content: I never decrypted on the receiving end.  Unencrypted data was sent to me.  Setting your linux distro to socks and using firefox with it will send some unencrypted data. If I wiresharked it I would have gotten the same result.  Notice I used the net module.  That's not processing socks.  It's just the cleartext tcp data.