Meaning of entries in additional_info field of pihole-FTL.db

jpgpi250 · August 11, 2020, 10:16pm

I'm seeing some values in the additional_info field of the database, the domain name is clearly there to solve the CNAME relationship, I would like to know the meaning of the numeric (and possible other) entries in that field.

DanSchaper · August 11, 2020, 10:20pm

Should be the regex ID that triggered it.

Edit:

github.com

pi-hole/FTL/blob/dbd4a696afd35efa5e6c4882c74d9102d9d7d6a2/src/database/query-table.c#L168-L191


		// ADDITIONAL_INFO
		if(query->status == QUERY_GRAVITY_CNAME ||
		   query->status == QUERY_REGEX_CNAME ||
		   query->status == QUERY_BLACKLIST_CNAME)
		{
			// Restore domain blocked during deep CNAME inspection if applicable
			const char* cname = getCNAMEDomainString(query);
			sqlite3_bind_text(stmt, 7, cname, -1, SQLITE_STATIC);
		}
		else if(query->status == QUERY_REGEX)
		{
			// Restore regex ID if applicable
			const int cacheID = findCacheID(query->domainID, query->clientID);
			DNSCacheData *cache = getDNSCache(cacheID, true);
			if(cache != NULL)
				sqlite3_bind_int(stmt, 7, cache->black_regex_idx);
			else
				sqlite3_bind_null(stmt, 7);
		}
		else

This file has been truncated. show original

Coro · August 12, 2020, 7:29am

The interpretation of this field depends on the status (see @DanSchaper's code quote). They may introduce additional information for other types as well so make sure to do your interpretation on this always based on the type of the query (also stored in the database).

system · September 2, 2020, 7:29am

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.