Pi-hole is working, but dashboard shows no queries

Please follow the below template, it will help us to help you!

Expected Behavior:

Pi-hole seems to be working. It is blocking ads, and I confirmed this from my phone and computer. However, when I access the pi-hole dashboard, it is not showing any queries or clients connected for a while, reducing percent blocked to %0.3 only
-Pi-hole is running on Raspberri Pi Raspbian 9

Actual Behaviour:

Dashboard is NOT showing me clients connected/queries, or percent locked.
Running dig pi-hole.net shows that queries do make it to Pi-Hole as the DNS
Running pihole tail shows queries being received by PiHole indeed, and some are being blocked too.

Debug Token:

https://tricorder.pi-hole.net/c3qwafovbv/

Looks like you are running out of memory due to the large quantity of DNS queries. "164921344" is 165 MB of RAM just for that purpose.

2942244 queries in the past 24 hours is a lot (almost 3 million). You may have a DNS loop due to conditional forwarding

   [2020-09-21 15:15:33.981 1309M] Resizing "/FTL-queries" from 164691968 to 164921344
   [2020-09-21 15:15:34.067 1309M] Imported 2942244 queries from the long-term database
   [2020-09-21 15:15:34.068 1309M]  -> Total DNS queries: 2942244
   [2020-09-21 15:15:34.069 1309M]  -> Cached DNS queries: 18500
   [2020-09-21 15:15:34.069 1309M]  -> Forwarded DNS queries: 2913848
   [2020-09-21 15:15:34.069 1309M]  -> Blocked DNS queries: 9862
   [2020-09-21 15:15:34.069 1309M]  -> Unknown DNS queries: 34
   [2020-09-21 15:15:34.069 1309M]  -> Unique domains: 5796
   [2020-09-21 15:15:34.069 1309M]  -> Unique clients: 42
   [2020-09-21 15:15:34.069 1309M]  -> Known forward destinations: 1

What is the output of the following - we're looking for the client making all the requests, the queries, and where the queries are going:

echo ">top-clients >quit" | nc localhost 4711

echo ">top-domains >quit" | nc localhost 4711

echo ">forward-dest >quit" | nc localhost 4711

I did mess up my USG WAN DNS a bit yesterday, but resolved it this morning. Still after it, no updates are happening. Maybe I need to flush the queries? How do I do that please?

Here are the logs you requested:

echo ">top-clients >quit" | nc localhost 4711
0 2861249 10.0.1.1 setup.ubnt.com

echo ">top-domains >quit" | nc localhost 4711
0 245964 ios.prod.http1.netflix.com
1 142675 dualstack.apiproxy-http1-199106617.us-east-1.elb.amazonaws.com

echo ">forward-dest >quit" | nc localhost 4711
-2 0.32 blocklist blocklist
-1 0.61 cache cache
0 99.07 10.0.1.1 setup.ubnt.com

You have queries from this client being sent back to the same client for resolution. That's a loop. If the client knew the answer, it wouldn't be making the request to Pi-hole.

Disable conditional forwarding on your Pi-hole and see if this traffic stops.

I just flushed the logs to reset the stats.
I enabled conditional forwarding to get the clients name from my DHCP server.
I think the issue was that I mistakenly created a loop of requests in my router yesterday at night sending requests to PiHole, while PiHole with conditional forwarding kept sending them back.
When I woke up, I realized the issue with routher and fixed it. By then, it created a huge number of queries from the router overshadowing all other requests.
So the fix was to remove the loop in the router, flush the logs to get the right stats, and keep monitoring the stats to make sure it does not happen again. If it does, I will disable conditional forwarding and see.

Thanks for the help. Much appreciated.

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.