# How to use \`AAAA\_QUERY\_ANALYSIS \` flag

**URL:** https://discourse.pi-hole.net/t/how-to-use-aaaa-query-analysis-flag/38202
**Category:** Help
**Created:** [September 10, 2020, 6:33am UTC](https://discourse.pi-hole.net/t/how-to-use-aaaa-query-analysis-flag/38202 "2020-09-10T06:33:40Z")
**Posts on this page:** 19
**Page:** 1

<div class="post-metadata">

### Author: ![shykitten55](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/shykitten55/32/18504_2.png) [@shykitten55](https://discourse.pi-hole.net/u/shykitten55)
#### Post date: [September 10, 2020, 6:33am UTC](https://discourse.pi-hole.net/t/how-to-use-aaaa-query-analysis-flag/38202/1 "2020-09-10T06:33:40Z")

</div>

> [@Option to block/not forward all AAAA queries](https://discourse.pi-hole.net/t/option-to-block-not-forward-all-aaaa-queries/34837/8):
>
> What is your setting for `AAAA_QUERY_ANALYSIS`

I was sent here from another thread I have about IPv6 addresses and me not having any IPv6 addresses.

So where is this: `AAAA_QUERY_ANALYSIS` in `settings`?

 ![Screenshot from 2020-09-10 16-33-18](https://discourse.pi-hole.net/uploads/default/original/3X/b/5/b5dd107dcf5edec20ad69659cebb1552be16f7f3.png)

---

<div class="post-metadata">

### Author: ![PromoFaux](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/promofaux/32/1545_2.png) [@PromoFaux](https://discourse.pi-hole.net/u/PromoFaux)
#### Post date: [September 10, 2020, 7:45am UTC](https://discourse.pi-hole.net/t/how-to-use-aaaa-query-analysis-flag/38202/2 "2020-09-10T07:45:11Z")

</div>

It is probably not made clear in this thread, but it is a config setting for `FTL`

> **[Configuration - Pi-hole documentation](https://docs.pi-hole.net/ftldns/configfile/)**

---

<div class="post-metadata">

### Author: ![shykitten55](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/shykitten55/32/18504_2.png) [@shykitten55](https://discourse.pi-hole.net/u/shykitten55)
#### Post date: [September 10, 2020, 9:15am UTC](https://discourse.pi-hole.net/t/how-to-use-aaaa-query-analysis-flag/38202/3 "2020-09-10T09:15:07Z")

</div>

(I should have explained that when I joined I logged in via google - me: lazy. So my username was picked for me. It would have been better had I picked it myself as: village\_idiot.)

Yes, I found that a long way down the track, but this village idiot isn't seeing a clear breakdown of the yes/no option.

> `AAAA_QUERY_ANALYSIS=yes|no`

So I'm guessing it needs to be `no`.

What also hit me a bit was when I opened said file (the .conf file) it was.... one line.

Ok, but that doesn't play nice with me.

I also get it is more work for the people who make PiHole. It isn't I am not happy, but it threw me.

If the options are `yes/no` and there isn't an entry..... How does that work?  
Is `yes` the de-facto for all the lines which aren't in the `.conf` files?

I think/hope it is set now to what it should be to not show those in the stats.

This is what the file is to date:

```auto
sudo cat /etc/pihole/pihole-FTL.conf
PRIVACYLEVEL=0
AAAA_QUERY_ANALASYS=no

```

That was done abut 17:00 local.

I turned the machine off there about and turned it back on on now.

Looking at the graphs, I don't think that is working.

 ![Screenshot from 2020-09-10 19-17-39](https://discourse.pi-hole.net/uploads/default/original/3X/c/e/cec65bedeb3b39118f35a6351a1f66b40519b96f.png)

---

<div class="post-metadata">

### Author: ![PromoFaux](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/promofaux/32/1545_2.png) [@PromoFaux](https://discourse.pi-hole.net/u/PromoFaux)
#### Post date: [September 10, 2020, 9:21am UTC](https://discourse.pi-hole.net/t/how-to-use-aaaa-query-analysis-flag/38202/4 "2020-09-10T09:21:23Z")

</div>

From the docs page:

> Possible settings ( **the option shown first is the default** ):

It's more for succinctness. These are all _optional_ settings, so think of any entries in that files as overrides for the default behaviour of `FTL`

Personally I am not sure what is _supposed_ to happen with that option set to `no`, as I have never used it (I barely even refer to the stats at all, myself). But I am sure somebody will have an answer!

> <https://github.com/pi-hole/FTL/blob/dbd4a696afd35efa5e6c4882c74d9102d9d7d6a2/src/config.c>

---

<div class="post-metadata">

### Author: ![shykitten55](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/shykitten55/32/18504_2.png) [@shykitten55](https://discourse.pi-hole.net/u/shykitten55)
#### Post date: [September 10, 2020, 9:24am UTC](https://discourse.pi-hole.net/t/how-to-use-aaaa-query-analysis-flag/38202/5 "2020-09-10T09:24:53Z")

</div>

Again: Thanks. I am new to this so (alas) I am going to make some stupid mistakes.

(Not at you). I just edited the post and show the result of editing the file and setting it to `no`.

I accept that if I am running an IP(4) network it is going to cause _problems_ with programs when they are told to use IP(6).

But the fact they are showing on the graph after I (hope/think) I set it to not do that is .... confusing.

Not a big deal. It is early days and in the long run I am sure this will be resolved. Just until then any information extracted from the graphs is skewed because of this also included.

---

<div class="post-metadata">

### Author: ![PromoFaux](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/promofaux/32/1545_2.png) [@PromoFaux](https://discourse.pi-hole.net/u/PromoFaux)
#### Post date: [September 10, 2020, 9:30am UTC](https://discourse.pi-hole.net/t/how-to-use-aaaa-query-analysis-flag/38202/6 "2020-09-10T09:30:10Z")

</div>

> [@shykitten55](#):
>
> . I am new to this so (alas) I am going to make some stupid mistakes.

We, all of us, have to start somewhere!

---

<div class="post-metadata">

### Author: ![shykitten55](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/shykitten55/32/18504_2.png) [@shykitten55](https://discourse.pi-hole.net/u/shykitten55)
#### Post date: [September 10, 2020, 9:31am UTC](https://discourse.pi-hole.net/t/how-to-use-aaaa-query-analysis-flag/38202/7 "2020-09-10T09:31:25Z")

</div>

I get that. No problems. It is just interesting all the stuff I am seeing.

---

<div class="post-metadata">

### Author: ![Coro](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/coro/32/15424_2.png) [@Coro](https://discourse.pi-hole.net/u/Coro)
#### Post date: [September 10, 2020, 10:05am UTC](https://discourse.pi-hole.net/t/how-to-use-aaaa-query-analysis-flag/38202/8 "2020-09-10T10:05:49Z")

</div>

> [@shykitten55](#):
>
> `AAAA_QUERY_ANALASYS`

Typo?

---

<div class="post-metadata">

### Author: ![shykitten55](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/shykitten55/32/18504_2.png) [@shykitten55](https://discourse.pi-hole.net/u/shykitten55)
#### Post date: [September 10, 2020, 10:08am UTC](https://discourse.pi-hole.net/t/how-to-use-aaaa-query-analysis-flag/38202/9 "2020-09-10T10:08:21Z")

</div>

Sorry, I'm not seeing one.

---

<div class="post-metadata">

### Author: ![Coro](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/coro/32/15424_2.png) [@Coro](https://discourse.pi-hole.net/u/Coro)
#### Post date: [September 10, 2020, 10:09am UTC](https://discourse.pi-hole.net/t/how-to-use-aaaa-query-analysis-flag/38202/10 "2020-09-10T10:09:12Z")

</div>

> [@Option to block/not forward all AAAA queries](https://discourse.pi-hole.net/t/option-to-block-not-forward-all-aaaa-queries/34837/43):
>
> Personally I am not sure what is _supposed_ to happen with that option set to `no` , as I have never used it (I barely even refer to the stats at all, myself). But I am sure somebody will have an answer!

I am the first someone to read this, it seems:

> <https://github.com/pi-hole/FTL/blob/dbd4a696afd35efa5e6c4882c74d9102d9d7d6a2/src/dnsmasq_interface.c#L480-L486>

* * *

> [@Option to block/not forward all AAAA queries](https://discourse.pi-hole.net/t/option-to-block-not-forward-all-aaaa-queries/34837/47):
>
> > [@shykitten55](#):
> >
> > `AAAA_QUERY_ANALASYS`
> 
> Typo?

> [@Option to block/not forward all AAAA queries](https://discourse.pi-hole.net/t/option-to-block-not-forward-all-aaaa-queries/34837/48):
>
> Sorry, I'm not seeing one.

> [@shykitten55](#):
>
> ANALASYS

but it should be

> [@Option to block/not forward all AAAA queries](https://discourse.pi-hole.net/t/option-to-block-not-forward-all-aaaa-queries/34837/8):
>
> ANALYSIS

`Y` vs. `I` and `A` vs. `Y`

---

<div class="post-metadata">

### Author: ![shykitten55](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/shykitten55/32/18504_2.png) [@shykitten55](https://discourse.pi-hole.net/u/shykitten55)
#### Post date: [September 10, 2020, 10:10am UTC](https://discourse.pi-hole.net/t/how-to-use-aaaa-query-analysis-flag/38202/11 "2020-09-10T10:10:19Z")

</div>

Thanks.

Weird how we can't see our own mistakes sometimes.

---

<div class="post-metadata">

### Author: ![Coro](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/coro/32/15424_2.png) [@Coro](https://discourse.pi-hole.net/u/Coro)
#### Post date: [September 10, 2020, 10:13am UTC](https://discourse.pi-hole.net/t/how-to-use-aaaa-query-analysis-flag/38202/12 "2020-09-10T10:13:15Z")

</div>

No worries. But remember this only skips showing/ computing statistics for them. It does not make it block them. For this you'd need the type-selective regex as mentioned above, I think this will only be in the next version of Pi-hole. Just to highlight this because the title of this topic seems to suggest something else.

---

<div class="post-metadata">

### Author: ![jfb](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/jfb/32/4332_2.png) [@jfb](https://discourse.pi-hole.net/u/jfb)
#### Post date: [September 10, 2020, 3:13pm UTC](https://discourse.pi-hole.net/t/how-to-use-aaaa-query-analysis-flag/38202/13 "2020-09-10T15:13:07Z")

</div>

> [@shykitten55](#):
>
> clear breakdown of the yes/no option.

Per the documentation:

> Should `FTL` only analyze A and AAAA queries?

If yes, then only these types of queries are analyzed. If no, then all queries (not just A and AAAA, but also including PTR, TXT, ANY, SRV, etc) will be analyzed and shown in the dashboard.

---

<div class="post-metadata">

### Author: ![yubiuser](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/yubiuser/32/12100_2.png) [@yubiuser](https://discourse.pi-hole.net/u/yubiuser)
#### Post date: [September 10, 2020, 6:43pm UTC](https://discourse.pi-hole.net/t/how-to-use-aaaa-query-analysis-flag/38202/14 "2020-09-10T18:43:39Z")

</div>

To note:

Both `AAAA_QUERY_ANALYSIS=yes|no` and `ANALYZE_ONLY_A_AND_AAAA=false|true` don't affect the DNS resolution at all - all requests will be processed. It is purely about the analyzation for displaying of certain query types at the dashboard.

---

<div class="post-metadata">

### Author: ![shykitten55](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/shykitten55/32/18504_2.png) [@shykitten55](https://discourse.pi-hole.net/u/shykitten55)
#### Post date: [September 10, 2020, 8:47pm UTC](https://discourse.pi-hole.net/t/how-to-use-aaaa-query-analysis-flag/38202/15 "2020-09-10T20:47:16Z")

</div>

So some options want yes/no and others want true/false..

---

<div class="post-metadata">

### Author: ![Coro](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/coro/32/15424_2.png) [@Coro](https://discourse.pi-hole.net/u/Coro)
#### Post date: [September 10, 2020, 8:57pm UTC](https://discourse.pi-hole.net/t/how-to-use-aaaa-query-analysis-flag/38202/16 "2020-09-10T20:57:24Z")

</div>

It doesn't matter. They always accept both. Sometimes they use or the other. depending on the context (it's a language thing, I guess).

---

<div class="post-metadata">

### Author: ![shykitten55](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/shykitten55/32/18504_2.png) [@shykitten55](https://discourse.pi-hole.net/u/shykitten55)
#### Post date: [September 10, 2020, 8:58pm UTC](https://discourse.pi-hole.net/t/how-to-use-aaaa-query-analysis-flag/38202/17 "2020-09-10T20:58:38Z")

</div>

Ok. Just wanting to be sure.

There aren't many things worse than a theory based on an untruth.

---

<div class="post-metadata">

### Author: ![DL6ER](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/dl6er/32/281_2.png) [@DL6ER](https://discourse.pi-hole.net/u/DL6ER)
#### Post date: [September 10, 2020, 9:01pm UTC](https://discourse.pi-hole.net/t/how-to-use-aaaa-query-analysis-flag/38202/18 "2020-09-10T21:01:30Z")

</div>

@Coro is right. And you are invited to play around with things. When you check out `/var/log/pihole-FTL.log`, you will always see the interpretation of your settings. Here you can see if FTL accepted your settings (it may reject some, e.g. invalid values such as a negative interval for `MAXDBDAYS`).

---

<div class="post-metadata">

### Author: ![system](https://discourse.pi-hole.net/uploads/default/original/3X/7/c/7c8792f649eeb921c5d2b4c41564ffa873d9a2b8.png) [@system](https://discourse.pi-hole.net/u/system)
#### Post date: [October 1, 2020, 9:01pm UTC](https://discourse.pi-hole.net/t/how-to-use-aaaa-query-analysis-flag/38202/19 "2020-10-01T21:01:31Z")

</div>

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.
