Unusual Query VOLUME

The issue I am facing:
Unusual Volume observed upon upgrading to

Notice High Green Bars around 8:00.

Your debug token is: https://tricorder.pi-hole.net/hm4fxxjnn4

Details about my system:
Raspberry Pi 3 and 2.

What I have changed since installing Pi-hole:
Nothing. Just upgraded to latest Pihole version.

We were just discussing "DNS forwarding loop" below:

Screenshot_2021-01-26 Unusual Query VOLUME - Help Community Help - Pi-hole Userspace

Find out what client is screaming for 165.225.242.48's hostname.

It belongs to https://www.zscaler.com/ if that rings any bells.

1 Like

You're going to run out of memory soon

   [2021-01-26 09:59:42.648 1241M] WARNING: More than 90% of /dev/shm is used

I'll look further later on this.
All i wan to say now is, i've been in this configuration since i installed pi-hole on home network last August. Also i've been on Zcalar on and off since then. All was well, until i upgrade to the latest version for pihole !!!

Pi-hole doesn't generate DNS queries on it's own. You have a client that has decided that it really needs to know Zscalar's PTR records. This isn't a Pi-hole issue, it's a rogue client or a bad ZScalar application.

1 Like

Checked all setting. There are no DNS Forwarding on network.

This indicates that you have a very chatty client. That is where I would focus the investigation - why did that client suddenly making the same request over and over.

1 Like

Update:
After flushing ( pihole -f ) both pihole (one on each Raspi), chatty client this time around was webex.com. The machine (work) that was running webex was disconnected from the network. Total Queries kept on climbing for quite sometime, until router DNS was changed ! This tells me the loop (chatter) was between the router and pihole. Where do i go from here ?

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.