I've been experiencing issues with my FTL Service crashing randomly. Sometimes after a few days, sometimes after a few hours. At first it was once a week, so I set up a reoccurring reboot in the mornings during low traffic times, now it seems that even that isn't stopping the errors.
(I had restarted the FTL service before uploading the log, so it may have messed up some of the data, if so, let me know and I can upload it next time it happens)
I'm currently running PiHole on Ubuntu 16.04 LTS, on an ESXi VM.
I also see that it's been a common issue, with lots of other posts about it, but I never seen any actual resolution solution, therefore I made my own post. (Sorry if this wasn't the correct step)
*** [ DIAGNOSING ]: Name resolution (IPv4) using a random blocked domain and a known ad-serving domain
[✓] metrics.oregonlive.com is 0.0.0.0 via localhost (127.0.0.1)
[✗] Failed to resolve metrics.oregonlive.com via Pi-hole (10.191.100.142)
The 24 hour history of DNS queries shows quite a bit of activity.
[2020-05-28 12:12:22.319 14491] Imported 498203 queries from the long-term database
[2020-05-28 12:12:22.319 14491] -> Total DNS queries: 498203
[2020-05-28 12:12:22.319 14491] -> Cached DNS queries: 486642
[2020-05-28 12:12:22.319 14491] -> Forwarded DNS queries: 10348
[2020-05-28 12:12:22.319 14491] -> Blocked DNS queries: 1193
[2020-05-28 12:12:22.319 14491] -> Unknown DNS queries: 20
[2020-05-28 12:12:22.319 14491] -> Unique domains: 371
[2020-05-28 12:12:22.319 14491] -> Unique clients: 26
[2020-05-28 12:12:22.319 14491] -> Known forward destinations: 4
As for the pihole.log it has a massive amount of dnsmasq queries. 600MB+ for just today.
It's taking quite a while to parse it to see if there's anything outside of those lines. (I will respond if / when my computer finishes reading these)
I realize there's a few SOCKS5 Proxy users (it's a larger network, the unique clients are just the NAT devices poling the data), but I think that even that shouldn't be making logs this large.
Hello, I apologize. It turns out I had a runaway server poling my dns at magnitudes per second.
I'm going to attempt a rebuild on this server and the PiHole server just to clear out aynthing.
I'll create a new forum post if the issues reoccur after this.
Thanks for suggestion to look at the logs, they showed a specific client that was just abusing the dns.