REFERENCES

SOCKS5 (RFC1928) http://tools.ietf.org/html/rfc1928
CHAOSREADER http://chaosreader.sf.net/

Snort IDS Signatures (EmergingThreats) http://www.emergingthreats.net/index.php/2007/07/16/new-proxy-bot-method-and-sigs/