This process collects information from your Pi-hole, and optionally uploads it to a unique and random directory on tricorder.pi-hole.net. The intent of this script is to allow users to self-diagnose their installations. This is accomplished by running tests against our software and providing the user with links to FAQ articles when a problem is detected. Since we are a small team and Pi-hole has been growing steadily, it is our hope that this will help us spend more time on development. NOTE: All log files auto-delete after 48 hours and ONLY the Pi-hole developers can access your data via the given token. We have taken these extra steps to secure your data and will work to further reduce any personal information gathered. *** [ INITIALIZING ] [i] 2019-03-21:20:26:13 debug log has been initialized. *** [ INITIALIZING ] Sourcing setup variables [i] Sourcing /etc/pihole/setupVars.conf... *** [ DIAGNOSING ]: Core version [i] Core: v4.2.2 (https://discourse.pi-hole.net/t/how-do-i-update-pi-hole/249) [i] Branch: master [i] Commit: v4.2.2-0-gba1e94d *** [ DIAGNOSING ]: Web version [i] Web: v4.2 (https://discourse.pi-hole.net/t/how-do-i-update-pi-hole/249) [i] Branch: master [i] Commit: v4.2-0-g347994db *** [ DIAGNOSING ]: FTL version [✓] FTL: v4.2.3 (https://discourse.pi-hole.net/t/how-do-i-update-pi-hole/249) *** [ DIAGNOSING ]: lighttpd version [i] 1.4.45 *** [ DIAGNOSING ]: php version [i] 7.0.33 *** [ DIAGNOSING ]: Operating system [✓] Raspbian GNU/Linux 9 (stretch) *** [ DIAGNOSING ]: SELinux [i] SELinux not detected *** [ DIAGNOSING ]: Processor [✓] armv6l *** [ DIAGNOSING ]: Networking [✓] IPv4 address(es) bound to the wlan0 interface: 192.168.1.253/24 matches the IP found in /etc/pihole/setupVars.conf [✓] IPv6 address(es) bound to the wlan0 interface: fe80::de34:2bbe:1ac4:f56a does not match the IP found in /etc/pihole/setupVars.conf (https://discourse.pi-hole.net/t/use-ipv6-ula-addresses-for-pi-hole/2127) ^ Please note that you may have more than one IP address listed. As long as one of them is green, and it matches what is in /etc/pihole/setupVars.conf, there is no need for concern. The link to the FAQ is for an issue that sometimes occurs when the IPv6 address changes, which is why we check for it. [i] Default IPv4 gateway: 192.168.1.254 * Pinging 192.168.1.254... [✓] Gateway responded. *** [ DIAGNOSING ]: Ports in use 127.0.0.1:36167 cloudflare (IPv4) 127.0.0.1:5053 cloudflare (IPv4) *:22 sshd (IPv4) *:22 sshd (IPv6) [*:80] is in use by lighttpd [*:80] is in use by lighttpd [*:53] is in use by pihole-FTL [*:53] is in use by pihole-FTL [127.0.0.1:4711] is in use by pihole-FTL [[::1]:4711] is in use by pihole-FTL *** [ DIAGNOSING ]: Name resolution (IPv4) using a random blocked domain and a known ad-serving domain [✗] Failed to resolve best-porn.biz via localhost (127.0.0.1) [✗] Failed to resolve best-porn.biz via Pi-hole (192.168.1.253) [✓] doubleclick.com is 172.217.164.110 via a remote, public DNS server (8.8.8.8) *** [ DIAGNOSING ]: Pi-hole processes [✓] lighttpd daemon is active [✓] pihole-FTL daemon is active *** [ DIAGNOSING ]: Setup variables DHCP_ACTIVE=true DHCP_START=192.168.1.1 DHCP_END=192.168.1.253 DHCP_ROUTER=192.168.1.254 DHCP_LEASETIME=12 PIHOLE_DOMAIN=local DHCP_IPv6=false DHCP_rapid_commit=false API_EXCLUDE_DOMAINS=www.duckdns.org,api.waqi.info,api.darksky.net,api.spotify.com,www.cointracker.io API_EXCLUDE_CLIENTS= API_QUERY_LOG_SHOW=all API_PRIVACY_MODE=false PIHOLE_INTERFACE=wlan0 IPV4_ADDRESS=192.168.1.253/24 IPV6_ADDRESS= QUERY_LOGGING=true INSTALL_WEB_SERVER=true INSTALL_WEB_INTERFACE=true LIGHTTPD_ENABLED=true DNSMASQ_LISTENING=single PIHOLE_DNS_1=127.0.0.1#5053 DNS_FQDN_REQUIRED=true DNS_BOGUS_PRIV=true DNSSEC=true CONDITIONAL_FORWARDING=false BLOCKING_ENABLED=true *** [ DIAGNOSING ]: Dashboard and block page [✗] Block page X-Header: X-Header does not match or could not be retrieved. HTTP/1.1 200 OK X-Pi-hole: A black hole for Internet advertisements. Content-type: text/html; charset=UTF-8 Date: Fri, 22 Mar 2019 03:29:57 GMT Server: lighttpd/1.4.45 [✓] Web interface X-Header: X-Pi-hole: The Pi-hole Web interface is working! *** [ DIAGNOSING ]: Gravity list -rw-r--r-- 1 root root 28764345 Mar 21 18:51 /etc/pihole/gravity.list -----head of gravity.list------ !inoreader.com ').split( '.split( (isdigit.test(data[i])) -----tail of gravity.list------ }.bind(); }.bind(null); }.bind(w); }.bind(window); *** [ DIAGNOSING ]: contents of /etc/pihole -rw-r--r-- 1 root root 4049 Mar 21 18:46 /etc/pihole/adlists.list https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts https://mirror1.malwaredomains.com/files/justdomains http://sysctl.org/cameleon/hosts https://zeustracker.abuse.ch/blocklist.php?download=domainblocklist https://s3.amazonaws.com/lists.disconnect.me/simple_tracking.txt https://s3.amazonaws.com/lists.disconnect.me/simple_ad.txt https://hosts-file.net/ad_servers.txt https://hosts-file.net/grm.txt https://reddestdream.github.io/Projects/MinimalHosts/etc/MinimalHostsBlocker/minimalhosts https://raw.githubusercontent.com/StevenBlack/hosts/master/data/KADhosts/hosts https://raw.githubusercontent.com/StevenBlack/hosts/master/data/add.Spam/hosts https://v.firebog.net/hosts/static/w3kbl.txt https://adaway.org/hosts.txt https://v.firebog.net/hosts/AdguardDNS.txt https://raw.githubusercontent.com/anudeepND/blacklist/master/adservers.txt https://s3.amazonaws.com/lists.disconnect.me/simple_ad.txt https://hosts-file.net/ad_servers.txt https://v.firebog.net/hosts/Easylist.txt https://pgl.yoyo.org/adservers/serverlist.php?hostformat=hosts;showintro=0 https://raw.githubusercontent.com/StevenBlack/hosts/master/data/UncheckyAds/hosts https://www.squidblacklist.org/downloads/dg-ads.acl https://v.firebog.net/hosts/Easyprivacy.txt https://v.firebog.net/hosts/Prigent-Ads.txt https://gitlab.com/quidsup/notrack-blocklists/raw/master/notrack-blocklist.txt https://raw.githubusercontent.com/StevenBlack/hosts/master/data/add.2o7Net/hosts https://raw.githubusercontent.com/crazy-max/WindowsSpyBlocker/master/data/hosts/spy.txt https://s3.amazonaws.com/lists.disconnect.me/simple_malvertising.txt https://mirror1.malwaredomains.com/files/justdomains https://hosts-file.net/exp.txt https://hosts-file.net/emd.txt https://hosts-file.net/psh.txt https://mirror.cedia.org.ec/malwaredomains/immortal_domains.txt https://www.malwaredomainlist.com/hostslist/hosts.txt https://bitbucket.org/ethanr/dns-blacklists/raw/8575c9f96e5b4a1308f2f12394abd86d0927a4a0/bad_lists/Mandiant_APT1_Report_Appendix_D.txt https://v.firebog.net/hosts/Prigent-Malware.txt https://v.firebog.net/hosts/Prigent-Phishing.txt https://gitlab.com/quidsup/notrack-blocklists/raw/master/notrack-malware.txt https://ransomwaretracker.abuse.ch/downloads/RW_DOMBL.txt https://ransomwaretracker.abuse.ch/downloads/CW_C2_DOMBL.txt https://ransomwaretracker.abuse.ch/downloads/LY_C2_DOMBL.txt https://ransomwaretracker.abuse.ch/downloads/TC_C2_DOMBL.txt https://ransomwaretracker.abuse.ch/downloads/TL_C2_DOMBL.txt https://zeustracker.abuse.ch/blocklist.php?download=domainblocklist https://v.firebog.net/hosts/Shalla-mal.txt https://raw.githubusercontent.com/StevenBlack/hosts/master/data/add.Risk/hosts https://www.squidblacklist.org/downloads/dg-malicious.acl https://zerodot1.gitlab.io/CoinBlockerLists/hosts https://tspprs.com/dl/fakenews https://tspprs.com/dl/scam https://tspprs.com/dl/ransomware https://tspprs.com/dl/malware https://tspprs.com/dl/spam https://tspprs.com/dl/phishing https://raw.githubusercontent.com/uBlockOrigin/uAssets/master/filters/annoyances.txt https://raw.githubusercontent.com/uBlockOrigin/uAssets/master/filters/badware.txt https://raw.githubusercontent.com/uBlockOrigin/uAssets/master/filters/experimental.txt https://raw.githubusercontent.com/uBlockOrigin/uAssets/master/filters/filters.txt https://raw.githubusercontent.com/uBlockOrigin/uAssets/master/filters/privacy.txt https://raw.githubusercontent.com/uBlockOrigin/uAssets/master/filters/resource-abuse.txt https://raw.githubusercontent.com/uBlockOrigin/uAssets/master/filters/resources.txt https://raw.githubusercontent.com/uBlockOrigin/uAssets/master/filters/unbreak.txt file:///etc/pihole/youtube.hosts https://www.github.developerdan.com/hosts/lists/amp-hosts-extended.txt -rw-r--r-- 1 root root 720 Mar 21 19:35 /etc/pihole/blacklist.txt grs.zing.siriusxm.com www.example.com p.ads.roku.com tyler.logs.roku.com giga.logs.roku.com cooper.logs.roku.com cloudservices.roku.com assets.sr.roku.com prod.mobile.roku.com wwwimg.roku.com amoeba.web.roku.com austin.logs.roku.com griffin.logs.roku.com liberty.logs.roku.com littlefield.logs.roku.com paolo.logs.roku.com scribe.logs.roku.com sugarland.logs.roku.com victoria.logs.roku.com windsor.logs.roku.com msmetrics.ws.sonos.com coin-hive.com www.coin-hive.com tuner.pandora.com radioyamaha.vtuner.com ntp-g7g.amazon.com kindle-time.amazon.com d3p8zr0ffa9t17.cloudfront.net spectrum.s3.amazonaws.com dc17.airtiescloud.com time1.google.com api-global.netflix.com nrdp.nccp.netflix.com occ-0-2218-2219.1.nflxso.net -rw-r--r-- 1 root root 103 Mar 21 18:51 /etc/pihole/local.list 192.168.1.253 homepi.local 192.168.1.253 pi.hole 10.8.0.2 prateekiphone.vpn 10.8.0.3 namrataiphone.vpn -rw-r--r-- 1 root root 234 Mar 20 21:36 /etc/pihole/logrotate /var/log/pihole.log { su root root daily copytruncate rotate 5 compress delaycompress notifempty nomail } /var/log/pihole-FTL.log { su root root weekly copytruncate rotate 3 compress delaycompress notifempty nomail } -rw-r--r-- 1 root root 3934 Mar 14 17:32 /etc/pihole/whitelist.txt 0.client-channel.google.com 2.android.pool.ntp.org android.clients.google.com appsbackup-pa.clients6.google.com appsbackup-pa.googleapis.com clients1.google.com clients2.google.com clients3.google.com clients4.google.com clients5.google.com clients6.google.com cse.google.com fonts.gstatic.com geo3.ggpht.com googleapis.com gstatic.com www.googleapis.com yt3.ggpht.com dl.dropbox.com dl.dropboxusercontent.com ns1.dropbox.com ns2.dropbox.com app-api.ted.com hls.ted.com tedcdn.com akamaihd.net akamaitechnologies.com akamaized.net aspnetcdn.com cdn.embedly.com cdn.optimizely.com cdn2.optimizely.com cdn3.optimizely.com cdnjs.cloudflare.com ec-ns.sascdn.com ssl.p.jwpcdn.com widget-cdn.rpxnow.com t.co youtu.be 1drv.com c.s-microsoft.com ctldl.windowsupdate.com displaycatalog.mp.microsoft.com dl.delivery.mp.microsoft.com dns.msftncsi.com geo-prod.do.dsp.mp.microsoft.com i.s-microsoft.com microsoft.com msftncsi.com onedrive.live.com support.microsoft.com win10.ipv6.microsoft.com www.msftncsi.com attestation.xboxlive.com cert.mgt.xboxlive.com clientconfig.passport.net def-vef.xboxlive.com device.auth.xboxlive.com eds.xboxlive.com help.ui.xboxlive.com licensing.xboxlive.com notify.xboxlive.com title.auth.xboxlive.com title.mgt.xboxlive.com www.xboxlive.com xbox.ipv6.microsoft.com xboxexperiencesprod.experimentation.xboxlive.com xflight.xboxlive.com xkms.xboxlive.com xsts.auth.xboxlive.com keystone.mwbsys.com app.plex.tv cpms.spop10.ams.plex.bz cpms35.spop10.ams.plex.bz dashboard.plex.tv meta-db-worker02.pop.ric.plex.bz meta.plex.bz meta.plex.tv my.plexapp.com nine.plugins.plexapp.com node.plexapp.com o1.email.plex.tv o2.sg0.plex.tv plex.tv proxy.plex.bz proxy.plex.tv proxy02.pop.ord.plex.bz pubsub.plex.bz pubsub.plex.tv staging.plex.tv status.plex.tv tvdb2.plex.tv tvthemes.plexapp.com cdn.cloudflare.net www.plex.tv www.dataplicity.com dataplicity.com dynupdate.no-ip.com no-ip.com www.no-ip.com g.live.com live.com login.live.com login.microsoftonline.com microsoftonline.com office.com office.net office365.com officeclient.microsoft.com outlook.office365.com products.office.com s.gateway.messenger.live.com i.ytimg.com i1.ytimg.com manifest.googlevideo.com redirector.googlevideo.com s.youtube.com s2.youtube.com s.ytimg.com video-stats.l.google.com www.youtube-nocookie.com youtube-nocookie.com youtube.com apt.sonarr.tv download.sonarr.tv forums.sonarr.tv services.sonarr.tv skyhook.sonarr.tv ui.skype.com apps.skype.com pricelist.skype.com skype.com www.icloud.com ax.phobos.apple.com.edgesuite.net icloud.com appleid.apple.com ocsp.apple.com wordpress.com wp.com alluremedia.com.au api.ipify.org bing.com brightcove.net secure.brightcove.com bufferapp.com crisp.chat d2c8v52ll5s99u.cloudfront.net d2gatte9o95jao.cloudfront.net display.ugc.bazaarvoice.com drift.com driftt.com filament.io github.com github.io gravatar.com imagesak.secureserver.net imgix.net imgs.xkcd.com intercom.io j.mp jquery.com jsdelivr.net lastfm-img2.akamaized.net linkedin.com login.aliexpress.com m.hotmail.com pinterest.com placehold.it placeholdit.imgix.net players.brightcove.net raw.githubusercontent.com reddit.com s.marketwatch.com s.shopify.com s3.amazonaws.com sa.symcb.com secure.surveymonkey.com sharepoint.com spclient.wg.spotify.com surveymonkey.com tawk.to themoviedb.com thetvdb.com twimg.com twitter.com unsplash.com v.shopify.com vimeo.com wikipedia.org ws.audioscrobbler.com www.solaredge.com www.twitter.com yahoo.com delivery.vidible.tv img.vidible.tv videos.vidible.tv edge.api.brightcove.com cdn.vidible.tv outlook.live.com tinyurl.com s1.wp.com nexusrules.officeapps.live.com amazonaws.com giphy.com linuxtracker.org www.linuxtracker.org om.cbsi.com dev.virtualearth.net ecn.dev.virtualearth.net t0.ssl.ak.dynamic.tiles.virtualearth.net t0.ssl.ak.tiles.virtualearth.net secure.avangate.com www.synology.com synology.com instantmessaging-pa.googleapis.com feeds.feedburner.com openload.co boards.greenhouse.io *** [ DIAGNOSING ]: contents of /etc/dnsmasq.d -rw-r--r-- 1 root root 1793 Mar 21 20:00 /etc/dnsmasq.d/01-pihole.conf addn-hosts=/etc/pihole/gravity.list addn-hosts=/etc/pihole/black.list addn-hosts=/etc/pihole/local.list localise-queries no-resolv cache-size=10000 log-queries log-facility=/var/log/pihole.log local-ttl=2 log-async dhcp-name-match=set:wpad-ignore,wpad dhcp-ignore-names=tag:wpad-ignore server=127.0.0.1 domain-needed bogus-priv dnssec trust-anchor=.,19036,8,2,49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5 trust-anchor=.,20326,8,2,E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D interface=wlan0 -rw-r--r-- 1 root root 485 Mar 20 21:37 /etc/dnsmasq.d/02-pihole-dhcp.conf dhcp-authoritative dhcp-range=192.168.1.1,192.168.1.253,12h dhcp-option=option:router,192.168.1.254 dhcp-leasefile=/etc/pihole/dhcp.leases domain=local *** [ DIAGNOSING ]: contents of /etc/lighttpd -rw-r--r-- 1 root root 3102 Mar 20 21:36 /etc/lighttpd/lighttpd.conf server.modules = ( "mod_access", "mod_accesslog", "mod_auth", "mod_expire", "mod_compress", "mod_redirect", "mod_setenv", "mod_rewrite" ) server.document-root = "/var/www/html" server.error-handler-404 = "pihole/index.php" server.upload-dirs = ( "/var/cache/lighttpd/uploads" ) server.errorlog = "/var/log/lighttpd/error.log" server.pid-file = "/var/run/lighttpd.pid" server.username = "www-data" server.groupname = "www-data" server.port = 80 accesslog.filename = "/var/log/lighttpd/access.log" accesslog.format = "%{%s}t|%V|%r|%s|%b" index-file.names = ( "index.php", "index.html", "index.lighttpd.html" ) url.access-deny = ( "~", ".inc", ".md", ".yml", ".ini" ) static-file.exclude-extensions = ( ".php", ".pl", ".fcgi" ) compress.cache-dir = "/var/cache/lighttpd/compress/" compress.filetype = ( "application/javascript", "text/css", "text/html", "text/plain" ) include_shell "/usr/share/lighttpd/use-ipv6.pl " + server.port include_shell "/usr/share/lighttpd/create-mime.assign.pl" include_shell "find /etc/lighttpd/conf-enabled -name '*.conf' -a ! -name 'letsencrypt.conf' -printf 'include \"%p\" ' 2>/dev/null" $HTTP["url"] =~ "^/admin/" { setenv.add-response-header = ( "X-Pi-hole" => "The Pi-hole Web interface is working!", "X-Frame-Options" => "DENY" ) $HTTP["url"] =~ ".ttf$" { setenv.add-response-header = ( "Access-Control-Allow-Origin" => "*" ) } } $HTTP["url"] =~ "^/admin/\.(.*)" { url.access-deny = ("") } include_shell "cat external.conf 2>/dev/null" *** [ DIAGNOSING ]: contents of /etc/cron.d -rw-r--r-- 1 root root 1704 Mar 20 21:36 /etc/cron.d/pihole 27 3 * * 7 root PATH="$PATH:/usr/local/bin/" pihole updateGravity >/var/log/pihole_updateGravity.log || cat /var/log/pihole_updateGravity.log 00 00 * * * root PATH="$PATH:/usr/local/bin/" pihole flush once quiet @reboot root /usr/sbin/logrotate /etc/pihole/logrotate */10 * * * * root PATH="$PATH:/usr/local/bin/" pihole updatechecker local 46 15 * * * root PATH="$PATH:/usr/local/bin/" pihole updatechecker remote @reboot root PATH="$PATH:/usr/local/bin/" pihole updatechecker remote reboot *** [ DIAGNOSING ]: contents of /var/log/lighttpd -rw-r--r-- 1 www-data www-data 5931 Mar 21 20:30 /var/log/lighttpd/error.log 2019-03-18 06:25:07: (server.c.1534) logfiles cycled UID = 0 PID = 1280 2019-03-20 14:41:05: (server.c.1828) server stopped by UID = 0 PID = 1 2019-03-20 14:41:43: (log.c.217) server started 2019-03-20 15:38:55: (server.c.1828) server stopped by UID = 0 PID = 1 2019-03-20 15:39:49: (log.c.217) server started 2019-03-20 15:40:44: (mod_fastcgi.c.2543) FastCGI-stderr: PHP Notice: Undefined offset: 1 in /var/www/html/admin/scripts/pi-hole/php/update_checker.php on line 57 2019-03-20 15:40:44: (mod_fastcgi.c.2543) FastCGI-stderr: PHP Notice: Undefined offset: 2 in /var/www/html/admin/scripts/pi-hole/php/update_checker.php on line 58 2019-03-20 15:47:38: (mod_fastcgi.c.2543) FastCGI-stderr: PHP Notice: Undefined variable: api in /var/www/html/admin/scripts/pi-hole/php/add.php on line 14 2019-03-20 15:48:55: (mod_fastcgi.c.2543) FastCGI-stderr: PHP Notice: Undefined variable: api in /var/www/html/admin/scripts/pi-hole/php/add.php on line 14 2019-03-20 15:49:58: (server.c.1828) server stopped by UID = 0 PID = 1 2019-03-20 15:50:42: (log.c.217) server started 2019-03-20 15:51:24: (mod_fastcgi.c.2543) FastCGI-stderr: PHP Notice: Undefined offset: 1 in /var/www/html/admin/scripts/pi-hole/php/update_checker.php on line 57 2019-03-20 15:51:24: (mod_fastcgi.c.2543) FastCGI-stderr: PHP Notice: Undefined offset: 2 in /var/www/html/admin/scripts/pi-hole/php/update_checker.php on line 58 2019-03-20 16:39:04: (server.c.1828) server stopped by UID = 0 PID = 1 2019-03-20 16:39:06: (log.c.217) server started 2019-03-20 17:47:53: (server.c.1828) server stopped by UID = 0 PID = 1 2019-03-20 17:48:26: (log.c.217) server started 2019-03-20 17:55:34: (mod_fastcgi.c.2543) FastCGI-stderr: PHP Notice: Undefined variable: api in /var/www/html/admin/scripts/pi-hole/php/add.php on line 14 2019-03-20 17:55:54: (mod_fastcgi.c.2543) FastCGI-stderr: PHP Notice: Undefined variable: api in /var/www/html/admin/scripts/pi-hole/php/add.php on line 14 2019-03-20 20:09:22: (server.c.1828) server stopped by UID = 0 PID = 1 2019-03-20 20:09:24: (log.c.217) server started 2019-03-20 20:41:21: (server.c.1828) server stopped by UID = 0 PID = 1 2019-03-20 20:41:59: (log.c.217) server started 2019-03-20 20:43:09: (mod_fastcgi.c.2543) FastCGI-stderr: PHP Notice: Undefined offset: 2 in /var/www/html/admin/scripts/pi-hole/php/update_checker.php on line 58 2019-03-20 20:48:58: (server.c.1828) server stopped by UID = 0 PID = 1 *** [ DIAGNOSING ]: contents of /var/log -rw-r--r-- 1 pihole pihole 36533 Mar 21 20:26 /var/log/pihole-FTL.log -----head of pihole-FTL.log------ [2019-03-21 07:37:03.532 573] Resizing "/FTL-strings" from 40960 to 45056 [2019-03-21 10:00:00.958 573] Resizing "/FTL-strings" from 45056 to 49152 [2019-03-21 17:00:02.416 573] Resizing "/FTL-strings" from 49152 to 53248 [2019-03-21 18:00:01.075 573] Resizing "/FTL-strings" from 53248 to 57344 [2019-03-21 18:08:26.126 573] Shutting down... [2019-03-21 18:08:26.322 573] Finished final database update [2019-03-21 18:08:26.327 573] ########## FTL terminated after 69640072.0 ms! ########## [2019-03-21 18:08:28.854 16427] Using log file /var/log/pihole-FTL.log [2019-03-21 18:08:28.854 16427] ########## FTL started! ########## [2019-03-21 18:08:28.854 16427] FTL branch: master [2019-03-21 18:08:28.855 16427] FTL version: v4.2.3 [2019-03-21 18:08:28.855 16427] FTL commit: aae487e [2019-03-21 18:08:28.855 16427] FTL date: 2019-02-25 17:18:14 -0800 [2019-03-21 18:08:28.855 16427] FTL user: pihole [2019-03-21 18:08:28.857 16427] Starting config file parsing (/etc/pihole/pihole-FTL.conf) [2019-03-21 18:08:28.857 16427] SOCKET_LISTENING: only local [2019-03-21 18:08:28.857 16427] AAAA_QUERY_ANALYSIS: Show AAAA queries [2019-03-21 18:08:28.858 16427] MAXDBDAYS: max age for stored queries is 365 days [2019-03-21 18:08:28.858 16427] RESOLVE_IPV6: Resolve IPv6 addresses [2019-03-21 18:08:28.858 16427] RESOLVE_IPV4: Resolve IPv4 addresses [2019-03-21 18:08:28.858 16427] DBINTERVAL: saving to DB file every minute [2019-03-21 18:08:28.859 16427] DBFILE: Using /etc/pihole/pihole-FTL.db [2019-03-21 18:08:28.859 16427] MAXLOGAGE: Importing up to 24.0 hours of log data [2019-03-21 18:08:28.859 16427] PRIVACYLEVEL: Set to 0 [2019-03-21 18:08:28.859 16427] IGNORE_LOCALHOST: Show queries from localhost [2019-03-21 18:08:28.860 16427] BLOCKINGMODE: Null IPs for blocked domains [2019-03-21 18:08:28.860 16427] REGEX_DEBUGMODE: Inactive [2019-03-21 18:08:28.860 16427] ANALYZE_ONLY_A_AND_AAAA: Disabled. Analyzing all queries [2019-03-21 18:08:28.860 16427] DBIMPORT: Importing history from database [2019-03-21 18:08:28.861 16427] PIDFILE: Using /var/run/pihole-FTL.pid [2019-03-21 18:08:28.861 16427] PORTFILE: Using /var/run/pihole-FTL.port [2019-03-21 18:08:28.861 16427] SOCKETFILE: Using /var/run/pihole/FTL.sock [2019-03-21 18:08:28.861 16427] WHITELISTFILE: Using /etc/pihole/whitelist.txt [2019-03-21 18:08:28.862 16427] BLACKLISTFILE: Using /etc/pihole/black.list [2019-03-21 18:08:28.862 16427] GRAVITYFILE: Using /etc/pihole/gravity.list -----tail of pihole-FTL.log------ [2019-03-21 20:12:33.590 592] Resizing "/FTL-queries" from 229376 to 458752 [2019-03-21 20:12:33.837 592] Resizing "/FTL-queries" from 458752 to 688128 [2019-03-21 20:12:33.971 592] Resizing "/FTL-queries" from 688128 to 917504 [2019-03-21 20:12:34.042 592] Resizing "/FTL-strings" from 8192 to 12288 [2019-03-21 20:12:34.100 592] Resizing "/FTL-strings" from 12288 to 16384 [2019-03-21 20:12:34.110 592] Resizing "/FTL-queries" from 917504 to 1146880 [2019-03-21 20:12:34.207 592] Resizing "/FTL-queries" from 1146880 to 1376256 [2019-03-21 20:12:34.254 592] Resizing "/FTL-strings" from 16384 to 20480 [2019-03-21 20:12:34.365 592] Resizing "/FTL-queries" from 1376256 to 1605632 [2019-03-21 20:12:34.372 592] Resizing "/FTL-strings" from 20480 to 24576 [2019-03-21 20:12:34.483 592] Resizing "/FTL-strings" from 24576 to 28672 [2019-03-21 20:12:34.547 592] Resizing "/FTL-queries" from 1605632 to 1835008 [2019-03-21 20:12:34.769 592] Resizing "/FTL-queries" from 1835008 to 2064384 [2019-03-21 20:12:34.817 592] Imported 33882 queries from the long-term database [2019-03-21 20:12:34.819 592] -> Total DNS queries: 33882 [2019-03-21 20:12:34.819 592] -> Cached DNS queries: 14360 [2019-03-21 20:12:34.819 592] -> Forwarded DNS queries: 16526 [2019-03-21 20:12:34.820 592] -> Exactly blocked DNS queries: 2967 [2019-03-21 20:12:34.820 592] -> Unknown DNS queries: 29 [2019-03-21 20:12:34.820 592] -> Unique domains: 1139 [2019-03-21 20:12:34.820 592] -> Unique clients: 27 [2019-03-21 20:12:34.820 592] -> Known forward destinations: 1 [2019-03-21 20:12:34.821 592] Successfully accessed setupVars.conf [2019-03-21 20:12:34.871 601] PID of FTL process: 601 [2019-03-21 20:12:34.872 601] Listening on port 4711 for incoming IPv4 telnet connections [2019-03-21 20:12:34.873 601] Listening on port 4711 for incoming IPv6 telnet connections [2019-03-21 20:12:34.874 601] Listening on Unix socket [2019-03-21 20:12:34.901 601] Compiled 21 Regex filters and 218 whitelisted domains in 10.4 msec (0 errors) [2019-03-21 20:12:34.905 601] /etc/pihole/black.list: parsed 0 domains (took 0.3 ms) [2019-03-21 20:12:34.907 601] /etc/pihole/gravity.list: parsed 0 domains (took 0.3 ms) [2019-03-21 20:23:40.350 601] Resizing "/FTL-strings" from 28672 to 32768 [2019-03-21 20:25:02.246 601] Resizing "/FTL-queries" from 2064384 to 2293760 [2019-03-21 20:25:18.893 601] Compiled 21 Regex filters and 218 whitelisted domains in 4.0 msec (0 errors) [2019-03-21 20:25:18.901 601] /etc/pihole/black.list: parsed 34 domains (took 0.6 ms) [2019-03-21 20:26:16.669 601] /etc/pihole/gravity.list: parsed 1290031 domains (took 57766.7 ms) *** [ DIAGNOSING ]: contents of /dev/shm -rw------- 1 pihole pihole 2621440 Mar 21 20:12 /dev/shm/FTL-clients -rw------- 1 pihole pihole 108 Mar 21 20:12 /dev/shm/FTL-counters -rw------- 1 pihole pihole 131072 Mar 21 20:20 /dev/shm/FTL-domains -rw------- 1 pihole pihole 163840 Mar 21 20:12 /dev/shm/FTL-forwarded -rw------- 1 pihole pihole 28 Mar 21 20:12 /dev/shm/FTL-lock -rw------- 1 pihole pihole 8192 Mar 21 20:12 /dev/shm/FTL-overTime -rw------- 1 pihole pihole 2293760 Mar 21 20:30 /dev/shm/FTL-queries -rw------- 1 pihole pihole 12 Mar 21 20:12 /dev/shm/FTL-settings -rw------- 1 pihole pihole 32768 Mar 21 20:23 /dev/shm/FTL-strings *** [ DIAGNOSING ]: Locale LANG=en_GB.UTF-8 *** [ DIAGNOSING ]: Pi-hole log -rw-r--r-- 1 pihole pihole 7320483 Mar 21 20:31 /var/log/pihole.log -----head of pihole.log------ Mar 21 00:00:11 dnsmasq[573]: query[A] home.personalcapital.com from 127.0.0.1 Mar 21 00:00:11 dnsmasq[573]: forwarded home.personalcapital.com to 127.0.0.1 Mar 21 00:00:11 dnsmasq[573]: query[AAAA] home.personalcapital.com from 127.0.0.1 Mar 21 00:00:11 dnsmasq[573]: forwarded home.personalcapital.com to 127.0.0.1 Mar 21 00:00:11 dnsmasq[573]: reply home.personalcapital.com is Mar 21 00:00:11 dnsmasq[573]: reply home.personalcapital.com.cdn.cloudflare.net is 104.16.204.137 Mar 21 00:00:11 dnsmasq[573]: reply home.personalcapital.com.cdn.cloudflare.net is 104.16.205.137 Mar 21 00:00:11 dnsmasq[573]: reply home.personalcapital.com is Mar 21 00:00:11 dnsmasq[573]: reply home.personalcapital.com.cdn.cloudflare.net is NODATA-IPv6 Mar 21 00:00:15 dnsmasq[573]: query[A] api.waqi.info from 192.168.1.134 Mar 21 00:00:15 dnsmasq[573]: cached api.waqi.info is Mar 21 00:00:15 dnsmasq[573]: cached jp1n.waqi.info is 139.162.71.178 Mar 21 00:00:15 dnsmasq[573]: query[AAAA] api.waqi.info from 192.168.1.134 Mar 21 00:00:15 dnsmasq[573]: cached api.waqi.info is Mar 21 00:00:15 dnsmasq[573]: cached jp1n.waqi.info is NODATA-IPv6 Mar 21 00:00:16 dnsmasq[573]: query[A] api.spotify.com from 192.168.1.134 Mar 21 00:00:16 dnsmasq[573]: cached api.spotify.com is Mar 21 00:00:16 dnsmasq[573]: cached wg.spotify.com is 35.186.224.53 Mar 21 00:00:16 dnsmasq[573]: query[AAAA] api.spotify.com from 192.168.1.134 Mar 21 00:00:16 dnsmasq[573]: cached api.spotify.com is