Sniffer breaks the requests

[devopg]

Operating system

Linux

System version

ubuntu 24.04

Installation type

Original sing-box Command Line

If you are using a graphical client, please provide the version of the client.

No response

Version

In the version sing-box-1.10.2-linux-amd64.tar.gz it works correctly, 
but this issue occurs on ARM
sing-box-1.10.2-linux-armv7.tar.gz

./sing-box version
sing-box version 1.10.2

Environment: go1.23.3 linux/arm
Tags: with_gvisor,with_quic,with_dhcp,with_wireguard,with_ech,with_utls,with_reality_server,with_acme,with_clash_api
Revision: 17019f172910cb32bc56826602a376874c1b9f7f
CGO: disabled

Description

Enabling the sniffer breaks the request for this site (media.vkplay.ru), even though the sniff_override_destination option is disabled.
It doesn't matter what DNS settings you use or which country you make the request from; only enabling or disabling the sniffer makes a difference.

Break request. No response from server:

  "sniff": true,
  "sniff_override_destination": false,

Disabling the sniffer, the response is received instantly, and the server replies:

  "sniff": false,
  "sniff_override_destination": false,

 "inbounds": [
    {
      "auto_route": true,
      "domain_strategy": "",
      "endpoint_independent_nat": true,
      "address": "172.19.0.1/28",
      "interface_name": "mytun",
      "mtu": 9000,
      "sniff": true,
      "sniff_override_destination": false,
      "stack": "gvisor",
      "strict_route": false,
      "tag": "tun-in",
      "type": "tun"
    }
  ],

Reproduction

try add tunel with "sniff": false and make request
curl -I -v --trace - media.vkplay.ru
will all ok

make request with "sniff": true,
You get a timeout from the server.

Logs

no errors in logs
but after N seconds\minute log about timeout.

ERROR[3199] [1388700913 5.1s] inbound/tun[tun-in]: dial tcp 5.61.236.163:443: i/o timeout

Supporter

• I am a sponsor

Integrity requirements

• I confirm that I have read the documentation, understand the meaning of all the configuration items I wrote, and did not pile up seemingly useful options or default values.
• I confirm that I have provided the server and client configuration files and process that can be reproduced locally, instead of a complicated client configuration file that has been stripped of sensitive data.
• I confirm that I have provided the simplest configuration that can be used to reproduce the error I reported, instead of depending on remote servers, TUN, graphical interface clients, or other closed-source software.
• I confirm that I have provided the complete configuration files and logs, rather than just providing parts I think are useful out of confidence in my own intelligence.

[dyhkwong]

Unable to reproduce. Always 301.

[devopg]

@dyhkwong
oh
its not problem sing-box-1.10.2-linux-amd64.tar.gz
its problem sing-box-1.10.2-linux-armv7.tar.gz