted //api.feelgood.cn:443 [socks -> direct]
2026/08/09 09:07:51.636698 from 127.0.0.1:7037 accepted http://pcs-sdk-server.alibaba.com/l?umid=&csid=21e01476ac6b52a9488ee31fa4099390&acnt=&hosttype=2&log=RegisterHostPath:%5BC:%5CProgram%20Files%5CAliWorkbench%5D [socks -> direct]
2026/08/09 09:07:51.725953 from 127.0.0.1:30515 accepted //p3-pc.douyinpic.com:443 [socks -> direct]
2026/08/09 09:07:51.744448 from 127.0.0.1:4732 accepted //vc-gate-edge.ndcpp.com:443 [socks -> direct]
2026/08/09 09:07:51.757023 from 127.0.0.1:7037 accepted http://err.taobao.com/error1.html [socks -> direct]
2026/08/09 09:07:51.801125 from 127.0.0.1:38507 accepted //v26-web.douyinvod.com:443 [socks -> direct]
2026/08/09 09:07:51.801657 from 127.0.0.1:3799 accepted //v26-web.douyinvod.com:443 [socks -> direct]
2026/08/09 09:07:51.851119 from 127.0.0.1:3802 accepted //error.taobao.com:443 [socks -> direct]
2026/08/09 09:07:52.063286 from 127.0.0.1:55519 accepted //v11-weba.douyinvod.com:443 [socks -> direct]
2026/08/09 09:07:52.362705 from 127.0.0.1:14371 accepted //www.douyin.com:443 [socks -> direct]
2026/08/09 09:07:53.731766 from 127.0.0.1:20984 accepted //security.zijieapi.com:443 [socks -> direct]
2026/08/09 09:07:54.783645 from 127.0.0.1:20988 accepted //api5-normal.mchost.guru:443 [socks -> direct]
2026/08/09 09:08:06.372945 from 127.0.0.1:2827 accepted //clients4.google.com:443 [socks -> proxy]
2026/08/09 09:08:10.198946 from 127.0.0.1:2833 accepted //api3.goofish.pro:443 [socks -> direct]
2026/08/09 09:08:16.168303 from 127.0.0.1:7037 accepted http://pcs-sdk-server.alibaba.com/l?umid=&csid=21e01476ac6b52a9488ee31fa4099390&acnt=&hosttype=2&log=begin%20local_load [socks -> direct]
2026/08/09 09:08:16.257993 from 127.0.0.1:7037 accepted http://err.taobao.com/error1.html [socks -> direct]
2026/08/09 09:08:18.652598 from 127.0.0.1:21150 accepted //pc-mon.zijieapi.com:443 [socks -> direct]
2026/08/09 09:08:18.717487 from 127.0.0.1:23345 accepted //mon.zijieapi.com:443 [socks -> direct]
2026/08/09 09:08:21.988961 from tcp:127.0.0.1:23353 accepted tcp:99.84.41.99:443 [socks >> proxy]
2026/08/09 09:08:21.988961 from DNS accepted https://cloudflare-dns.com/dns-query [dns-module -> proxy]
2026/08/09 09:08:23.400320 from tcp:127.0.0.1:23360 accepted tcp:99.84.41.99:443 [socks >> proxy]
2026/08/09 09:08:28.227657 from 127.0.0.1:8403 accepted http://pcs-sdk-server.alibaba.com/l?umid=&csid=21e01476ac6b52a9488ee31fa4099390&acnt=&hosttype=2&log=RegisterHostPath:%5BC:%5CProgram%20Files%5CAliWorkbench%5D [socks -> direct]
2026/08/09 09:08:28.317867 from 127.0.0.1:8403 accepted http://err.taobao.com/error1.html [socks -> direct]
2026/08/09 09:08:28.372425 from 127.0.0.1:8408 accepted //error.taobao.com:443 [socks -> direct]
2026/08/09 09:08:32.286984 from 127.0.0.1:33621 accepted //tnc0-aliec2.zijieapi.com:443 [socks -> direct]
2026/08/09 09:08:32.916142 from 127.0.0.1:33625 accepted //api.trae.com.cn:443 [socks -> direct]
2026/08/09 09:08:34.698804 from 127.0.0.1:9054 accepted //mcs.zijieapi.com:443 [socks -> direct]
2026/08/09 09:08:35.192569 from 127.0.0.1:9057 accepted //api3.goofish.pro:443 [socks -> direct]
2026/08/09 09:08:40.257917 from 127.0.0.1:7037 accepted http://pcs-sdk-server.alibaba.com/l?umid=&csid=21e01476ac6b52a9488ee31fa4099390&acnt=&hosttype=2&log=Check%20service%20status%20after%20loading%20success [socks -> direct]
2026/08/09 09:08:40.347550 from 127.0.0.1:7037 accepted http://err.taobao.com/error1.html [socks -> direct]
2026/08/09 09:08:47.339695 from 127.0.0.1:9076 accepted //skydrive.wns.windows.com:443 [socks >> proxy]
2026/08/09 09:08:52.312011 from 127.0.0.1:8403 accepted http://pcs-sdk-server.alibaba.com/l?umid=&csid=21e01476ac6b52a9488ee31fa4099390&acnt=&hosttype=2&log=begin%20local_load [socks -> direct]
2026/08/09 09:08:52.402202 from 127.0.0.1:8403 accepted http://err.taobao.com/error1.html [socks -> direct]
2026/08/09 09:08:57.468407 from 127.0.0.1:47096 accepted //www.google.com:443 [socks -> proxy]
2026/08/09 09:08:58.035697 from 127.0.0.1:37486 accepted //v11-weba.douyinvod.com:443 [socks -> direct]
2026/08/09 09:08:59.599906 from 127.0.0.1:32819 accepted //www.google.com:443 [socks -> proxy]
2026/08/09 09:09:04.358156 from 127.0.0.1:7037 accepted http://pcs-sdk-server.alibaba.com/l?umid=&csid=21e01476ac6b52a9488ee31fa4099390&acnt=&hosttype=2&log=RegisterHostPath:%5BC:%5CProgram%20Files%5CAliWorkbench%5D [socks -> direct]
2026/08/09 09:09:04.432691 from 127.0.0.1:7037 accepted http://err.taobao.com/error1.html [socks -> direct]
2026/08/09 09:09:04.630782 [Warning] [4227359196] app/proxyman/inbound: connection ends > proxy/http: failed to read http request > read tcp 127.0.0.1:10808->127.0.0.1:7037: wsarecv: An existing connection was forcibly closed by the remote host.
2026/08/09 09:09:09.881458 from 127.0.0.1:32835 accepted http://www.msftconnecttest.com/connecttest.txt [socks >> proxy]
2026/08/09 09:09:09.912085 from 127.0.0.1:32837 accepted http://ipv6.msftconnecttest.com/connecttest.txt [socks >> proxy]
2026/08/09 09:09:09.919120 from 127.0.0.1:32839 accepted http://ipv6.msftconnecttest.com/connecttest.txt [socks >> proxy]
2026/08/09 09:09:09.931336 from 127.0.0.1:32842 accepted http://www.msftconnecttest.com/connecttest.txt [socks >> proxy]
2026/08/09 09:09:09.943522 from 127.0.0.1:32843 accepted http://www.msftconnecttest.com/connecttest.txt [socks >> proxy]
2026/08/09 09:09:09.949596 from 127.0.0.1:32845 accepted http://ipv6.msftconnecttest.com/connecttest.txt [socks >> proxy]
2026/08/09 09:09:11.683073 [Warning] [2088673059] proxy/http: failed to read response from ipv6.msftconnecttest.com > io: read/write on closed pipe
2026/08/09 09:09:11.684082 [Warning] [1771989386] proxy/http: failed to read response from www.msftconnecttest.com > io: read/write on closed pipe
2026/08/09 09:09:11.684082 [Warning] [823269665] proxy/http: failed to read response from ipv6.msftconnecttest.com > io: read/write on closed pipe
2026/08/09 09:09:11.684082 [Warning] [4022827478] proxy/http: failed to read response from ipv6.msftconnecttest.com > io: read/write on closed pipe
2026/08/09 09:09:11.684082 [Warning] [144958558] proxy/http: failed to read response from www.msftconnecttest.com > io: read/write on closed pipe
2026/08/09 09:09:11.684082 [Warning] [605978010] proxy/http: failed to read response from www.msftconnecttest.com > io: read/write on closed pipe
2026/08/09 09:09:15.200902 from 127.0.0.1:32852 accepted //api3.goofish.pro:443 [socks -> direct]
2026/08/09 09:09:16.407119 from 127.0.0.1:8403 accepted http://pcs-sdk-server.alibaba.com/l?umid=&csid=21e01476ac6b52a9488ee31fa4099390&acnt=&hosttype=2&log=Check%20service%20status%20after%20loading%20success [socks -> direct]
2026/08/09 09:09:16.483619 from 127.0.0.1:8403 accepted http://err.taobao.com/error1.html [socks -> direct]
2026/08/09 09:09:24.171200 from tcp:127.0.0.1:25020 accepted tcp:99.84.41.99:443 [socks >> proxy]
2026/08/09 09:09:27.376500 from tcp:127.0.0.1:25027 accepted tcp:23.216.55.13:80 [socks >> proxy]
2026/08/09 09:09:27.377900 from tcp:127.0.0.1:25029 accepted tcp:23.216.55.13:80 [socks >> proxy]
2026/08/09 09:09:27.377900 from tcp:127.0.0.1:25028 accepted tcp:23.216.55.13:80 [socks >> proxy]
2026/08/09 09:09:36.473545 from tcp:127.0.0.1:59926 accepted tcp:99.84.41.99:443 [socks >> proxy]
2026/08/09 09:09:38.477024 from 127.0.0.1:19225 accepted //www.google.com:443 [socks -> proxy]
2026/08/09 09:09:38.664295 from 127.0.0.1:28032 accepted //www.google.com:443 [socks -> proxy]
2026/08/09 09:09:38.952712 from 127.0.0.1:61645 accepted //www.google.com:443 [socks -> proxy]
2026/08/09 09:09:38.967626 from 127.0.0.1:27781 accepted //www.google.com:443 [socks -> proxy]
2026/08/09 09:09:40.805623 from 127.0.0.1:8403 accepted http://pcs-sdk-server.alibaba.com/l?umid=&csid=21e01476ac6b52a9488ee31fa4099390&acnt=&hosttype=2&log=RegisterHostPath:%5BC:%5CProgram%20Files%5CAliWorkbench%5D [socks -> direct]
2026/08/09 09:09:40.894897 from 127.0.0.1:8403 accepted http://err.taobao.com/error1.html [socks -> direct]
2026/08/09 09:09:41.126637 [Warning] [2663087436] app/proxyman/inbound: connection ends > proxy/http: failed to read http request > read tcp 127.0.0.1:10808->127.0.0.1:8403: wsarecv: An existing connection was forcibly closed by the remote host.
2026/08/09 09:09:48.541519 from 127.0.0.1:27073 accepted //www.google.com:443 [socks -> proxy]
2026/08/09 09:09:48.541519 from 127.0.0.1:52113 accepted //www.google.com:443 [socks -> proxy]
2026/08/09 09:09:48.542029 from 127.0.0.1:4601 accepted //www.google.com:443 [socks -> proxy]
2026/08/09 09:09:48.542029 from 127.0.0.1:36709 accepted //www.google.com:443 [socks -> proxy]
2026/08/09 09:09:48.543444 from tcp:127.0.0.1:4602 accepted tcp:99.84.41.99:443 [socks >> proxy]
2026/08/09 09:09:48.710891 from 127.0.0.1:48817 accepted //www.google.com:443 [socks -> proxy]
2026/08/09 09:09:48.710891 from 127.0.0.1:50815 accepted //www.google.com:443 [socks -> proxy]
2026/08/09 09:09:49.599866 from 127.0.0.1:56897 accepted //github.com:443 [socks >> proxy]
2026/08/09 09:09:50.270148 from 127.0.0.1:55304 accepted //www.google.com:443 [socks -> proxy]
2026/08/09 09:09:56.974385 from 127.0.0.1:55313 accepted http://ipv6.msftconnecttest.com/connecttest.txt [socks >> proxy]
2026/08/09 09:10:00.601802 [Warning] [3281347424] proxy/http: failed to read response from ipv6.msftconnecttest.com > io: read/write on closed pipe
2026/08/09 09:10:00.605050 from 127.0.0.1:15972 accepted //www.google.com:443 [socks -> proxy]
2026/08/09 09:10:00.605050 from 127.0.0.1:53205 accepted //www.google.com:443 [socks -> proxy]
2026/08/09 09:10:00.605050 from 127.0.0.1:60803 accepted //github.com:443 [socks >> proxy]
2026/08/09 09:10:00.605050 from 127.0.0.1:53237 accepted //www.google.com:443 [socks -> proxy]
2026/08/09 09:10:00.607175 from tcp:127.0.0.1:53238 accepted tcp:99.84.41.99:443 [socks >> proxy]
2026/08/09 09:10:00.657016 from 127.0.0.1:1372 accepted //ogads-pa.clients6.google.com:443 [socks -> proxy]
2026/08/09 09:10:01.662390 from 127.0.0.1:14327 accepted //play.google.com:443 [socks -> proxy]
2026/08/09 09:10:02.894411 from 127.0.0.1:14329 accepted http://www.msftconnecttest.com/connecttest.txt [socks >> proxy]
2026/08/09 09:10:04.669219 from 127.0.0.1:32502 accepted //ogs.google.com:443 [socks -> proxy]
2026/08/09 09:10:05.736402 from tcp:127.0.0.1:32507 accepted tcp:23.208.31.165:80 [socks >> proxy]
2026/08/09 09:10:10.720066 from 127.0.0.1:32513 accepted //api.deepseek.com:443 [socks -> direct]
2026/08/09 09:10:12.677084 [Warning] [2466104577] proxy/http: failed to read response from www.msftconnecttest.com > io: read/write on closed pipe
2026/08/09 09:10:12.678994 from 127.0.0.1:9343 accepted //ogs.google.com:443 [socks -> proxy]
2026/08/09 09:10:12.678994 from 127.0.0.1:47833 accepted //ogads-pa.clients6.google.com:443 [socks -> proxy]
2026/08/09 09:10:12.678994 from 127.0.0.1:54318 accepted //play.google.com:443 [socks -> proxy]
2026/08/09 09:10:12.694941 from 127.0.0.1:5362 accepted //www.google.com:443 [socks -> proxy]
2026/08/09 09:10:12.697609 from 127.0.0.1:41306 accepted //github.com:443 [socks >> proxy]
2026/08/09 09:10:12.698115 from 127.0.0.1:52152 accepted //github.githubassets.com:443 [socks >> proxy]
2026/08/09 09:10:13.695457 from 127.0.0.1:14399 accepted //github.com:443 [socks >> proxy]
2026/08/09 09:10:18.735899 from 127.0.0.1:32206 accepted //browserleaks.com:443 [socks >> proxy]
2026/08/09 09:10:19.763939 from 127.0.0.1:32208 accepted //ws3.goofish.pro:443 [socks -> direct]
2026/08/09 09:10:19.764539 from 127.0.0.1:32209 accepted //web2.goofish.pro:443 [socks -> direct]
2026/08/09 09:10:19.933018 from 127.0.0.1:8064 accepted //www.google.com:443 [socks -> proxy]
2026/08/09 09:10:20.201484 from 127.0.0.1:8065 accepted //api3.goofish.pro:443 [socks -> direct]
2026/08/09 09:10:20.227473 from 127.0.0.1:46142 accepted //www.google.com:443 [socks -> proxy]
2026/08/09 09:10:20.227994 from 127.0.0.1:20222 accepted //www.google.com:443 [socks -> proxy]
2026/08/09 09:10:24.740311 from 127.0.0.1:42310 accepted //www.google.com:443 [socks -> proxy]
2026/08/09 09:10:24.740311 from 127.0.0.1:59970 accepted //github.com:443 [socks >> proxy]
2026/08/09 09:10:24.740872 from 127.0.0.1:24167 accepted //browserleaks.com:443 [socks >> proxy]
2026/08/09 09:10:24.740872 from 127.0.0.1:55092 accepted //www.google.com:443 [socks -> proxy]
2026/08/09 09:10:24.740872 from 127.0.0.1:32964 accepted //www.google.com:443 [socks -> proxy]
2026/08/09 09:10:24.741381 from 127.0.0.1:46319 accepted //github.githubassets.com:443 [socks >> proxy]
2026/08/09 09:10:24.741381 from 127.0.0.1:55037 accepted //www.google.com:443 [socks -> proxy]
2026/08/09 09:10:24.741901 from 127.0.0.1:49891 accepted //github.com:443 [socks >> proxy]
2026/08/09 09:10:24.868879 from 127.0.0.1:27958 accepted //play.google.com:443 [socks -> proxy]
2026/08/09 09:10:29.453954 from 127.0.0.1:39449 accepted //mssdk.bytedance.com:443 [socks -> direct]
2026/08/09 09:10:32.103436 from 127.0.0.1:54810 accepted //oauthaccountmanager.googleapis.com:443 [socks -> proxy]
2026/08/09 09:10:36.827588 from 127.0.0.1:49081 accepted //oauthaccountmanager.googleapis.com:443 [socks -> proxy]
2026/08/09 09:10:36.827588 from 127.0.0.1:7068 accepted //play.google.com:443 [socks -> proxy]
2026/08/09 09:10:36.855452 from 127.0.0.1:60528 accepted //www.google.com:443 [socks -> proxy]
2026/08/09 09:10:36.880878 from 127.0.0.1:16753 accepted //ogads-pa.clients6.google.com:443 [socks -> proxy]
2026/08/09 09:10:37.859284 from 127.0.0.1:1675 accepted //github.com:443 [socks >> proxy]
2026/08/09 09:10:39.011121 from 127.0.0.1:6318 accepted //play.google.com:443 [socks -> proxy]
2026/08/09 09:10:41.260482 from 127.0.0.1:6322 accepted http://www.msftconnecttest.com/connecttest.txt [socks >> proxy]
2026/08/09 09:10:41.694189 from 127.0.0.1:4870 accepted //ogs.google.com:443 [socks -> proxy]
2026/08/09 09:10:48.888907 [Warning] [1505697216] proxy/http: failed to read response from www.msftconnecttest.com > io: read/write on closed pipe
2026/08/09 09:10:48.891426 from 127.0.0.1:61631 accepted //github.com:443 [socks >> proxy]
2026/08/09 09:10:48.891426 from 127.0.0.1:5006 accepted //www.google.com:443 [socks -> proxy]
2026/08/09 09:10:48.891985 from 127.0.0.1:63121 accepted //ogs.google.com:443 [socks -> proxy]
2026/08/09 09:10:48.891985 from 127.0.0.1:1129 accepted //play.google.com:443 [socks -> proxy]
2026/08/09 09:10:48.891985 from 127.0.0.1:64948 accepted //ogads-pa.clients6.google.com:443 [socks -> proxy]
2026/08/09 09:10:50.276916 from 127.0.0.1:35098 accepted //oauthaccountmanager.googleapis.com:443 [socks -> proxy]
2026/08/09 09:10:51.182947 from 127.0.0.1:16915 accepted //play.google.com:443 [socks -> proxy]
2026/08/09 09:10:52.379026 from 127.0.0.1:46473 accepted //github.com:443 [socks >> proxy]
2026/08/09 09:10:52.379619 from 127.0.0.1:48777 accepted //github.githubassets.com:443 [socks >> proxy]
2026/08/09 09:10:53.606147 from 127.0.0.1:50381 accepted //mp.weixin.qq.com:443 [socks -> direct]
2026/08/09 09:10:54.269172 from 127.0.0.1:2813 accepted //wxa.wxs.qq.com:443 [socks -> direct]
2026/08/09 09:10:54.359218 from 127.0.0.1:39456 accepted //badjs.weixinbridge.com:443 [socks -> direct]
2026/08/09 09:11:00.273529 from 127.0.0.1:12978 accepted //api.feelgood.cn:443 [socks -> direct]
2026/08/09 09:11:00.750614 from 127.0.0.1:12981 accepted //skydrive.wns.windows.com:443 [socks >> proxy]
2026/08/09 09:11:00.949523 from 127.0.0.1:64477 accepted //play.google.com:443 [socks -> proxy]
2026/08/09 09:11:00.949523 from 127.0.0.1:45261 accepted //github.com:443 [socks >> proxy]
2026/08/09 09:11:00.950042 from 127.0.0.1:6538 accepted //oauthaccountmanager.googleapis.com:443 [socks -> proxy]
2026/08/09 09:11:00.950042 from 127.0.0.1:19665 accepted //github.githubassets.com:443 [socks >> proxy]
2026/08/09 09:11:02.827851 from 127.0.0.1:47999 accepted //www.google.com:443 [socks -> proxy]
2026/08/09 09:11:02.976109 from 127.0.0.1:8722 accepted //p3-pc-sign.douyinpic.com:443 [socks -> direct]
2026/08/09 09:11:03.134322 from 127.0.0.1:15428 accepted //p3-pc.douyinpic.com:443 [socks -> direct]
2026/08/09 09:11:03.230830 from 127.0.0.1:25084 accepted //v11-weba.douyinvod.com:443 [socks -> direct]
2026/08/09 09:11:03.331835 from 127.0.0.1:62080 accepted //v11-weba.douyinvod.com:443 [socks -> direct]
2026/08/09 09:11:03.435439 from 127.0.0.1:9278 accepted //v11-weba.douyinvod.com:443 [socks -> direct]
2026/08/09 09:11:12.317547 from tcp:127.0.0.1:9290 accepted tcp:104.16.249.249:443 [socks >> proxy]
2026/08/09 09:11:12.688215 from tcp:127.0.0.1:9292 accepted tcp:99.84.41.99:443 [socks >> proxy]
+0800 2026-08-09 09:11:12 ERROR [3853133069 679ms] dns: exchange failed for 5.5.5.223.in-addr.arpa. IN PTR: EOF
2026/08/09 09:11:12.995894 from 127.0.0.1:46755 accepted //www.google.com:443 [socks -> proxy]
2026/08/09 09:11:13.002665 from tcp:127.0.0.1:46757 accepted tcp:99.84.41.99:443 [socks >> proxy]
2026/08/09 09:11:13.076975 from tcp:127.0.0.1:46758 accepted tcp:104.16.249.249:443 [socks >> proxy]
2026/08/09 09:11:13.916569 from tcp:127.0.0.1:46767 accepted tcp:99.84.41.99:443 [socks >> proxy]
2026/08/09 09:11:14.006371 from 127.0.0.1:20376 accepted //github.com:443 [socks >> proxy]
2026/08/09 09:11:14.525003 from tcp:127.0.0.1:20382 accepted tcp:96.7.181.39:80 [socks >> proxy]
2026/08/09 09:11:14.525003 from tcp:127.0.0.1:20383 accepted tcp:96.7.181.39:80 [socks >> proxy]
2026/08/09 09:11:15.720768 from tcp:127.0.0.1:20390 accepted tcp:client.wns.windows.com:443 [socks >> proxy]
2026/08/09 09:11:15.833425 from 127.0.0.1:55236 accepted //oauthaccountmanager.googleapis.com:443 [socks -> proxy]
2026/08/09 09:11:15.884985 from 127.0.0.1:55239 accepted http://pcs-sdk-server.alibaba.com/l?umid=&csid=21e01476ac6b52a9488ee31fa4099390&acnt=&hosttype=2&log=RegisterHostPath:%5BC:%5CProgram%20Files%5CAliWorkbench%5D [socks -> direct]
2026/08/09 09:11:15.986436 from 127.0.0.1:55239 accepted http://err.taobao.com/error1.html [socks -> direct]
2026/08/09 09:11:16.079083 from 127.0.0.1:55246 accepted //error.taobao.com:443 [socks -> direct]
2026/08/09 09:11:18.065890 from tcp:127.0.0.1:55258 accepted tcp:catalog.gamepass.com:443 [socks >> proxy]
2026/08/09 09:11:21.194954 from tcp:127.0.0.1:55268 accepted tcp:api.anthropic.com:443 [socks >> proxy]
2026/08/09 09:11:21.508388 from tcp:127.0.0.1:55272 accepted tcp:client.wns.windows.com:443 [socks >> proxy]
2026/08/09 09:11:22.717448 [Warning] [2008387949] app/proxyman/inbound: connection ends > proxy/http: failed to read http request > read tcp 127.0.0.1:10808->127.0.0.1:55239: wsarecv: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:11:22 ERROR [4028257684 6.37s] connection: connection upload closed: raw-read tcp4 172.18.0.1:22375->172.18.0.2:10128: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:11:22 ERROR [3747588627 6.31s] connection: connection upload closed: raw-read tcp4 172.18.0.1:22375->172.18.0.2:10129: An existing connection was forcibly closed by the remote host.
2026/08/09 09:11:23.694322 from 127.0.0.1:55301 accepted //api.trae.com.cn:443 [socks -> direct]
2026/08/09 09:11:25.201531 from 127.0.0.1:15989 accepted //api3.goofish.pro:443 [socks -> direct]
2026/08/09 09:11:27.176143 from tcp:127.0.0.1:16005 accepted tcp:www.google.com:443 [socks -> proxy]
2026/08/09 09:11:28.423658 from tcp:127.0.0.1:16013 accepted tcp:96.7.181.39:80 [socks >> proxy]
2026/08/09 09:11:31.490084 from 127.0.0.1:16020 accepted http://www.msftncsi.com/connecttest.txt [socks >> proxy]
2026/08/09 09:11:31.518806 from 127.0.0.1:16024 accepted http://ipv6.msftncsi.com/connecttest.txt [socks >> proxy]
2026/08/09 09:11:31.616188 from 127.0.0.1:16025 accepted http://www.msftncsi.com/connecttest.txt [socks >> proxy]
2026/08/09 09:11:31.616188 from 127.0.0.1:16027 accepted http://ipv6.msftncsi.com/connecttest.txt [socks >> proxy]
2026/08/09 09:11:31.628551 from 127.0.0.1:16032 accepted http://ipv6.msftncsi.com/connecttest.txt [socks >> proxy]
2026/08/09 09:11:31.636219 from 127.0.0.1:16034 accepted http://www.msftncsi.com/connecttest.txt [socks >> proxy]
2026/08/09 09:11:32.445376 from 127.0.0.1:1154 accepted //tnc0-aliec2.zijieapi.com:443 [socks -> direct]
2026/08/09 09:11:46.081361 from 127.0.0.1:41394 accepted //github.com:443 [socks >> proxy]
2026/08/09 09:11:46.081361 from 127.0.0.1:49814 accepted //github.githubassets.com:443 [socks >> proxy]
2026/08/09 09:11:47.482632 from 127.0.0.1:58519 accepted //avatars.githubusercontent.com:443 [socks >> proxy]
2026/08/09 09:11:47.484040 from 127.0.0.1:27556 accepted //github.githubassets.com:443 [socks >> proxy]
2026/08/09 09:11:47.809536 from 127.0.0.1:28621 accepted //github.githubassets.com:443 [socks >> proxy]
2026/08/09 09:11:47.811050 from 127.0.0.1:26569 accepted //github.githubassets.com:443 [socks >> proxy]
2026/08/09 09:11:47.811050 from 127.0.0.1:26771 accepted //github.githubassets.com:443 [socks >> proxy]
2026/08/09 09:11:47.811636 from 127.0.0.1:58860 accepted //github.githubassets.com:443 [socks >> proxy]
2026/08/09 09:11:47.811636 from 127.0.0.1:37280 accepted //github.githubassets.com:443 [socks >> proxy]
2026/08/09 09:11:49.115532 from 127.0.0.1:36862 accepted //config.immersivetranslate.com:443 [socks >> proxy]
2026/08/09 09:11:49.416232 from 127.0.0.1:37183 accepted //alive.github.com:443 [socks >> proxy]
2026/08/09 09:11:49.685942 from 127.0.0.1:43865 accepted //collector.github.com:443 [socks >> proxy]
2026/08/09 09:11:49.876626 from 127.0.0.1:37411 accepted //content-autofill.googleapis.com:443 [socks -> proxy]
2026/08/09 09:11:49.878683 from 127.0.0.1:64996 accepted //api.github.com:443 [socks >> proxy]
2026/08/09 09:11:50.196220 from 127.0.0.1:16264 accepted //collector.github.com:443 [socks >> proxy]
2026/08/09 09:11:50.260983 from 127.0.0.1:53926 accepted //api.individual.githubcopilot.com:443 [socks >> proxy]
2026/08/09 09:11:51.457477 from 127.0.0.1:62687 accepted //ai.immersivetranslate.com:443 [socks >> proxy]
2026/08/09 09:11:54.242146 from 127.0.0.1:36407 accepted //github.com:443 [socks >> proxy]
2026/08/09 09:11:58.205273 from 127.0.0.1:31179 accepted //alive.github.com:443 [socks >> proxy]
2026/08/09 09:12:01.115757 from 127.0.0.1:63794 accepted //camo.githubusercontent.com:443 [socks >> proxy]
2026/08/09 09:12:01.420218 from 127.0.0.1:29759 accepted //camo.githubusercontent.com:443 [socks >> proxy]
2026/08/09 09:12:01.420815 from 127.0.0.1:17489 accepted //camo.githubusercontent.com:443 [socks >> proxy]
2026/08/09 09:12:01.568125 from 127.0.0.1:10634 accepted //alive.github.com:443 [socks >> proxy]
2026/08/09 09:12:03.767901 from 127.0.0.1:53795 accepted //collector.github.com:443 [socks >> proxy]
2026/08/09 09:12:04.074905 from 127.0.0.1:6749 accepted //collector.github.com:443 [socks >> proxy]
2026/08/09 09:12:04.074905 from 127.0.0.1:47575 accepted //collector.github.com:443 [socks >> proxy]
2026/08/09 09:12:04.091956 from tcp:127.0.0.1:47581 accepted tcp:96.7.181.39:80 [socks >> proxy]
2026/08/09 09:12:13.833334 from 127.0.0.1:47614 accepted //gfe.nvidia.com:443 [socks >> proxy]
2026/08/09 09:12:14.685577 from tcp:127.0.0.1:47618 accepted tcp:99.84.41.99:443 [socks >> proxy]
2026/08/09 09:12:15.659828 from tcp:127.0.0.1:47623 accepted tcp:99.84.41.99:443 [socks >> proxy]
2026/08/09 09:12:26.778273 from tcp:127.0.0.1:12137 accepted tcp:www.google.com:443 [socks -> proxy]
2026/08/09 09:12:27.083297 from 127.0.0.1:12139 accepted http://c.pki.goog/r/r1.crl [socks -> proxy]
2026/08/09 09:12:27.702947 from 127.0.0.1:12139 accepted http://c.pki.goog/wr2/75r4ZyA3vA0.crl [socks -> proxy]
2026/08/09 09:12:28.356707 from 127.0.0.1:12139 accepted http://c.pki.goog/we2/Gt0Gl6QoGAU.crl [socks -> proxy]
2026/08/09 09:12:30.199561 from 127.0.0.1:12152 accepted //api3.goofish.pro:443 [socks -> direct]
2026/08/09 09:12:32.335072 from 127.0.0.1:12157 accepted //bytegate-sg.byteintlapi.com:443 [socks >> proxy]
2026/08/09 09:12:39.606742 from tcp:127.0.0.1:12168 accepted tcp:96.7.181.11:80 [socks >> proxy]
2026/08/09 09:12:50.072241 from 127.0.0.1:65483 accepted //bytegate-sg.byteintlapi.com:443 [socks >> proxy]
2026/08/09 09:12:50.078466 from 127.0.0.1:65484 accepted //bytegate-sg.byteintlapi.com:443 [socks >> proxy]
2026/08/09 09:12:51.166670 from 127.0.0.1:65491 accepted //www.xygj.pro:443 [socks >> proxy]
2026/08/09 09:12:51.166670 from 127.0.0.1:65492 accepted //web3.goofish.pro:443 [socks -> direct]
2026/08/09 09:13:05.668448 from 127.0.0.1:65515 accepted http://ipv6.msftncsi.com/connecttest.txt [socks >> proxy]
2026/08/09 09:13:15.082243 from 127.0.0.1:65530 accepted http://www.msftncsi.com/connecttest.txt [socks >> proxy]
2026/08/09 09:13:16.437305 from tcp:127.0.0.1:1025 accepted tcp:99.84.41.99:443 [socks >> proxy]
2026/08/09 09:13:17.403906 from tcp:127.0.0.1:1030 accepted tcp:99.84.41.99:443 [socks >> proxy]
2026/08/09 09:13:18.893131 from tcp:127.0.0.1:1038 accepted tcp:events.gfe.nvidia.com:443 [socks >> proxy]
2026/08/09 09:13:23.253811 from 127.0.0.1:21463 accepted //api.github.com:443 [socks >> proxy]
2026/08/09 09:13:24.986687 from tcp:127.0.0.1:48061 accepted tcp:lightstep.kaizen.nvidia.com:443 [socks >> proxy]
2026/08/09 09:13:25.701345 from tcp:127.0.0.1:48068 accepted tcp:ifconfig.me:80 [socks >> proxy]
2026/08/09 09:13:26.350823 from 127.0.0.1:48071 accepted //api3.goofish.pro:443 [socks -> direct]
+0800 2026-08-09 09:13:26 ERROR [3589281097 5.30s] connection: connection upload closed: raw-read tcp4 172.18.0.1:22375->172.18.0.2:10240: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:13:26 ERROR [274217855 5.22s] connection: connection upload closed: raw-read tcp4 172.18.0.1:22375->172.18.0.2:10241: An existing connection was forcibly closed by the remote host.
2026/08/09 09:13:29.871332 from tcp:127.0.0.1:16388 accepted tcp:bytegate-sg.byteintlapi.com:443 [socks >> proxy]
2026/08/09 09:13:29.873960 from 127.0.0.1:16386 accepted //bytegate-sg.byteintlapi.com:443 [socks >> proxy]
2026/08/09 09:13:29.892133 from 127.0.0.1:8352 accepted //mcs.zijieapi.com:443 [socks -> direct]
2026/08/09 09:13:30.381971 from tcp:127.0.0.1:8363 accepted tcp:icube-api-sg.tiktok-row.net:443 [socks >> proxy]
2026/08/09 09:13:32.608000 from 127.0.0.1:8369 accepted //api.trae.cn:443 [socks -> direct]
2026/08/09 09:13:34.696185 from 127.0.0.1:19380 accepted //mcs.zijieapi.com:443 [socks -> direct]
+0800 2026-08-09 09:13:35 ERROR [2416762856 5.5s] connection: open connection to icube-api.bytedance.net:443 using outbound/direct[direct]: dial tcp 10.8.15.208:443: i/o timeout
+0800 2026-08-09 09:13:36 ERROR [3997541637 1m30s] connection: connection download closed: raw-read tcp 192.168.1.254:47596->59.82.122.145:443: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:13:37 ERROR [3380893421 1m32s] connection: connection download closed: raw-read tcp 192.168.1.254:47600->223.109.195.138:443: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:13:38 ERROR [3725701265 1m32s] connection: connection download closed: raw-read tcp 192.168.1.254:47602->140.205.151.6:443: An existing connection was forcibly closed by the remote host.
2026/08/09 09:13:39.198994 from 127.0.0.1:19389 accepted //skydrive.wns.windows.com:443 [socks >> proxy]
2026/08/09 09:13:41.472266 from tcp:127.0.0.1:19395 accepted tcp:ecs.office.com:443 [socks >> proxy]
+0800 2026-08-09 09:13:41 ERROR [3322977351 1m36s] connection: connection download closed: raw-read tcp 192.168.1.254:47591->140.205.151.6:443: An existing connection was forcibly closed by the remote host.
2026/08/09 09:13:48.945566 from 127.0.0.1:64695 accepted //github.com:443 [socks >> proxy]
2026/08/09 09:13:49.251724 from 127.0.0.1:26939 accepted //github.com:443 [socks >> proxy]
2026/08/09 09:13:49.251724 from 127.0.0.1:58166 accepted //github.com:443 [socks >> proxy]
2026/08/09 09:13:49.252241 from 127.0.0.1:36604 accepted //github.com:443 [socks >> proxy]
+0800 2026-08-09 09:14:10 ERROR [3630517942 5.34s] connection: connection upload closed: raw-read tcp4 172.18.0.1:22375->172.18.0.2:10277: An existing connection was forcibly closed by the remote host.
+0800 2026-08-09 09:14:10 ERROR [2075726310 5.25s] connection: connection upload closed: raw-read tcp4 172.18.0.1:22375->172.18.0.2:10278: An existing connection was forcibly closed by the remote host.
2026/08/09 09:14:18.053429 from 127.0.0.1:22295 accepted //accounts.google.com:443 [socks -> proxy]
2026/08/09 09:14:18.180954 from tcp:127.0.0.1:22299 accepted tcp:99.84.41.99:443 [socks >> proxy]
2026/08/09 09:14:19.151671 from tcp:127.0.0.1:22306 accepted tcp:99.84.41.99:443 [socks >> proxy]
2026/08/09 09:14:32.549711 from 127.0.0.1:17658 accepted //tnc0-aliec2.zijieapi.com:443 [socks -> direct]
2026/08/09 09:14:35.198264 from 127.0.0.1:17663 accepted //api3.goofish.pro:443 [socks -> direct]
2026/08/09 09:14:38.424088 from 127.0.0.1:42654 accepted //github.com:443 [socks >> proxy]
2026/08/09 09:14:39.032087 from 127.0.0.1:43206 accepted //github.com:443 [socks >> proxy]
2026/08/09 09:14:39.032087 from 127.0.0.1:2508 accepted //github.com:443 [socks >> proxy]
2026/08/09 09:14:39.032087 from 127.0.0.1:54783 accepted //github.com:443 [socks >> proxy]
2026/08/09 09:14:40.344278 from 127.0.0.1:54791 accepted //201572-ipv4fdsmte.gr.global.aa-rt.sharepoint.com:443 [socks >> proxy]
2026/08/09 09:15:00.297831 from 127.0.0.1:32154 accepted //api.github.com:443 [socks >> proxy]
2026/08/09 09:15:11.794481 from 127.0.0.1:44790 accepted //p26-icube-feedback-sign.byteimg.com:443 [socks -> direct]

额外信息

No response

我确认已更新至最新版本

• 是

我确认已查询历史issues

• 是

我确认系统版本是受支持的

• 是

[Such438]

我通过fix-tun-dns.ps1来解决的

代码是

v2rayN TUN DNS fix script

Cause: v2rayN generates sing-box config with "172.18.0.1/30 -> reject drop"

placed BEFORE hijack-dns rule. System DNS (singbox_tun iface) points to

172.18.0.2 (TUN virtual IP) -> every DNS query to it is dropped -> DNS dead.

Trigger: v2rayN sometimes restores iface DNS to 172.18.0.2 when it restarts

the core (node switch / TUN toggle / settings change). Run after each core restart.

Usage (admin): powershell -ExecutionPolicy Bypass -File fix-tun-dns.ps1

$tunDns = (Get-DnsClientServerAddress -InterfaceAlias "singbox_tun" -ErrorAction SilentlyContinue | Where-Object AddressFamily -eq 2).ServerAddresses
if ($tunDns -contains '172.18.0.2') {
Set-DnsClientServerAddress -InterfaceAlias "singbox_tun" -ServerAddresses @('223.5.5.5','119.29.29.29')
Write-Host "[OK] singbox_tun DNS changed from 172.18.0.2 to 223.5.5.5 / 119.29.29.29" -ForegroundColor Green
} else {
Write-Host "[OK] singbox_tun DNS already OK: $tunDns" -ForegroundColor Green
}

Write-Host ""
Write-Host "--- verify ---"
$g = nslookup www.google.com 2>&1 | Out-String
$b = nslookup www.baidu.com 2>&1 | Out-String

note: sing-box fakeip responses have no "Non-authoritative" line, so just

check for timeout (success = any answer came back)

if ($g -notmatch 'timed out' -and $b -notmatch 'timed out') {
Write-Host "[OK] DNS resolution works (google + baidu)" -ForegroundColor Green
} else {
Write-Host "[FAIL] DNS still broken - check singbox_tun DNS and v2rayN state" -ForegroundColor Red
Write-Host $g
Write-Host $b
}

[Caesar-Victory]

你对issue的理解能力几乎为零。
软件日志不说了，你以为搁这儿聊天呢？懂不懂什么叫做必填项，什么叫做选填。
版本号就在日志（V7.24.6 - X64）里面，你标题也懒得填。
AI 的结论拿来就用，你自己测过吗？
ps1是powershell的代码块，你用的明白吗？高亮都没正确显示，好几行都是H1标题级别的文字和加粗。
几百行日志不会精简，这 shit 一样的日志，你自己会看吗？还是让 maintainer 在垃圾堆里面淘金。
上下文缺失，右下角不显示WiFi图标就应该显示有线网络。连接WiFi同时使用有线网络，还是显示有线网络的图标，不停留在WiFi图标应该显示什么呢？预期效果都没讲清楚。
你每个版本都测过了吗？就在这说。

无论是否打开 v2rayN, 浏览器打开该页面都是 Page not found
无论是否打开 v2rayN, 用以下命令测试，都显示 404.

PS C:\Users\41999> try { (Invoke-WebRequest -Uri "http://www.msftncsi.com/" -UseBasicParsing).StatusCode } catch { $_.Exception.Response.StatusCode.value__ }
404
PS C:\Users\41999> try { (Invoke-WebRequest -Uri "http://www.msftncsi.com/" -UseBasicParsing).StatusCode } catch { $_.Exception.Response.StatusCode.value__ }
404

综上所述，我认为和v2rayN 没关系。

[Such438]

@Caesar-Victory 我的本念是右下角网络图标依旧停留在wifi，去一个重装后的系统，不经任何操作去修改v2rayN的任何操作都可能会导致tun网卡的ipv4无internet访问权限。理解？标题都是复制的，什么都没改，你觉得我复制的时候理解没？当时很毛躁，删除整个文件夹重新配置还是继续一改到底？删了，改完不同的设置，依旧可能导致问题复发；不删，claude可以基于源文件进行修改，但是github更新也会覆盖。最后我选择了后者，一改到底。

你的立场很正，但你跑题了！

@liuclare 感谢！非常感谢，这个方法我会基于Claude和本身微末的理解进行修改和应用的。不得不说，这个v2rayN挺好，这远远不足。
这个v2rayN的设置部分，我是一个一个选项查，一个一个搜，参数，路由，dns我都在研究。说真的，这个tun模式真的勾起了我很大的兴趣。
这个好比一个初始mcp，这个mcp还需优化。

[Such438]

@liuclare 不知道您对这个dns规则有没有更完整的编辑

[liuclare]

#9935 改的是 v2rayN 生成配置的代码，把防回环规则的匹配范围从 172.18.0.1/30 收窄到 172.18.0.1/32。合并后 172.18.0.2 不在 drop 范围内，DNS 规则不需要改，也不会被重新生成覆盖。

[Such438]

@liuclare 请问有联系方式吗？

[Such438]

@liuclare 后续找您了解

[Such438]

@liuclare 精确命中:防回环 drop 规则只在 7.24.6 存在,7.24.0 及之前全无!

[Such438]

@liuclare

• 08-05 Fix infinite TUN routing loop on traffic to the TUN's own addresses #9897 "Fix infinite TUN routing loop on traffic to the TUN's own addresses" → 引入防回环 drop 规则(bug 来源)
• 08-10(今天!) Narrow the TUN self-address drop rule to single addresses #9935 "Narrow the TUN self-address drop rule to single addresses" → 官方自己修了,把 /30 收窄到单地址——正是记忆里手改 /32 的方案!官方后来也用了同样的修法