How to use `AAAA_QUERY_ANALYSIS ` flag

shykitten55 · September 10, 2020, 6:33am

I was sent here from another thread I have about IPv6 addresses and me not having any IPv6 addresses.

So where is this: AAAA_QUERY_ANALYSIS in settings?

PromoFaux · September 10, 2020, 7:45am

It is probably not made clear in this thread, but it is a config setting for FTL

https://docs.pi-hole.net/ftldns/configfile/

shykitten55 · September 10, 2020, 9:15am

(I should have explained that when I joined I logged in via google - me: lazy. So my username was picked for me. It would have been better had I picked it myself as: village_idiot.)

Yes, I found that a long way down the track, but this village idiot isn't seeing a clear breakdown of the yes/no option.

AAAA_QUERY_ANALYSIS=yes|no

So I'm guessing it needs to be no.

What also hit me a bit was when I opened said file (the .conf file) it was.... one line.

Ok, but that doesn't play nice with me.

I also get it is more work for the people who make PiHole. It isn't I am not happy, but it threw me.

If the options are yes/no and there isn't an entry..... How does that work?
Is yes the de-facto for all the lines which aren't in the .conf files?

I think/hope it is set now to what it should be to not show those in the stats.

This is what the file is to date:

sudo cat /etc/pihole/pihole-FTL.conf
PRIVACYLEVEL=0
AAAA_QUERY_ANALASYS=no

That was done abut 17:00 local.

I turned the machine off there about and turned it back on on now.

Looking at the graphs, I don't think that is working.

Screenshot from 2020-09-10 19-17-39

PromoFaux · September 10, 2020, 9:21am

From the docs page:

Possible settings ( the option shown first is the default ):

It's more for succinctness. These are all optional settings, so think of any entries in that files as overrides for the default behaviour of FTL

Personally I am not sure what is supposed to happen with that option set to no, as I have never used it (I barely even refer to the stats at all, myself). But I am sure somebody will have an answer!

github.com

pi-hole/FTL/blob/dbd4a696afd35efa5e6c4882c74d9102d9d7d6a2/src/config.c

/* Pi-hole: A black hole for Internet advertisements
*  (c) 2017 Pi-hole, LLC (https://pi-hole.net)
*  Network-wide ad blocking via your own hardware.
*
*  FTL Engine
*  Config routines
*
*  This file is copyright under the latest version of the EUPL.
*  Please see LICENSE file for your rights under this license. */

#include "FTL.h"
#include "config.h"
#include "memory.h"
#include "setupVars.h"
#include "log.h"
// nice()
#include <unistd.h>
// saveport()
#include "api/socket.h"

This file has been truncated. show original

shykitten55 · September 10, 2020, 9:24am

Again: Thanks. I am new to this so (alas) I am going to make some stupid mistakes.

(Not at you). I just edited the post and show the result of editing the file and setting it to no.

I accept that if I am running an IP(4) network it is going to cause problems with programs when they are told to use IP(6).

But the fact they are showing on the graph after I (hope/think) I set it to not do that is .... confusing.

Not a big deal. It is early days and in the long run I am sure this will be resolved. Just until then any information extracted from the graphs is skewed because of this also included.

PromoFaux · September 10, 2020, 9:30am

We, all of us, have to start somewhere!

shykitten55 · September 10, 2020, 9:31am

I get that. No problems. It is just interesting all the stuff I am seeing.

Coro · September 10, 2020, 10:05am

Typo?

shykitten55 · September 10, 2020, 10:08am

Sorry, I'm not seeing one.

Coro · September 10, 2020, 10:09am

I am the first someone to read this, it seems:

github.com

pi-hole/FTL/blob/dbd4a696afd35efa5e6c4882c74d9102d9d7d6a2/src/dnsmasq_interface.c#L480-L486


      
          	// Skip AAAA queries if user doesn't want to have them analyzed
          	if(!config.analyze_AAAA && querytype == TYPE_AAAA)
          	{
          		if(config.debug & DEBUG_QUERIES)
          			logg("Not analyzing AAAA query");
          		return false;
          	}

but it should be

Y vs. I and A vs. Y

shykitten55 · September 10, 2020, 10:10am

Thanks.

Weird how we can't see our own mistakes sometimes.

Coro · September 10, 2020, 10:13am

No worries. But remember this only skips showing/ computing statistics for them. It does not make it block them. For this you'd need the type-selective regex as mentioned above, I think this will only be in the next version of Pi-hole. Just to highlight this because the title of this topic seems to suggest something else.

jfb · September 10, 2020, 3:13pm

Per the documentation:

Should FTL only analyze A and AAAA queries?

If yes, then only these types of queries are analyzed. If no, then all queries (not just A and AAAA, but also including PTR, TXT, ANY, SRV, etc) will be analyzed and shown in the dashboard.

yubiuser · September 10, 2020, 6:43pm

To note:

Both AAAA_QUERY_ANALYSIS=yes|no and ANALYZE_ONLY_A_AND_AAAA=false|true don't affect the DNS resolution at all - all requests will be processed. It is purely about the analyzation for displaying of certain query types at the dashboard.

shykitten55 · September 10, 2020, 8:47pm

So some options want yes/no and others want true/false..

Coro · September 10, 2020, 8:57pm

It doesn't matter. They always accept both. Sometimes they use or the other. depending on the context (it's a language thing, I guess).

shykitten55 · September 10, 2020, 8:58pm

Ok. Just wanting to be sure.

There aren't many things worse than a theory based on an untruth.

DL6ER · September 10, 2020, 9:01pm

@Coro is right. And you are invited to play around with things. When you check out /var/log/pihole-FTL.log, you will always see the interpretation of your settings. Here you can see if FTL accepted your settings (it may reject some, e.g. invalid values such as a negative interval for MAXDBDAYS).

system · October 1, 2020, 9:01pm

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.