I currently run a pair of Pi-holes on two identically configured RPi02Ws. One is running 5.x; the other 6.x. Both are basic Pi-hole setups with just unbound added. They are used only for DNS.
As part of a learning experience, I have two other similar RPis running AdGuardHome w/unbound as well.
My home network is based on Ubiquiti UniFi with a Unifi Cloud Gateway Ultra as my main router. Everything works great.
The reason for the post is that when I use the UniFi Network app to review what devices are using the Internet, I noticed that the Pi-hole are using significantly more calls to Internet sites, than the AdGuardHome devices ... for what seems to be sites not related to the DNS process.
For example, I see traffic for Youku.com, Wi-Fi Calling, & PPTV (PPLive). I already checked and none of my network clients are accessing any of these, just the Pi-holes.
If you have a domain like youku.com then it would be fairly easy to query the piholes for who is requesting those.
From one of the piholes in question run:
pihole-FTL sqlite3 /etc/pihole/pihole-FTL.db "SELECT count(*), client FROM queries WHERE domain = 'youku.com' AND timestamp > strftime('%s','now','-1 day') GROUP BY 2 ORDER BY 1 DESC;"
Sqlite queries aren't my thing but this should work.
@rdwebdesign
Thanks. Doing so confirmed none of my network clients are making these request ... at least, not thru Pi-hole. I also double-checked the services running on the Pi and have not found anything unexpected.
I was pretty sure that what I was seeing was not generated by Pi-hole. As such, I'm going to chock this up as a "quirk" with the UniFi Network app's Insights traffic analyzer.
Thanks for that. It worked perfectly as written. The results were that no network client was sending DNS requests to my Pis for these domains. Looks like an issue with the UniFi Network app.