# Hide domains / host from stats

**URL:** <https://discourse.pi-hole.net/t/hide-domains-host-from-stats/13008>\
**Category:** General\
**Created:** [September 19, 2018, 6:17pm UTC](https://discourse.pi-hole.net/t/hide-domains-host-from-stats/13008 "2018-09-19T18:17:42Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![Valiceemo](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/valiceemo/32/2825_2.png) [@Valiceemo](https://discourse.pi-hole.net/u/Valiceemo)\
**Post date:** [September 19, 2018, 6:17pm UTC](https://discourse.pi-hole.net/t/hide-domains-host-from-stats/13008/1 "2018-09-19T18:17:42Z")

</div>

I run pivpn on the same pi as pi-hole, so have a cron job running to ensure my public IP is tied to the static domain name.  
This is showing in the stats even though it's added to the exclude list in settings?  
And is there a way to have it display `pi-hole`, rateher than`localhost`  
It actually does say `pi-hole` in the states? What is that?

![IMG_20180919_190737](https://discourse.pi-hole.net/uploads/default/original/2X/4/4ff7b53d8487245c34a5e30e75b642a52e0d0844.jpeg)

 ![IMG_20180919_190817](https://discourse.pi-hole.net/uploads/default/original/2X/8/83c5af0cd6d5a2c367b632f1463c3f528200f34c.jpeg)  
 ![Screenshot_20180919-190604](https://discourse.pi-hole.net/uploads/default/original/2X/6/641861cda972594eab96cf8e7a737bb404002fd0.png)  
 ![IMG_20180919_191947](https://discourse.pi-hole.net/uploads/default/original/2X/9/9622ef23ac5592848300eb5808dfcb9018e9218e.jpeg)

---

<div class="post-metadata">

**Author:** ![RamSet](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/ramset/32/3497_2.png) [@RamSet](https://discourse.pi-hole.net/u/RamSet)\
**Post date:** [September 19, 2018, 6:43pm UTC](https://discourse.pi-hole.net/t/hide-domains-host-from-stats/13008/2 "2018-09-19T18:43:55Z")

</div>

> [@Valiceemo](#):
>
> And is there a way to have it display `pi-hole` , rateher than `localhost`

There you can. Here is how you would do it:

> [@Display real name instead of 'localhost'?](https://discourse.pi-hole.net/t/display-real-name-instead-of-localhost/12950/2):
>
> You need to edit /etc/hosts and add 127.0.0.1 theNameYouWant A system reboot is required for the settings to be reflected in the /admin/ interface.

> [@Valiceemo](#):
>
> This is showing in the stats even though it’s added to the exclude list in settings?

The option removes it (as it states) from :

![image](https://discourse.pi-hole.net/uploads/default/original/2X/4/4c9d9a82e3cc705a55cb7b9b55757d38970e6f79.png)

 ![image](https://discourse.pi-hole.net/uploads/default/original/2X/e/e0e7debb3e756f83bf72867bad67301974041d20.png)

It does not remove it from the Recent queries (unless you put the source of the request - client - in the top client field, but this will remove ALL queries from that client).

---

<div class="post-metadata">

**Author:** ![Valiceemo](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/valiceemo/32/2825_2.png) [@Valiceemo](https://discourse.pi-hole.net/u/Valiceemo)\
**Post date:** [September 19, 2018, 6:49pm UTC](https://discourse.pi-hole.net/t/hide-domains-host-from-stats/13008/3 "2018-09-19T18:49:22Z")

</div>

Thanks, I had added `localhost` and it's now hidden 🤙

What are your thoughts on why client `localhost` is querying `pi-hole` so frequently?

---

<div class="post-metadata">

**Author:** ![RamSet](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/ramset/32/3497_2.png) [@RamSet](https://discourse.pi-hole.net/u/RamSet)\
**Post date:** [September 19, 2018, 6:54pm UTC](https://discourse.pi-hole.net/t/hide-domains-host-from-stats/13008/4 "2018-09-19T18:54:06Z")

</div>

> [@Valiceemo](#):
>
> What are your thoughts on why client `localhost` is querying `pi-hole` so frequently?

Maybe you are running some stats locally that query `pi-hole` ? Or you left a web browser open on [http://pi-hole](http://pi-hole) ?

---

<div class="post-metadata">

**Author:** ![Valiceemo](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/valiceemo/32/2825_2.png) [@Valiceemo](https://discourse.pi-hole.net/u/Valiceemo)\
**Post date:** [September 19, 2018, 6:57pm UTC](https://discourse.pi-hole.net/t/hide-domains-host-from-stats/13008/5 "2018-09-19T18:57:44Z")

</div>

My Pi-Hole is headless running stretch lite.  
With only Pi-Hole and openvpn (PiVPN) installed?  
It seems to be querying a ntp domain?

 ![SmartSelect_20180919-195649_Samsung%20Internet%20Beta](https://discourse.pi-hole.net/uploads/default/original/2X/9/942815c67f756b37876aad06be44ce85850d3f0d.jpeg)

---

<div class="post-metadata">

**Author:** ![RamSet](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/ramset/32/3497_2.png) [@RamSet](https://discourse.pi-hole.net/u/RamSet)\
**Post date:** [September 19, 2018, 7:00pm UTC](https://discourse.pi-hole.net/t/hide-domains-host-from-stats/13008/6 "2018-09-19T19:00:42Z")

</div>

Correct, that's is a standard behavior.

It's basically the system that queries the NTP servers for, well, time synchronization.

---

<div class="post-metadata">

**Author:** ![Valiceemo](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/valiceemo/32/2825_2.png) [@Valiceemo](https://discourse.pi-hole.net/u/Valiceemo)\
**Post date:** [September 19, 2018, 7:21pm UTC](https://discourse.pi-hole.net/t/hide-domains-host-from-stats/13008/7 "2018-09-19T19:21:56Z")

</div>

Ah ok, so I can add that and duckdns to the exclude list along with the now renamed `pi-hole` client and it'll not shown in top lists?  
Although I'm still unclear why client Pi-Hole is querying domain `pi-hole`

 ![SmartSelect_20180919-202407_Samsung%20Internet%20Beta](https://discourse.pi-hole.net/uploads/default/original/2X/9/9a0ac9ee56bebce6b7e2524a7114619b918f3151.jpeg)

---

<div class="post-metadata">

**Author:** ![RamSet](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/ramset/32/3497_2.png) [@RamSet](https://discourse.pi-hole.net/u/RamSet)\
**Post date:** [September 19, 2018, 7:30pm UTC](https://discourse.pi-hole.net/t/hide-domains-host-from-stats/13008/8 "2018-09-19T19:30:58Z")

</div>

> [@Valiceemo](#):
>
> so I can add that and duckdns to the exclude list along with the now renamed `pi-hole` client and it’ll not shown in top lists?

Yes. However if you add `pi-hole` to the `top-client` it will remove all queries originating from `pi-hole`.

> [@Valiceemo](#):
>
> Although I’m still unclear why client Pi-Hole is querying domain `pi-hole`

The logic behind it is that `something` on `pi-hole` is looking/querying for `pi-hole` (as a domain).

Pi-hole does what it's designed to do, it resolves the query to the IP.

AAAA is an IPV6 request (so that means that something is trying to resolve the IPV6 address of pi-hole).

---

<div class="post-metadata">

**Author:** ![Valiceemo](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/valiceemo/32/2825_2.png) [@Valiceemo](https://discourse.pi-hole.net/u/Valiceemo)\
**Post date:** [September 19, 2018, 7:33pm UTC](https://discourse.pi-hole.net/t/hide-domains-host-from-stats/13008/9 "2018-09-19T19:33:18Z")

</div>

Hmm ok,. Not using ipv6 so I'm more confused now!  
How can i see / debug what is looking for domain `pi-hole` from the client?  
I think the only queries coming from the Pi-Hole itself should be duckdns and the NTP servers so I'm ok with that.

---

<div class="post-metadata">

**Author:** ![RamSet](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/ramset/32/3497_2.png) [@RamSet](https://discourse.pi-hole.net/u/RamSet)\
**Post date:** [September 19, 2018, 7:37pm UTC](https://discourse.pi-hole.net/t/hide-domains-host-from-stats/13008/10 "2018-09-19T19:37:37Z")

</div>

You can use the Tail option from the menu:

 ![image](https://discourse.pi-hole.net/uploads/default/original/2X/e/e0775d144929ec94730db9b058f8343387a7aae3.png)

This will tell you in real-time what queries what 🙂

---

<div class="post-metadata">

**Author:** ![jfb](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/jfb/32/4332_2.png) [@jfb](https://discourse.pi-hole.net/u/jfb)\
**Post date:** [September 19, 2018, 7:38pm UTC](https://discourse.pi-hole.net/t/hide-domains-host-from-stats/13008/11 "2018-09-19T19:38:05Z")

</div>

Your best option may be to put a packet sniffer on the Pi, and see what traffic is coming and going. If you can tie a DNS request to related traffic, you can typically figure out which process on the Pi is making the request. Wireshark works well.

---

<div class="post-metadata">

**Author:** ![Valiceemo](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/valiceemo/32/2825_2.png) [@Valiceemo](https://discourse.pi-hole.net/u/Valiceemo)\
**Post date:** [September 19, 2018, 7:40pm UTC](https://discourse.pi-hole.net/t/hide-domains-host-from-stats/13008/12 "2018-09-19T19:40:22Z")

</div>

Never used a packet sniffer, is that a program to install on the Pi-Hole itself or on a Windows machine and monitor?

---

<div class="post-metadata">

**Author:** ![jfb](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/jfb/32/4332_2.png) [@jfb](https://discourse.pi-hole.net/u/jfb)\
**Post date:** [September 19, 2018, 7:45pm UTC](https://discourse.pi-hole.net/t/hide-domains-host-from-stats/13008/13 "2018-09-19T19:45:07Z")

</div>

You can install Wireshark on the Pi directly. The same software will also run on Windows and Mac, just download the correct version for your OS.

> **[Wireshark • Go Deep | Download](https://www.wireshark.org/download.html)**
>
> Wireshark: The world's most popular network protocol analyzer

---

<div class="post-metadata">

**Author:** ![Valiceemo](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/valiceemo/32/2825_2.png) [@Valiceemo](https://discourse.pi-hole.net/u/Valiceemo)\
**Post date:** [September 19, 2018, 7:48pm UTC](https://discourse.pi-hole.net/t/hide-domains-host-from-stats/13008/14 "2018-09-19T19:48:08Z")

</div>

Nice one thanks  
How easy would it be for me to bork my Pi-Hole, given I've no idea how to use it!?

---

<div class="post-metadata">

**Author:** ![jfb](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/jfb/32/4332_2.png) [@jfb](https://discourse.pi-hole.net/u/jfb)\
**Post date:** [September 19, 2018, 7:51pm UTC](https://discourse.pi-hole.net/t/hide-domains-host-from-stats/13008/15 "2018-09-19T19:51:49Z")

</div>

It would be difficult. Wireshark does not interfere with or change any process, it just monitors and reports network traffic per your configuration, and only when it's running.

---

<div class="post-metadata">

**Author:** ![Valiceemo](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/valiceemo/32/2825_2.png) [@Valiceemo](https://discourse.pi-hole.net/u/Valiceemo)\
**Post date:** [September 19, 2018, 7:52pm UTC](https://discourse.pi-hole.net/t/hide-domains-host-from-stats/13008/16 "2018-09-19T19:52:44Z")

</div>

Great, I'll give it a bash then!  
Thanks for the tip.

Just noticed this is the log....

```auto
Sep 19 20:50:30 dnsmasq[864]: 3034 127.0.0.1/41568 query[AAAA] pi-hole from 127.0.0.1 
Sep 19 20:50:30 dnsmasq[864]: 3034 127.0.0.1/41568 /etc/pihole/local.list pi-hole is fddf:e477:fc89:0:249c:4709:200a:33f8

```

Significant?

And these....?

```auto
Sep 19 20:54:09 dnsmasq-dhcp[864]: DHCPREQUEST(eth0) 192.168.0.100 04:d6:aa:60:92:da Sep 19 20:54:09 dnsmasq-dhcp[864]: DHCPACK(eth0) 192.168.0.100 04:d6:aa:60:92:da rich-phone
Sep 19 20:54:12 dnsmasq-dhcp[864]: DHCPREQUEST(eth0) 192.168.0.100 04:d6:aa:60:92:da 
Sep 19 20:54:12 dnsmasq-dhcp[864]: DHCPACK(eth0) 192.168.0.100 04:d6:aa:60:92:da rich-phone

```

---

<div class="post-metadata">

**Author:** ![jfb](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/jfb/32/4332_2.png) [@jfb](https://discourse.pi-hole.net/u/jfb)\
**Post date:** [September 19, 2018, 7:55pm UTC](https://discourse.pi-hole.net/t/hide-domains-host-from-stats/13008/17 "2018-09-19T19:55:58Z")

</div>

I don't think so. Something on your Pi has requested the domain pi-hole, which was provided from your local list.

What else do you have running on the Pi other than the standard Pi-Hole install? I see pivpn in your first post, and there is a cron job. How often does that job run?

---

<div class="post-metadata">

**Author:** ![Valiceemo](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/valiceemo/32/2825_2.png) [@Valiceemo](https://discourse.pi-hole.net/u/Valiceemo)\
**Post date:** [September 19, 2018, 7:58pm UTC](https://discourse.pi-hole.net/t/hide-domains-host-from-stats/13008/18 "2018-09-19T19:58:13Z")

</div>

Just PiVPN and Pi-Hole.  
Here is the cron

```auto
## DuckDns Updater
*/5 * * * * sudo /etc/duckdns/duck.sh >/dev/null 2>&1

```

---

<div class="post-metadata">

**Author:** ![Valiceemo](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/valiceemo/32/2825_2.png) [@Valiceemo](https://discourse.pi-hole.net/u/Valiceemo)\
**Post date:** [September 20, 2018, 10:40pm UTC](https://discourse.pi-hole.net/t/hide-domains-host-from-stats/13008/19 "2018-09-20T22:40:21Z")

</div>

Little bump for tips on how to diagnose `pi-hole` domain queries...

---

<div class="post-metadata">

**Author:** ![Valiceemo](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/valiceemo/32/2825_2.png) [@Valiceemo](https://discourse.pi-hole.net/u/Valiceemo)\
**Post date:** [September 21, 2018, 2:03pm UTC](https://discourse.pi-hole.net/t/hide-domains-host-from-stats/13008/20 "2018-09-21T14:03:21Z")

</div>

another short update...

I added `IGNORE_LOCALHOST=yes` to `/etc/pihole/pihole-FTL.conf` in the hope it might help.

My install now seems to ignore the pi-hole domain and client, but some other clients now only show IP, rather than the client name?

I think this is something to do with IPV6 as a lot of the requests for the **domain** `pi-hole` are IPV6 (AAAA if I understand correct?)  
I do not use IPV6...I did, but I disabled it...  
I think a `pihole -r` and reconfigure may be needed?

[Next page](https://discourse.pi-hole.net/t/hide-domains-host-from-stats/13008.md?page=2)