Ftl: Pi-Hole crashes when blocking with regex filter
Versions
- Pi-hole: v5.2.1 (Latest: v5.2.1)
- AdminLTE: v5.2.1 (Latest: v5.2.1)
- FTL: v5.3.2 (Latest: v5.3.2)
Platform
- OS and version: Raspbian 10
- Platform: Raspberry Pi Model A
Expected behavior
Block domains based on regex filer r\d+[-\.]+sn-\w+((-|\.)\w+)?\.googlevideo\.com.
Actual behavior / bug
After adding the filter r\d+[-\.]+sn-\w+((-|\.)\w+)?\.googlevideo\.com as a regex filter, FTL crashes and DNS stops working.
Steps to reproduce
Steps to reproduce the behavior:
- Go to Blacklist.
- Click on RegEx filter.
- Add
r\d+[-\.]+sn-\w+((-|\.)\w+)?\.googlevideo\.comunder Regular Expression:. - Go to https://youtube.com without any ad blocker.
- Pick any video.
- FTL (and other services?) will crash shortly.
Debug Token
Screenshots
Additional context
ecspresso
All 48 comments
Sorry, posted in the wrong git.
ecspresso
on 7 Dec 2020
I don't think you're wrong in here, let me reopen your ticket.
DL6ER
on 7 Dec 2020
Should I close the one I made in pihole instead? @DL6ER
ecspresso
on 7 Dec 2020
Yes, this is a bug in FTL. I'll come back to you in few hours when I'm trying to reproduce this crash locally.
DL6ER
on 7 Dec 2020
👍1
So I just added your regex above and followed what you said (tried to play a few movies). Issue here is now that everything on Youtube seems to be blocked. Neither ads not an actual content is playing for me. Every video I tried just results in an ever spinning loading indicator on black background. Sometimes I can get to the "Skip ad" button, but not then anything loads.
I'm still trying to come down to it. Just out of pure curiosity, could you try switching back to the old regex engine and see if the crash still happens for you?
Run
pihole checkout ftl old_regex_engine
You can go back at any point using
pihole checkout ftl master
@ecspresso Updated command for you:
pihole checkout ftl fix/tre-regex-forks
You could also try the old_regex_engine one if this crashes as well, but let's hope that this is now resolved.
DL6ER
on 8 Dec 2020
@DL6ER I will check it out today and update you.
I should also mention that I was trying to block YouTube ads but I think I blocked every source delivering content so the regex might not achieve much.
ecspresso
on 15 Dec 2020
@ecspresso Do you already have an update for us? When we have confirmation that this fix is working for you (and you didn't realize any unintended side-effects), then we can go towards preparing a new point-release.
DL6ER
on 17 Dec 2020
@DL6ER Aside from the regex blocking too much, FTL does no longer crash with this fix. I had YouTube try to load a video for a few minutes and nothing stopped working on Pi-Hole's side of things.
Thanks!
ecspresso
on 17 Dec 2020
👍1
The next version of FTL has been released. Please update and run
pihole checkout master
to get back on-track. Thanks for helping us to make Pi-hole better for us all!
If you have any issues, please either reopen this ticket or (preferably) create a new ticket describing the issues in further detail and only reference this ticket. This will help us to help you best.
DL6ER
on 24 Dec 2020
I just upgraded to
- Pi-hole v5.2.2
- Web Interface v5.2.2
- FTL v5.3.3
Running Pi-Hole in Proxmox LXC container running Debian 10.7. I have 1 regrex in my whitelist: (\.|^)app-measurement\.com$ (for iRobot/Roomba) and works with previous version. If I upgrade, no errors in logs, but all queries timeout. I disable this one regex and everything starts working again.
joeroback
on 24 Dec 2020
Debug token please.
dschaper
on 24 Dec 2020
And did you add any additional libraries or packages to the lxc container?
dschaper
on 24 Dec 2020
And did you add any additional libraries or packages to the
lxccontainer?
started with Debian 10.7 template, installed vim-nox, ran pihole installer via curl
joeroback
on 25 Dec 2020
I have the same problem on a Raspberry Pi 4 with Raspbian.
I upgraded to the latest Pihole version (Pi-hole v5.2.2, Web Interface v5.2.2, FTL v5.3.3) and DNS resolution became so slow that most of the times failed.
I switched to the ftl old_regex_engine and everything went back to normal. I tried the ftl fix/tre-regex-forks branch but it didn't solve the problem.
I have quite a few regex rules in my blacklist. and the problem seems related to this.
Thank you for your attention and Merry Christmas!
stefanomaxenti
on 25 Dec 2020
I'm also having the same issue I think. Running Pi-hole in a Proxmox LXE (Container/VM) with Ubuntu 20.04 LTS. I'm only running Pi-hole, Unbound, Knot, Cloudflared in that LXE.
coldfire7
on 25 Dec 2020
So, everyone is running on virtualized systems?
I can spin up an lxc container on Proxmox 6 with the shipped Debian 10 template if that matches what you all are seeing.
dschaper
on 25 Dec 2020
Also, are you all using the root user inside the lxc containers or have you created users to run Pi-hole?
dschaper
on 25 Dec 2020
started with Debian 10.7 template, installed
vim-nox, ran pihole installer viacurl
There's some confusing configurations on your setup.
REV_SERVER_CIDR=192.168.0.0/16
REV_SERVER_TARGET=192.168.1.1
REV_SERVER_DOMAIN=lan
BLOCKING_ENABLED=true
PIHOLE_INTERFACE=eth0
IPV4_ADDRESS=192.168.43.42/24
IPV6_ADDRESS=
PIHOLE_DNS_1=192.168.1.1#53
PIHOLE_DNS_2=
You have everything pointing to 192.168.1.1 (both as upstream and as rev-server for conditional forwarding.) But the IP of the eth0 interface doesn't match. It's 192.168.42.42/24. Which is a different subnet.
And your clients are all on the 192.168.69.0/24 subnet?
I've created a new lxc container on Proxmox 6. useradd pihole and add to sudo, run the curl installer and set a single whitelist regex, using your regex.
dig commands against the Pi-hole IP all seem to work without any issue.
dschaper
on 25 Dec 2020
Also, are you all using the
rootuser inside thelxccontainers or have you created users to run Pi-hole?
Yah as root
coldfire7
on 25 Dec 2020
Can you tail off the last 20 or so lines from /var/log/pihole-FTL.log, the debugs submitted so far really don't have anything showing.
dschaper
on 25 Dec 2020
For instance, coldfire7 joeroback shows:
[2020-12-24 14:41:34.387 1448/T1452] Compiled 0 whitelist and 0 blacklist regex filters for 34 clients in 0.3 msec
[2020-12-24 14:45:55.867 1448M] Received: Real-time signal 0 (34 -> 0)
[2020-12-24 14:45:55.880 1448/T1452] Compiled 0 whitelist and 0 blacklist regex filters for 35 clients in 0.2 msec
[2020-12-24 14:45:58.251 1448M] Received: Real-time signal 0 (34 -> 0)
[2020-12-24 14:45:58.295 1448/T1452] Compiled 0 whitelist and 0 blacklist regex filters for 35 clients in 0.2 msec
[2020-12-24 14:46:07.806 1448M] Received: Real-time signal 0 (34 -> 0)
[2020-12-24 14:46:07.910 1448/T1452] Compiled 1 whitelist and 0 blacklist regex filters for 35 clients in 15.0 msec
[2020-12-24 14:46:16.634 1448M] Received: Real-time signal 0 (34 -> 0)
[2020-12-24 14:46:16.642 1448/T1452] Compiled 0 whitelist and 0 blacklist regex filters for 35 clients in 0.2 msec
[2020-12-24 14:46:20.044 1448M] Received: Real-time signal 0 (34 -> 0)
[2020-12-24 14:46:20.074 1448/T1452] Compiled 1 whitelist and 0 blacklist regex filters for 35 clients in 15.3 msec
[2020-12-24 14:46:26.874 1448M] Received: Real-time signal 0 (34 -> 0)
[2020-12-24 14:46:31.999 1448/T1452] Compiled 0 whitelist and 0 blacklist regex filters for 35 clients in 0.2 msec
[2020-12-24 14:47:00.039 1448M] Received: Real-time signal 0 (34 -> 0)
[2020-12-24 14:47:00.159 1448/T1452] Compiled 0 whitelist and 0 blacklist regex filters for 35 clients in 0.2 msec
[2020-12-24 14:54:25.090 1448M] Resizing "FTL-strings" from 28672 to (32768 * 1) == 32768 (/dev/shm: 3.0MB used, 16.6GB total)
[2020-12-24 14:55:37.835 1448M] Resizing "FTL-dns-cache" from 4096 to (512 * 16) == 8192 (/dev/shm: 3.0MB used, 16.6GB total)
[2020-12-24 15:32:43.673 1448M] Resizing "FTL-dns-cache" from 8192 to (768 * 16) == 12288 (/dev/shm: 3.0MB used, 16.6GB total)
[2020-12-24 16:07:20.457 1448M] Resizing "FTL-strings" from 32768 to (36864 * 1) == 36864 (/dev/shm: 3.0MB used, 16.6GB total)
[2020-12-24 16:10:59.383 1448M] Received: Real-time signal 0 (34 -> 0)
[2020-12-24 16:10:59.447 1448/T1452] Compiled 1 whitelist and 0 blacklist regex filters for 35 clients in 15.5 msec
coldfire7 is
[2020-12-25 05:41:08.252 23860M] Imported 332 queries from the long-term database
[2020-12-25 05:41:08.252 23860M] -> Total DNS queries: 332
[2020-12-25 05:41:08.252 23860M] -> Cached DNS queries: 41
[2020-12-25 05:41:08.252 23860M] -> Forwarded DNS queries: 248
[2020-12-25 05:41:08.252 23860M] -> Blocked DNS queries: 3
[2020-12-25 05:41:08.252 23860M] -> Unknown DNS queries: 3
[2020-12-25 05:41:08.252 23860M] -> Unique domains: 18
[2020-12-25 05:41:08.252 23860M] -> Unique clients: 4
[2020-12-25 05:41:08.252 23860M] -> Known forward destinations: 2
[2020-12-25 05:41:08.252 23860M] Successfully accessed setupVars.conf
[2020-12-25 05:41:08.259 23862M] PID of FTL process: 23862
[2020-12-25 05:41:08.259 23862/T23863] Listening on port 4711 for incoming IPv4 telnet connections
[2020-12-25 05:41:08.259 23862M] INFO: FTL is running as user pihole (UID 998)
[2020-12-25 05:41:08.259 23862/T23865] Listening on Unix socket
[2020-12-25 05:41:08.259 23862/T23864] Listening on port 4711 for incoming IPv6 telnet connections
[2020-12-25 05:41:08.259 23862M] Reloading DNS cache
[2020-12-25 05:41:08.259 23862M] Blocking status is enabled
[2020-12-25 05:41:09.519 23862/T23866] Compiled 38 whitelist and 51 blacklist regex filters for 4 clients in 2.2 msec
So these are all showing the regex compile without issues.
We might want to add some debug configs for regex logging. If you are on the master branch again.
dschaper
on 25 Dec 2020
dschaper
on 25 Dec 2020
This is what happens after upgrading to the latest version, Pi-hole starts just fine then DNS and FTL stops working, everything becomes laggy web ui takes forever to load, Proxmox shows high IO Delay.
I couldn't find anything wrong from the logs either.
Going back to older version using pihole checkout ftl old_regex_engine fixed the issue for me.
coldfire7
on 25 Dec 2020
Can you go to master and add the regex debug configs I linked to?
dschaper
on 25 Dec 2020
Switched to master and enabled DEBUG_REGEX=true
Stuck at *** [ DIAGNOSING ]: Dashboard and block page for 20mins~
coldfire7
on 25 Dec 2020
Check /var/log/lighttpd/error.log, /var/log/lighttpd/access.log, /var/log/pihole-FTL.log * <- That's the important one* and /var/log/pihole.log.
dschaper
on 25 Dec 2020
And what does the summary screen show for the lxc container?
dschaper
on 25 Dec 2020
❯ tail -n 20 /var/log/lighttpd/error.log
2020-12-25 05:51:16: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice: Undefined variable: serverName in /var/www/html/pihole/index.php on line 74
2020-12-25 05:55:23: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice: Undefined variable: viewPort in /var/www/html/pihole/index.php on line 73
2020-12-25 05:55:23: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice: Undefined variable: serverName in /var/www/html/pihole/index.php on line 74
2020-12-25 05:55:23: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice: Undefined variable: viewPort in /var/www/html/pihole/index.php on line 73
2020-12-25 05:55:23: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice: Undefined variable: serverName in /var/www/html/pihole/index.php on line 74
2020-12-25 06:24:00: (server.c.1970) server stopped by UID = 0 PID = 1
2020-12-25 06:24:14: (server.c.1488) server started (lighttpd/1.4.55)
2020-12-25 06:24:14: (server.c.1517) WARNING: unknown config-key: alias.url (ignored)
2020-12-25 06:44:22: (server.c.1970) server stopped by UID = 0 PID = 1
2020-12-25 06:44:30: (server.c.1488) server started (lighttpd/1.4.55)
2020-12-25 06:44:30: (server.c.1517) WARNING: unknown config-key: alias.url (ignored)
2020-12-25 07:17:20: (server.c.1970) server stopped by UID = 0 PID = 1
2020-12-25 07:17:21: (server.c.1488) server started (lighttpd/1.4.55)
2020-12-25 07:17:21: (server.c.1517) WARNING: unknown config-key: alias.url (ignored)
2020-12-25 07:42:42: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice: Undefined variable: viewPort in /var/www/html/pihole/index.php on line 73
2020-12-25 07:42:42: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice: Undefined variable: serverName in /var/www/html/pihole/index.php on line 74
2020-12-25 07:42:42: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice: Undefined variable: viewPort in /var/www/html/pihole/index.php on line 73
2020-12-25 07:42:42: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice: Undefined variable: serverName in /var/www/html/pihole/index.php on line 74
2020-12-25 07:52:18: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice: Undefined variable: viewPort in /var/www/html/pihole/index.php on line 73
2020-12-25 07:52:18: (mod_fastcgi.c.421) FastCGI-stderr: PHP Notice: Undefined variable: serverName in /var/www/html/pihole/index.php on line 74
❯ tail -n 20 /var/log/lighttpd/access.log
1608860562|r-pi.hole|GET /admin/api.php?summary HTTP/1.1|200|485
1608860562|r-pi.hole|GET /admin/api.php?summaryRaw&getQuerySources&topClientsBlocked HTTP/1.1|200|804
1608860562|localhost|HEAD / HTTP/1.1|200|0
1608860562|localhost|HEAD /admin/ HTTP/1.1|200|0
1608860562|localhost|HEAD / HTTP/1.1|200|0
1608860562|localhost|HEAD /admin/ HTTP/1.1|200|0
1608860870|r-pi.hole|GET /admin/api.php?summaryRaw&topItems HTTP/1.1|200|917
1608860875|10.0.0.20|GET /admin/api.php?summary HTTP/1.1|200|486
1608860877|r-pi.hole|GET /admin/api.php?getQueryTypes HTTP/1.1|200|150
1608861138|r-pi.hole|GET /admin/api.php?getForwardDestinations HTTP/1.1|200|186
1608861138|10.0.0.20|GET /admin/api.php?overTimeData10mins HTTP/1.1|200|4403
1608861138|localhost|HEAD / HTTP/1.1|200|0
1608861460|r-pi.hole|GET /admin/api.php?summary HTTP/1.1|200|486
1608861460|10.0.0.20|GET /admin/api.php?overTimeDataClients&getClientNames HTTP/1.1|200|4605
1608861730|10.0.0.20|GET /admin/api.php?overTimeData10mins HTTP/1.1|200|4433
1608861730|r-pi.hole|GET /admin/api.php?summaryRaw&getQuerySources&topClientsBlocked HTTP/1.1|200|805
1608861730|10.0.0.20|GET /admin/api.php?summary HTTP/1.1|200|486
1608861731|localhost|HEAD /admin/ HTTP/1.1|200|0
1608862321|r-pi.hole|GET /admin/api.php?overTimeData10mins HTTP/1.1|200|4223
1608862322|r-pi.hole|GET /admin/api.php?overTimeDataClients&getClientNames HTTP/1.1|200|4402
❯ tail -n 300 /var/log/pihole-FTL.log
[2020-12-25 08:16:59.616 28172M] Regex whitelist (3, DB ID 648) NO match: "afd-k.office.com" vs. "(\.|^)nflximg\.com$"
[2020-12-25 08:16:59.616 28172M] Executing: index = 4, preg = 0x7fa64409bf48, str = "afd-k.office.com", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:17:05.152 28172M] Regex whitelist (4, DB ID 649) NO match: "afd-k.office.com" vs. "(\.|^)nflximg\.net$"
[2020-12-25 08:17:05.152 28172M] Executing: index = 5, preg = 0x7fa64409bf70, str = "afd-k.office.com", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:17:12.491 28172M] Regex whitelist (5, DB ID 650) NO match: "afd-k.office.com" vs. "(\.|^)nflxso\.net$"
[2020-12-25 08:17:12.491 28172M] Executing: index = 6, preg = 0x7fa64409bf98, str = "afd-k.office.com", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:17:18.338 28172M] Regex whitelist (6, DB ID 651) NO match: "afd-k.office.com" vs. "(\.|^)nflxvideo\.net$"
[2020-12-25 08:17:18.338 28172M] Executing: index = 7, preg = 0x7fa64409bfc0, str = "afd-k.office.com", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:17:25.202 28172M] Regex whitelist (7, DB ID 652) NO match: "afd-k.office.com" vs. "(\.|^)fast\.com$"
[2020-12-25 08:17:25.202 28172M] Executing: index = 8, preg = 0x7fa64409bfe8, str = "afd-k.office.com", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:17:34.411 28172M] Regex whitelist (8, DB ID 653) NO match: "afd-k.office.com" vs. "(\.|^)dota2\.wmsj\.cn$"
[2020-12-25 08:17:34.411 28172M] Executing: index = 9, preg = 0x7fa64409c010, str = "afd-k.office.com", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:17:42.804 28172M] Regex whitelist (9, DB ID 654) NO match: "afd-k.office.com" vs. "(\.|^)csgo\.wmsj\.cn$"
[2020-12-25 08:17:42.804 28172M] Executing: index = 10, preg = 0x7fa64409c038, str = "afd-k.office.com", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:17:51.260 28172M] Regex whitelist (10, DB ID 703) NO match: "afd-k.office.com" vs. "(\.|^)googlevideo\.com$"
[2020-12-25 08:17:51.260 28172M] Executing: index = 11, preg = 0x7fa64409c060, str = "afd-k.office.com", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:18:00.362 28172M] Regex whitelist (11, DB ID 716) NO match: "afd-k.office.com" vs. "(\.|^)ooklaserver\.net$"
[2020-12-25 08:18:00.362 28172M] Executing: index = 12, preg = 0x7fa64409c088, str = "afd-k.office.com", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:18:02.425 28172M] Regex whitelist (12, DB ID 725) NO match: "afd-k.office.com" vs. "(\.|^)ebay.com.edgekey.net"
[2020-12-25 08:18:02.425 28172M] Executing: index = 13, preg = 0x7fa64409c0b0, str = "afd-k.office.com", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:18:02.478 28172M] Regex whitelist (13, DB ID 860) NO match: "afd-k.office.com" vs. "(\.|^)arkoselabs.com"
[2020-12-25 08:18:02.478 28172M] Executing: index = 14, preg = 0x7fa64409c0d8, str = "afd-k.office.com", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:18:02.543 28172M] Regex whitelist (14, DB ID 861) NO match: "afd-k.office.com" vs. "(\.|^)dropbox.com"
[2020-12-25 08:18:02.543 28172M] Executing: index = 15, preg = 0x7fa64409c100, str = "afd-k.office.com", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:18:02.626 28172M] Regex whitelist (15, DB ID 862) NO match: "afd-k.office.com" vs. "(\.|^)dropboxusercontent.com"
[2020-12-25 08:18:02.626 28172M] Executing: index = 16, preg = 0x7fa64409c128, str = "afd-k.office.com", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:18:02.723 28172M] Regex whitelist (16, DB ID 863) NO match: "afd-k.office.com" vs. "(\.|^)dropboxstatic.com"
[2020-12-25 08:18:02.723 28172M] Executing: index = 17, preg = 0x7fa64409c150, str = "afd-k.office.com", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:18:02.874 28172M] Regex whitelist (17, DB ID 865) NO match: "afd-k.office.com" vs. "(\.|^)dropboxcaptcha.com"
[2020-12-25 08:18:02.874 28172M] Executing: index = 18, preg = 0x7fa64409c178, str = "afd-k.office.com", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:18:03.094 28172M] Regex whitelist (18, DB ID 868) NO match: "afd-k.office.com" vs. "(\.|^)imgbox.com"
[2020-12-25 08:18:03.094 28172M] Executing: index = 19, preg = 0x7fa64409c1a0, str = "afd-k.office.com", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:18:03.342 28172M] Regex whitelist (19, DB ID 869) NO match: "afd-k.office.com" vs. "(\.|^)3m.com"
[2020-12-25 08:18:03.343 28172M] Executing: index = 20, preg = 0x7fa64409c1c8, str = "afd-k.office.com", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:18:03.865 28172M] Regex whitelist (20, DB ID 875) NO match: "afd-k.office.com" vs. "(\.|^)maxmind.com"
[2020-12-25 08:18:03.865 28172M] Executing: index = 21, preg = 0x7fa64409c1f0, str = "afd-k.office.com", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:18:04.634 28172M] Regex whitelist (21, DB ID 884) NO match: "afd-k.office.com" vs. "(\.|^)dropbox-dns.com"
[2020-12-25 08:18:04.634 28172M] Executing: index = 22, preg = 0x7fa64409c218, str = "afd-k.office.com", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:18:05.514 28172M] Regex whitelist (22, DB ID 889) NO match: "afd-k.office.com" vs. "(\.|^)giphy.com"
[2020-12-25 08:18:05.514 28172M] Executing: index = 23, preg = 0x7fa64409c240, str = "afd-k.office.com", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:18:06.740 28172M] Regex whitelist (23, DB ID 897) NO match: "afd-k.office.com" vs. "(\.|^)s81c.com"
[2020-12-25 08:18:06.740 28172M] Executing: index = 24, preg = 0x7fa64409c268, str = "afd-k.office.com", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:18:08.006 28172M] Regex whitelist (24, DB ID 900) NO match: "afd-k.office.com" vs. "(\.|^)mega.co.nz"
[2020-12-25 08:18:08.006 28172M] Executing: index = 25, preg = 0x7fa64409c290, str = "afd-k.office.com", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:18:09.499 28172M] Regex whitelist (25, DB ID 906) NO match: "afd-k.office.com" vs. "(\.|^)gigya.com"
[2020-12-25 08:18:09.499 28172M] Executing: index = 26, preg = 0x7fa64409c2b8, str = "afd-k.office.com", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:18:11.404 28172M] Regex whitelist (26, DB ID 909) NO match: "afd-k.office.com" vs. "(\.|^)he.net"
[2020-12-25 08:18:11.404 28172M] Executing: index = 27, preg = 0x7fa64409c2e0, str = "afd-k.office.com", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:18:13.171 28172M] Regex whitelist (27, DB ID 915) NO match: "afd-k.office.com" vs. "(\.|^)ac.jp"
[2020-12-25 08:18:13.171 28172M] Executing: index = 28, preg = 0x7fa64409c308, str = "afd-k.office.com", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:18:15.141 28172M] Regex whitelist (28, DB ID 916) NO match: "afd-k.office.com" vs. "(\.|^)ad.jp"
[2020-12-25 08:18:15.141 28172M] Executing: index = 29, preg = 0x7fa64409c330, str = "afd-k.office.com", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:18:17.585 28172M] Regex whitelist (29, DB ID 917) NO match: "afd-k.office.com" vs. "(\.|^)edu.cn"
[2020-12-25 08:18:17.585 28172M] Executing: index = 30, preg = 0x7fa64409c358, str = "afd-k.office.com", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:18:20.269 28172M] Regex whitelist (30, DB ID 924) NO match: "afd-k.office.com" vs. "(\.|^)windowsupdate\.microsoft\.com$"
[2020-12-25 08:18:20.269 28172M] Executing: index = 31, preg = 0x7fa64409c380, str = "afd-k.office.com", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:18:22.639 28172M] Regex whitelist (31, DB ID 925) NO match: "afd-k.office.com" vs. "(\.|^)update\.microsoft\.com$"
[2020-12-25 08:18:22.639 28172M] Executing: index = 32, preg = 0x7fa64409c3a8, str = "afd-k.office.com", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:18:25.794 28172M] Regex whitelist (32, DB ID 926) NO match: "afd-k.office.com" vs. "(\.|^)windowsupdate\.com$"
[2020-12-25 08:18:25.794 28172M] Executing: index = 33, preg = 0x7fa64409c3d0, str = "afd-k.office.com", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:18:29.015 28172M] Regex whitelist (33, DB ID 945) NO match: "afd-k.office.com" vs. "(\.|^)github.com"
[2020-12-25 08:18:29.015 28172M] Executing: index = 34, preg = 0x7fa64409c3f8, str = "afd-k.office.com", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:18:32.039 28172M] Regex whitelist (34, DB ID 1030) NO match: "afd-k.office.com" vs. "(\.|^)windowsupdate.com"
[2020-12-25 08:18:32.039 28172M] Executing: index = 35, preg = 0x7fa64409c420, str = "afd-k.office.com", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:18:35.653 28172M] Regex whitelist (35, DB ID 1031) NO match: "afd-k.office.com" vs. "(\.|^)windowsupdate.microsoft.com"
[2020-12-25 08:18:35.653 28172M] Executing: index = 36, preg = 0x7fa64409c448, str = "afd-k.office.com", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:18:39.818 28172M] Regex whitelist (36, DB ID 1032) NO match: "afd-k.office.com" vs. "(\.|^)update.microsoft.com"
[2020-12-25 08:18:39.818 28172M] Executing: index = 37, preg = 0x7fa64409c470, str = "afd-k.office.com", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:18:43.941 28172M] Regex whitelist (37, DB ID 1033) NO match: "afd-k.office.com" vs. "(\.|^)download.windowsupdate.com"
[2020-12-25 08:18:43.941 28172M] Executing: index = 0, preg = 0x7fa6440559d8, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:18:48.670 28172M] Regex blacklist (0, DB ID 444) NO match: "afd-k.office.com" vs. "(^|\.)blueswan\.io$"
[2020-12-25 08:18:48.670 28172M] Executing: index = 1, preg = 0x7fa644055a00, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:18:54.573 28172M] Regex blacklist (1, DB ID 445) NO match: "afd-k.office.com" vs. "(^|\.)disqus\.com$"
[2020-12-25 08:18:54.573 28172M] Executing: index = 2, preg = 0x7fa644055a28, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:19:00.171 28172M] Regex blacklist (2, DB ID 446) NO match: "afd-k.office.com" vs. "(^|\.)disquscdn\.com$"
[2020-12-25 08:19:00.171 28172M] Executing: index = 3, preg = 0x7fa644055a50, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:19:07.670 28172M] Regex blacklist (3, DB ID 447) NO match: "afd-k.office.com" vs. "^(.+[-_.])??adse?rv(er?|ice)?s?[0-9]*[-.]"
[2020-12-25 08:19:07.670 28172M] Executing: index = 4, preg = 0x7fa644055a78, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:19:15.976 28172M] Regex blacklist (4, DB ID 448) NO match: "afd-k.office.com" vs. "^(.+[-_.])??m?ad[sxv]?[0-9]*[-_.]"
[2020-12-25 08:19:15.976 28172M] Executing: index = 5, preg = 0x7fa644055aa0, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:19:26.205 28172M] Regex blacklist (5, DB ID 449) NO match: "afd-k.office.com" vs. "^(.+[-_.])??xn--"
[2020-12-25 08:19:26.206 28172M] Executing: index = 6, preg = 0x7fa644055ac8, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:19:32.548 28172M] Regex blacklist (6, DB ID 450) NO match: "afd-k.office.com" vs. "^adim(age|g)s?[0-9]*[-_.]"
[2020-12-25 08:19:32.548 28172M] Executing: index = 7, preg = 0x7fa644055af0, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:19:40.686 28172M] Regex blacklist (7, DB ID 452) NO match: "afd-k.office.com" vs. "^advert(s|is(ing|ements?))?[0-9]*[-_.]"
[2020-12-25 08:19:40.686 28172M] Executing: index = 8, preg = 0x7fa644055b18, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:19:48.708 28172M] Regex blacklist (8, DB ID 453) NO match: "afd-k.office.com" vs. "^aff(iliat(es?|ion))?[-.]"
[2020-12-25 08:19:48.708 28172M] Executing: index = 9, preg = 0x7fa644055b40, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:19:59.335 28172M] Regex blacklist (9, DB ID 454) NO match: "afd-k.office.com" vs. "^analytics?[-.]"
[2020-12-25 08:19:59.335 28172M] Executing: index = 10, preg = 0x7fa644055b68, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:20:03.811 28172M] Regex blacklist (10, DB ID 455) NO match: "afd-k.office.com" vs. "^banners?[-.]"
[2020-12-25 08:20:03.811 28172M] Executing: index = 11, preg = 0x7fa644055b90, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:20:03.994 28172M] Regex blacklist (11, DB ID 456) NO match: "afd-k.office.com" vs. "^beacons?[0-9]*[-.]"
[2020-12-25 08:20:03.994 28172M] Executing: index = 12, preg = 0x7fa644055bb8, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:20:04.140 28172M] Regex blacklist (12, DB ID 457) NO match: "afd-k.office.com" vs. "^count(ers?)?[0-9]*[-.]"
[2020-12-25 08:20:04.140 28172M] Executing: index = 13, preg = 0x7fa644055be0, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:20:04.369 28172M] Regex blacklist (13, DB ID 458) NO match: "afd-k.office.com" vs. "^pixels?[-.]"
[2020-12-25 08:20:04.369 28172M] Executing: index = 14, preg = 0x7fa644055c08, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:20:04.657 28172M] Regex blacklist (14, DB ID 459) NO match: "afd-k.office.com" vs. "^stat(s|istics)?[0-9]*[-.]"
[2020-12-25 08:20:04.657 28172M] Executing: index = 15, preg = 0x7fa644055c30, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:20:04.906 28172M] Regex blacklist (15, DB ID 460) NO match: "afd-k.office.com" vs. "^telemetry[-.]"
[2020-12-25 08:20:04.906 28172M] Executing: index = 16, preg = 0x7fa644055c58, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:20:05.442 28172M] Regex blacklist (16, DB ID 461) NO match: "afd-k.office.com" vs. "^traff(ic)?[-.]"
[2020-12-25 08:20:05.442 28172M] Executing: index = 17, preg = 0x7fa644055c80, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:20:06.305 28172M] Regex blacklist (17, DB ID 462) NO match: "afd-k.office.com" vs. "(^|\.)boloufduj51\.agency$"
[2020-12-25 08:20:06.305 28172M] Executing: index = 18, preg = 0x7fa644055ca8, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:20:07.383 28172M] Regex blacklist (18, DB ID 463) NO match: "afd-k.office.com" vs. "(^|\.)gov\.cn$"
[2020-12-25 08:20:07.383 28172M] Executing: index = 19, preg = 0x7fa644055cd0, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:20:08.636 28172M] Regex blacklist (19, DB ID 464) NO match: "afd-k.office.com" vs. ".*\.g00\..*"
[2020-12-25 08:20:08.636 28172M] Executing: index = 20, preg = 0x7fa644055cf8, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:20:09.982 28172M] Regex blacklist (20, DB ID 465) NO match: "afd-k.office.com" vs. "(^|\.)bdubkeg\.com$"
[2020-12-25 08:20:09.982 28172M] Executing: index = 21, preg = 0x7fa644055d20, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:20:11.721 28172M] Regex blacklist (21, DB ID 534) NO match: "afd-k.office.com" vs. "(\.|^)6dccdha4\.com$"
[2020-12-25 08:20:11.721 28172M] Executing: index = 22, preg = 0x7fa644055d48, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:20:13.496 28172M] Regex blacklist (22, DB ID 544) NO match: "afd-k.office.com" vs. "(\.|^)hansa\.com\.bd$"
[2020-12-25 08:20:13.496 28172M] Executing: index = 23, preg = 0x7fa644055d70, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:20:15.242 28172M] Regex blacklist (23, DB ID 545) NO match: "afd-k.office.com" vs. "(\.|^)www\.bianxingc\.com$"
[2020-12-25 08:20:15.242 28172M] Executing: index = 24, preg = 0x7fa644055d98, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:20:17.372 28172M] Regex blacklist (24, DB ID 546) NO match: "afd-k.office.com" vs. "(\.|^)51\.la$"
[2020-12-25 08:20:17.372 28172M] Executing: index = 25, preg = 0x7fa644055dc0, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:20:19.608 28172M] Regex blacklist (25, DB ID 553) NO match: "afd-k.office.com" vs. "(\.|^)fsisiw3i\.com$"
[2020-12-25 08:20:19.608 28172M] Executing: index = 26, preg = 0x7fa644055de8, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:20:22.114 28172M] Regex blacklist (26, DB ID 560) NO match: "afd-k.office.com" vs. "(^|\.)(cn|ru)$"
[2020-12-25 08:20:22.114 28172M] Executing: index = 27, preg = 0x7fa644055e10, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:20:24.940 28172M] Regex blacklist (27, DB ID 561) NO match: "afd-k.office.com" vs. "(^|\.)popads$"
[2020-12-25 08:20:24.940 28172M] Executing: index = 28, preg = 0x7fa644055e38, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:20:28.252 28172M] Regex blacklist (28, DB ID 563) NO match: "afd-k.office.com" vs. "^popads?[-.]"
[2020-12-25 08:20:28.252 28172M] Executing: index = 29, preg = 0x7fa644055e60, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:20:31.429 28172M] Regex blacklist (29, DB ID 564) NO match: "afd-k.office.com" vs. "^(.+[_.-])?ad([sxv]?[0-9]*|system)[_.-]"
[2020-12-25 08:20:31.429 28172M] Executing: index = 30, preg = 0x7fa644055e88, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:20:35.194 28172M] Regex blacklist (30, DB ID 568) NO match: "afd-k.office.com" vs. "^adtrack(er|ing)?[0-9]*[_.-]"
[2020-12-25 08:20:35.194 28172M] Executing: index = 31, preg = 0x7fa644055eb0, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:20:38.775 28172M] Regex blacklist (31, DB ID 570) NO match: "afd-k.office.com" vs. "^mads\."
[2020-12-25 08:20:38.775 28172M] Executing: index = 32, preg = 0x7fa644055ed8, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:20:42.643 28172M] Regex blacklist (32, DB ID 574) NO match: "afd-k.office.com" vs. "(\.|^)wpu\.sh$"
[2020-12-25 08:20:42.643 28172M] Executing: index = 33, preg = 0x7fa644055f00, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:20:46.807 28172M] Regex blacklist (33, DB ID 579) NO match: "afd-k.office.com" vs. ".*\.g0[0-9]+\..*"
[2020-12-25 08:20:46.807 28172M] Executing: index = 34, preg = 0x7fa644055f28, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:20:50.977 28172M] Regex blacklist (34, DB ID 1042) NO match: "afd-k.office.com" vs. "^(.+[_.-])?amp(project)?\."
[2020-12-25 08:20:50.977 28172M] Executing: index = 35, preg = 0x7fa644055f50, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:20:55.962 28172M] Regex blacklist (35, DB ID 1044) NO match: "afd-k.office.com" vs. "^ad([sxv]?[0-9]*|system)[_.-]([^.[:space:]]+\.){1,}|[_.-]ad([sxv]?[0-9]*|system)[_.-]"
[2020-12-25 08:20:55.962 28172M] Executing: index = 36, preg = 0x7fa644055f78, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:21:01.740 28172M] Regex blacklist (36, DB ID 1045) NO match: "afd-k.office.com" vs. "^(.+[_.-])?adse?rv(er?|ice)?s?[0-9]*[_.-]"
[2020-12-25 08:21:01.740 28172M] Executing: index = 37, preg = 0x7fa644055fa0, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:21:09.756 28172M] Regex blacklist (37, DB ID 1046) NO match: "afd-k.office.com" vs. "^(.+[_.-])?telemetry[_.-]"
[2020-12-25 08:21:09.756 28172M] Executing: index = 38, preg = 0x7fa644055fc8, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:21:19.383 28172M] Regex blacklist (38, DB ID 1047) NO match: "afd-k.office.com" vs. "^adim(age|g)s?[0-9]*[_.-]"
[2020-12-25 08:21:19.384 28172M] Executing: index = 39, preg = 0x7fa644055ff0, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:21:27.074 28172M] Regex blacklist (39, DB ID 1048) NO match: "afd-k.office.com" vs. "^advert(s|is(ing|ements?))?[0-9]*[_.-]"
[2020-12-25 08:21:27.074 28172M] Executing: index = 40, preg = 0x7fa644056018, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:21:35.979 28172M] Regex blacklist (40, DB ID 1049) NO match: "afd-k.office.com" vs. "^analytics?[_.-]"
[2020-12-25 08:21:35.979 28172M] Executing: index = 41, preg = 0x7fa644056040, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:21:45.457 28172M] Regex blacklist (41, DB ID 1050) NO match: "afd-k.office.com" vs. "^banners?[_.-]"
[2020-12-25 08:21:45.457 28172M] Executing: index = 42, preg = 0x7fa644056068, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:21:56.206 28172M] Regex blacklist (42, DB ID 1051) NO match: "afd-k.office.com" vs. "^beacons?[0-9]*[_.-]"
[2020-12-25 08:21:56.206 28172M] Executing: index = 43, preg = 0x7fa644056090, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:22:02.265 28172M] Regex blacklist (43, DB ID 1052) NO match: "afd-k.office.com" vs. "^count(ers?)?[0-9]*[_.-]"
[2020-12-25 08:22:02.265 28172M] Executing: index = 44, preg = 0x7fa6440560b8, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:22:02.333 28172M] Regex blacklist (44, DB ID 1053) NO match: "afd-k.office.com" vs. "^stat(s|istics)?[0-9]*[_.-]"
[2020-12-25 08:22:02.333 28172M] Executing: index = 45, preg = 0x7fa6440560e0, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:22:02.360 28172M] Regex blacklist (45, DB ID 1054) NO match: "afd-k.office.com" vs. "^(.+[_.-])?dnsdelegation\.io$"
[2020-12-25 08:22:02.360 28172M] Executing: index = 46, preg = 0x7fa644056108, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:22:02.446 28172M] Regex blacklist (46, DB ID 1055) NO match: "afd-k.office.com" vs. "^(.+[_.-])?eulerian\.net$"
[2020-12-25 08:22:02.446 28172M] Executing: index = 47, preg = 0x7fa644056130, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:22:02.497 28172M] Regex blacklist (47, DB ID 1065) NO match: "afd-k.office.com" vs. "^(.+\.)?amp\..+\.com$"
[2020-12-25 08:22:02.497 28172M] Executing: index = 48, preg = 0x7fa644056158, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:22:02.591 28172M] Regex blacklist (48, DB ID 1066) NO match: "afd-k.office.com" vs. "^(.+\.)?ampproject\.org$"
[2020-12-25 08:22:02.591 28172M] Executing: index = 49, preg = 0x7fa644056180, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:22:02.705 28172M] Regex blacklist (49, DB ID 1067) NO match: "afd-k.office.com" vs. "^(.+\.)?amp\.cloudflare\.com$"
[2020-12-25 08:22:02.705 28172M] Executing: index = 50, preg = 0x7fa6440561a8, str = "afd-k.office.com", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:22:02.883 28172M] Regex blacklist (50, DB ID 1068) NO match: "afd-k.office.com" vs. "^(.+\.)?cdn\.ampproject\.org$"
[2020-12-25 08:22:02.974 28172M] Executing: index = 0, preg = 0x7fa64409bea8, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:22:03.144 28172M] Regex whitelist (0, DB ID 645) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)netflix\.com$"
[2020-12-25 08:22:03.144 28172M] Executing: index = 1, preg = 0x7fa64409bed0, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:22:03.411 28172M] Regex whitelist (1, DB ID 646) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)netflix\.net$"
[2020-12-25 08:22:03.411 28172M] Executing: index = 2, preg = 0x7fa64409bef8, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:22:03.570 28172M] Regex whitelist (2, DB ID 647) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)nflxext\.com$"
[2020-12-25 08:22:03.570 28172M] Executing: index = 3, preg = 0x7fa64409bf20, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:22:04.072 28172M] Regex whitelist (3, DB ID 648) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)nflximg\.com$"
[2020-12-25 08:22:04.072 28172M] Executing: index = 4, preg = 0x7fa64409bf48, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:22:04.932 28172M] Regex whitelist (4, DB ID 649) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)nflximg\.net$"
[2020-12-25 08:22:04.932 28172M] Executing: index = 5, preg = 0x7fa64409bf70, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:22:06.070 28172M] Regex whitelist (5, DB ID 650) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)nflxso\.net$"
[2020-12-25 08:22:06.070 28172M] Executing: index = 6, preg = 0x7fa64409bf98, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:22:07.333 28172M] Regex whitelist (6, DB ID 651) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)nflxvideo\.net$"
[2020-12-25 08:22:07.333 28172M] Executing: index = 7, preg = 0x7fa64409bfc0, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:22:08.727 28172M] Regex whitelist (7, DB ID 652) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)fast\.com$"
[2020-12-25 08:22:08.727 28172M] Executing: index = 8, preg = 0x7fa64409bfe8, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:22:10.436 28172M] Regex whitelist (8, DB ID 653) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)dota2\.wmsj\.cn$"
[2020-12-25 08:22:10.436 28172M] Executing: index = 9, preg = 0x7fa64409c010, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:22:12.220 28172M] Regex whitelist (9, DB ID 654) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)csgo\.wmsj\.cn$"
[2020-12-25 08:22:12.220 28172M] Executing: index = 10, preg = 0x7fa64409c038, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:22:14.482 28172M] Regex whitelist (10, DB ID 703) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)googlevideo\.com$"
[2020-12-25 08:22:14.482 28172M] Executing: index = 11, preg = 0x7fa64409c060, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:22:16.860 28172M] Regex whitelist (11, DB ID 716) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)ooklaserver\.net$"
[2020-12-25 08:22:16.860 28172M] Executing: index = 12, preg = 0x7fa64409c088, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:22:19.435 28172M] Regex whitelist (12, DB ID 725) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)ebay.com.edgekey.net"
[2020-12-25 08:22:19.435 28172M] Executing: index = 13, preg = 0x7fa64409c0b0, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:22:22.136 28172M] Regex whitelist (13, DB ID 860) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)arkoselabs.com"
[2020-12-25 08:22:22.136 28172M] Executing: index = 14, preg = 0x7fa64409c0d8, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:22:25.054 28172M] Regex whitelist (14, DB ID 861) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)dropbox.com"
[2020-12-25 08:22:25.054 28172M] Executing: index = 15, preg = 0x7fa64409c100, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:22:28.614 28172M] Regex whitelist (15, DB ID 862) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)dropboxusercontent.com"
[2020-12-25 08:22:28.614 28172M] Executing: index = 16, preg = 0x7fa64409c128, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:22:32.084 28172M] Regex whitelist (16, DB ID 863) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)dropboxstatic.com"
[2020-12-25 08:22:32.084 28172M] Executing: index = 17, preg = 0x7fa64409c150, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:22:36.098 28172M] Regex whitelist (17, DB ID 865) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)dropboxcaptcha.com"
[2020-12-25 08:22:36.099 28172M] Executing: index = 18, preg = 0x7fa64409c178, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:22:39.753 28172M] Regex whitelist (18, DB ID 868) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)imgbox.com"
[2020-12-25 08:22:39.753 28172M] Executing: index = 19, preg = 0x7fa64409c1a0, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:22:44.414 28172M] Regex whitelist (19, DB ID 869) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)3m.com"
[2020-12-25 08:22:44.414 28172M] Executing: index = 20, preg = 0x7fa64409c1c8, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:22:48.960 28172M] Regex whitelist (20, DB ID 875) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)maxmind.com"
[2020-12-25 08:22:48.960 28172M] Executing: index = 21, preg = 0x7fa64409c1f0, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:22:54.995 28172M] Regex whitelist (21, DB ID 884) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)dropbox-dns.com"
[2020-12-25 08:22:54.995 28172M] Executing: index = 22, preg = 0x7fa64409c218, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:23:00.377 28172M] Regex whitelist (22, DB ID 889) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)giphy.com"
[2020-12-25 08:23:00.377 28172M] Executing: index = 23, preg = 0x7fa64409c240, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:23:05.108 28172M] Regex whitelist (23, DB ID 897) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)s81c.com"
[2020-12-25 08:23:05.108 28172M] Executing: index = 24, preg = 0x7fa64409c268, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:23:11.805 28172M] Regex whitelist (24, DB ID 900) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)mega.co.nz"
[2020-12-25 08:23:11.805 28172M] Executing: index = 25, preg = 0x7fa64409c290, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:23:18.064 28172M] Regex whitelist (25, DB ID 906) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)gigya.com"
[2020-12-25 08:23:18.064 28172M] Executing: index = 26, preg = 0x7fa64409c2b8, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:23:24.595 28172M] Regex whitelist (26, DB ID 909) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)he.net"
[2020-12-25 08:23:24.595 28172M] Executing: index = 27, preg = 0x7fa64409c2e0, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:23:31.536 28172M] Regex whitelist (27, DB ID 915) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)ac.jp"
[2020-12-25 08:23:31.536 28172M] Executing: index = 28, preg = 0x7fa64409c308, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:23:38.214 28172M] Regex whitelist (28, DB ID 916) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)ad.jp"
[2020-12-25 08:23:38.214 28172M] Executing: index = 29, preg = 0x7fa64409c330, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:23:45.983 28172M] Regex whitelist (29, DB ID 917) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)edu.cn"
[2020-12-25 08:23:45.983 28172M] Executing: index = 30, preg = 0x7fa64409c358, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:24:00.704 28172M] Regex whitelist (30, DB ID 924) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)windowsupdate\.microsoft\.com$"
[2020-12-25 08:24:00.704 28172M] Executing: index = 31, preg = 0x7fa64409c380, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:24:03.391 28172M] Regex whitelist (31, DB ID 925) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)update\.microsoft\.com$"
[2020-12-25 08:24:03.391 28172M] Executing: index = 32, preg = 0x7fa64409c3a8, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:24:03.480 28172M] Regex whitelist (32, DB ID 926) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)windowsupdate\.com$"
[2020-12-25 08:24:03.480 28172M] Executing: index = 33, preg = 0x7fa64409c3d0, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:24:03.529 28172M] Regex whitelist (33, DB ID 945) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)github.com"
[2020-12-25 08:24:03.529 28172M] Executing: index = 34, preg = 0x7fa64409c3f8, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:24:03.605 28172M] Regex whitelist (34, DB ID 1030) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)windowsupdate.com"
[2020-12-25 08:24:03.605 28172M] Executing: index = 35, preg = 0x7fa64409c420, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:24:03.692 28172M] Regex whitelist (35, DB ID 1031) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)windowsupdate.microsoft.com"
[2020-12-25 08:24:03.692 28172M] Executing: index = 36, preg = 0x7fa64409c448, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:24:03.788 28172M] Regex whitelist (36, DB ID 1032) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)update.microsoft.com"
[2020-12-25 08:24:03.788 28172M] Executing: index = 37, preg = 0x7fa64409c470, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6a0
[2020-12-25 08:24:03.928 28172M] Regex whitelist (37, DB ID 1033) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)download.windowsupdate.com"
[2020-12-25 08:24:03.929 28172M] Executing: index = 0, preg = 0x7fa6440559d8, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:24:04.089 28172M] Regex blacklist (0, DB ID 444) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(^|\.)blueswan\.io$"
[2020-12-25 08:24:04.089 28172M] Executing: index = 1, preg = 0x7fa644055a00, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:24:04.279 28172M] Regex blacklist (1, DB ID 445) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(^|\.)disqus\.com$"
[2020-12-25 08:24:04.279 28172M] Executing: index = 2, preg = 0x7fa644055a28, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:24:04.503 28172M] Regex blacklist (2, DB ID 446) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(^|\.)disquscdn\.com$"
[2020-12-25 08:24:04.503 28172M] Executing: index = 3, preg = 0x7fa644055a50, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:24:04.718 28172M] Regex blacklist (3, DB ID 447) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "^(.+[-_.])??adse?rv(er?|ice)?s?[0-9]*[-.]"
[2020-12-25 08:24:04.718 28172M] Executing: index = 4, preg = 0x7fa644055a78, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:24:05.300 28172M] Regex blacklist (4, DB ID 448) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "^(.+[-_.])??m?ad[sxv]?[0-9]*[-_.]"
[2020-12-25 08:24:05.300 28172M] Executing: index = 5, preg = 0x7fa644055aa0, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:24:06.142 28172M] Regex blacklist (5, DB ID 449) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "^(.+[-_.])??xn--"
[2020-12-25 08:24:06.142 28172M] Executing: index = 6, preg = 0x7fa644055ac8, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:24:07.237 28172M] Regex blacklist (6, DB ID 450) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "^adim(age|g)s?[0-9]*[-_.]"
[2020-12-25 08:24:07.237 28172M] Executing: index = 7, preg = 0x7fa644055af0, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:24:08.486 28172M] Regex blacklist (7, DB ID 452) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "^advert(s|is(ing|ements?))?[0-9]*[-_.]"
[2020-12-25 08:24:08.486 28172M] Executing: index = 8, preg = 0x7fa644055b18, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:24:10.017 28172M] Regex blacklist (8, DB ID 453) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "^aff(iliat(es?|ion))?[-.]"
[2020-12-25 08:24:10.017 28172M] Executing: index = 9, preg = 0x7fa644055b40, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:24:11.544 28172M] Regex blacklist (9, DB ID 454) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "^analytics?[-.]"
[2020-12-25 08:24:11.544 28172M] Executing: index = 10, preg = 0x7fa644055b68, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:24:13.470 28172M] Regex blacklist (10, DB ID 455) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "^banners?[-.]"
[2020-12-25 08:24:13.470 28172M] Executing: index = 11, preg = 0x7fa644055b90, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:24:15.423 28172M] Regex blacklist (11, DB ID 456) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "^beacons?[0-9]*[-.]"
[2020-12-25 08:24:15.423 28172M] Executing: index = 12, preg = 0x7fa644055bb8, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:24:17.784 28172M] Regex blacklist (12, DB ID 457) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "^count(ers?)?[0-9]*[-.]"
[2020-12-25 08:24:17.784 28172M] Executing: index = 13, preg = 0x7fa644055be0, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:24:20.530 28172M] Regex blacklist (13, DB ID 458) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "^pixels?[-.]"
[2020-12-25 08:24:20.530 28172M] Executing: index = 14, preg = 0x7fa644055c08, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:24:23.193 28172M] Regex blacklist (14, DB ID 459) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "^stat(s|istics)?[0-9]*[-.]"
[2020-12-25 08:24:23.193 28172M] Executing: index = 15, preg = 0x7fa644055c30, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:24:26.267 28172M] Regex blacklist (15, DB ID 460) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "^telemetry[-.]"
[2020-12-25 08:24:26.267 28172M] Executing: index = 16, preg = 0x7fa644055c58, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:24:29.649 28172M] Regex blacklist (16, DB ID 461) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "^traff(ic)?[-.]"
[2020-12-25 08:24:29.649 28172M] Executing: index = 17, preg = 0x7fa644055c80, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:24:33.312 28172M] Regex blacklist (17, DB ID 462) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(^|\.)boloufduj51\.agency$"
[2020-12-25 08:24:33.312 28172M] Executing: index = 18, preg = 0x7fa644055ca8, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:24:36.727 28172M] Regex blacklist (18, DB ID 463) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(^|\.)gov\.cn$"
[2020-12-25 08:24:36.727 28172M] Executing: index = 19, preg = 0x7fa644055cd0, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:24:40.469 28172M] Regex blacklist (19, DB ID 464) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. ".*\.g00\..*"
[2020-12-25 08:24:40.469 28172M] Executing: index = 20, preg = 0x7fa644055cf8, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:24:44.764 28172M] Regex blacklist (20, DB ID 465) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(^|\.)bdubkeg\.com$"
[2020-12-25 08:24:44.764 28172M] Executing: index = 21, preg = 0x7fa644055d20, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:24:50.083 28172M] Regex blacklist (21, DB ID 534) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)6dccdha4\.com$"
[2020-12-25 08:24:50.083 28172M] Executing: index = 22, preg = 0x7fa644055d48, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:24:54.770 28172M] Regex blacklist (22, DB ID 544) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)hansa\.com\.bd$"
[2020-12-25 08:24:54.770 28172M] Executing: index = 23, preg = 0x7fa644055d70, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:25:00.133 28172M] Regex blacklist (23, DB ID 545) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)www\.bianxingc\.com$"
[2020-12-25 08:25:00.133 28172M] Executing: index = 24, preg = 0x7fa644055d98, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:25:09.862 28172M] Regex blacklist (24, DB ID 546) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)51\.la$"
[2020-12-25 08:25:09.862 28172M] Executing: index = 25, preg = 0x7fa644055dc0, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6f0
[2020-12-25 08:25:17.502 28172M] Regex blacklist (25, DB ID 553) NO match: "outlook-office-com.k-0002.k-msedge.net" vs. "(\.|^)fsisiw3i\.com$"
[2020-12-25 08:25:17.502 28172M] Executing: index = 26, preg = 0x7fa644055de8, str = "outlook-office-com.k-0002.k-msedge.net", pmatch = 0x7ffcf049d6f0
❯ tail -n 50 /var/log/pihole.log
Dec 25 07:42:42 dnsmasq[28172]: forwarded update.appwork.org to 127.53.53.4
Dec 25 07:42:42 dnsmasq[28172]: query[PTR] 13.160.118.92.in-addr.arpa from 10.0.0.1
Dec 25 07:42:42 dnsmasq[28172]: forwarded 13.160.118.92.in-addr.arpa to 127.53.53.4
Dec 25 07:42:42 dnsmasq[28172]: reply update.appwork.org is 176.9.34.43
Dec 25 07:42:42 dnsmasq[28172]: reply update.appwork.org is 176.9.34.43
Dec 25 07:42:42 dnsmasq[28172]: query[A] www.bing.com from 10.0.0.100
Dec 25 07:47:51 dnsmasq[28172]: forwarded www.bing.com to 127.53.53.4
Dec 25 07:47:58 dnsmasq[28172]: reply www.bing.com is <CNAME>
Dec 25 07:52:18 dnsmasq[28172]: reply a-0001.a-afdentry.net.trafficmanager.net is <CNAME>
Dec 25 07:57:40 dnsmasq[28172]: reply www-bing-com.dual-a-0001.a-msedge.net is <CNAME>
Dec 25 08:02:10 dnsmasq[28172]: ipset add microsoft 13.107.21.200 dual-a-0001.a-msedge.net
Dec 25 08:02:10 dnsmasq[28172]: reply dual-a-0001.a-msedge.net is 13.107.21.200
Dec 25 08:02:10 dnsmasq[28172]: ipset add microsoft 204.79.197.200 dual-a-0001.a-msedge.net
Dec 25 08:02:10 dnsmasq[28172]: reply dual-a-0001.a-msedge.net is 204.79.197.200
Dec 25 08:02:10 dnsmasq[28172]: failed to send packet: Network is unreachable
Dec 25 08:02:10 dnsmasq[28172]: reply 92.118.160.13 is 92.118.160.13.netsystemsresearch.com
Dec 25 08:02:10 dnsmasq[28172]: failed to send packet: Network is unreachable
Dec 25 08:02:10 dnsmasq[28172]: query[A] www.bing.com from 10.0.0.100
Dec 25 08:02:10 dnsmasq[28172]: cached www.bing.com is <CNAME>
Dec 25 08:02:10 dnsmasq[28172]: cached a-0001.a-afdentry.net.trafficmanager.net is <CNAME>
Dec 25 08:02:10 dnsmasq[28172]: cached www-bing-com.dual-a-0001.a-msedge.net is <CNAME>
Dec 25 08:02:10 dnsmasq[28172]: cached dual-a-0001.a-msedge.net is 204.79.197.200
Dec 25 08:02:10 dnsmasq[28172]: cached dual-a-0001.a-msedge.net is 13.107.21.200
Dec 25 08:02:10 dnsmasq[28172]: failed to send packet: Network is unreachable
Dec 25 08:02:10 dnsmasq[28172]: query[A] substrate.office.com from 10.0.0.100
Dec 25 08:06:38 dnsmasq[28172]: forwarded substrate.office.com to 127.53.53.4
Dec 25 08:06:38 dnsmasq[28172]: query[PTR] 35.12.126.40.in-addr.arpa from 10.0.0.100
Dec 25 08:06:38 dnsmasq[28172]: forwarded 35.12.126.40.in-addr.arpa to 127.53.53.4
Dec 25 08:06:38 dnsmasq[28172]: query[A] substrate.office.com from 10.0.0.100
Dec 25 08:06:38 dnsmasq[28172]: forwarded substrate.office.com to 127.53.53.4
Dec 25 08:06:38 dnsmasq[28172]: query[PTR] 35.12.126.40.in-addr.arpa from 10.0.0.100
Dec 25 08:06:38 dnsmasq[28172]: forwarded 35.12.126.40.in-addr.arpa to 127.53.53.4
Dec 25 08:06:38 dnsmasq[28172]: query[A] www.bing.com from 10.0.0.100
Dec 25 08:06:38 dnsmasq[28172]: cached www.bing.com is <CNAME>
Dec 25 08:06:38 dnsmasq[28172]: forwarded www.bing.com to 127.53.53.4
Dec 25 08:06:38 dnsmasq[28172]: query[A] update.appwork.org from 10.0.0.1
Dec 25 08:06:38 dnsmasq[28172]: forwarded update.appwork.org to 127.53.53.4
Dec 25 08:06:38 dnsmasq[28172]: query[A] substrate.office.com from 10.0.0.100
Dec 25 08:06:38 dnsmasq[28172]: forwarded substrate.office.com to 127.53.53.4
Dec 25 08:06:38 dnsmasq[28172]: query[PTR] 35.12.126.40.in-addr.arpa from 10.0.0.100
Dec 25 08:06:38 dnsmasq[28172]: forwarded 35.12.126.40.in-addr.arpa to 127.53.53.4
Dec 25 08:06:38 dnsmasq[28172]: reply update.appwork.org is 176.9.34.43
Dec 25 08:06:38 dnsmasq[28172]: failed to send packet: Network is unreachable
Dec 25 08:06:38 dnsmasq[28172]: query[A] www.google.com from 10.0.0.1
Dec 25 08:12:01 dnsmasq[28172]: forwarded www.google.com to 8.8.8.8
Dec 25 08:12:02 dnsmasq[28172]: failed to send packet: Network is unreachable
Dec 25 08:12:02 dnsmasq[28172]: reply substrate.office.com is <CNAME>
Dec 25 08:16:40 dnsmasq[28172]: reply substrate.ms-acdc.office.com is <CNAME>
Dec 25 08:22:02 dnsmasq[28172]: reply afd-k.office.com is <CNAME>
Dec 25 08:26:19 dnsmasq[28172]: reply outlook-office-com.k-0002.k-msedge.net is <CNAME>
And what does the summary screen show for the
lxccontainer?
coldfire7
on 25 Dec 2020
yea, install as root, i figured if pihole needed a system user, the install would create one, as it will need run as root to bind to any ports < 1024 anyways. this setup has worked for me since 4.x pihole, this particular update has a specific regex issue.
as far as my network goes,
192.168.1.0/24 => main network
192.168.42.0/24 => homelab network (VLAN 42)
192.168.69.0/24 => IoT network (VLAN 69)
using pfSense router and unifi switches. and this has been my setup since the PiHole 4.x days.
Happy to do any additional debugging, etc, post logs, etc, if it would help, just let me know what you need
joeroback
on 25 Dec 2020
192.168.42.0/24 => homelab network (VLAN 42)
It may not be anything but check /etc/pihole/setupVars.conf for the IPv4 address. It's on a different subnet.
dschaper
on 25 Dec 2020
yea, i corrected the ips in setupVars.conf and local.list and still same behavior.
joeroback
on 25 Dec 2020
Can you add the debug command to your pihole-FTL.conf as well please?
dschaper
on 25 Dec 2020
tailing after enabling debug_regex, the entire time this log is being tailed I am in another terminal doing
time host app-measurement.com 192.168.42.42 1 ↵
;; connection timed out; no servers could be reached
real: 10.00s user: 0.01s sys: 0.00s
If i disable the regex (mine is a whitelist regex for Roomba)
$ time host app-measurement.com 192.168.42.42
Using domain server:
Name: 192.168.42.42
Address: 192.168.42.42#53
Aliases:
app-measurement.com has address 0.0.0.0
app-measurement.com has IPv6 address ::
app-measurement.com has address 0.0.0.0
real: 0.02s user: 0.01s sys: 0.00s
[2020-12-24 20:14:33.025 267M] PID of FTL process: 267
[2020-12-24 20:14:33.026 267M] INFO: FTL is running as user pihole (UID 998)
[2020-12-24 20:14:33.026 267M] Reloading DNS cache
[2020-12-24 20:14:33.026 267M] Blocking status is enabled
[2020-12-24 20:14:33.027 267M] *****************************
[2020-12-24 20:14:33.027 267M] * Debugging enabled *
[2020-12-24 20:14:33.027 267M] * DEBUG_DATABASE NO *
[2020-12-24 20:14:33.027 267M] * DEBUG_NETWORKING NO *
[2020-12-24 20:14:33.027 267M] * DEBUG_LOCKS NO *
[2020-12-24 20:14:33.027 267M] * DEBUG_QUERIES NO *
[2020-12-24 20:14:33.027 267M] * DEBUG_FLAGS NO *
[2020-12-24 20:14:33.027 267M] * DEBUG_SHMEM NO *
[2020-12-24 20:14:33.027 267M] * DEBUG_GC NO *
[2020-12-24 20:14:33.027 267M] * DEBUG_ARP NO *
[2020-12-24 20:14:33.027 267M] * DEBUG_REGEX YES *
[2020-12-24 20:14:33.027 267M] * DEBUG_API NO *
[2020-12-24 20:14:33.027 267M] * DEBUG_OVERTIME NO *
[2020-12-24 20:14:33.027 267M] * DEBUG_EXTBLOCKED NO *
[2020-12-24 20:14:33.027 267M] * DEBUG_CAPS NO *
[2020-12-24 20:14:33.027 267M] * DEBUG_DNSMASQ_LINES NO *
[2020-12-24 20:14:33.027 267M] * DEBUG_VECTORS NO *
[2020-12-24 20:14:33.027 267M] * DEBUG_RESOLVER NO *
[2020-12-24 20:14:33.027 267M] * DEBUG_EDNS0 NO *
[2020-12-24 20:14:33.027 267M] * DEBUG_CLIENTS NO *
[2020-12-24 20:14:33.027 267M] * DEBUG_ALIASCLIENTS NO *
[2020-12-24 20:14:33.028 267M] * DEBUG_EVENTS NO *
[2020-12-24 20:14:33.028 267M] * DEBUG_HELPER NO *
[2020-12-24 20:14:33.028 267M] * DEBUG_EXTRA NO *
[2020-12-24 20:14:33.028 267M] *****************************
[2020-12-24 20:14:33.032 267/T269] Listening on port 4711 for incoming IPv4 telnet connections
[2020-12-24 20:14:33.032 267/T270] Listening on port 4711 for incoming IPv6 telnet connections
[2020-12-24 20:14:33.032 267/T271] Listening on Unix socket
[2020-12-24 20:14:33.044 267/T272] Compiled 0 whitelist and 0 blacklist regex filters for 36 clients in 0.3 msec
[2020-12-24 20:15:53.952 267M] Received: Real-time signal 0 (34 -> 0)
[2020-12-24 20:15:53.960 267/T272] Compiling whitelist regex 0 (DB ID 3): (\.|^)app-measurement\.com$
[2020-12-24 20:15:53.960 267/T272] Getting regex client groups for client with ID 0
[2020-12-24 20:15:53.961 267/T272] Regex whitelist: Querying groups for client 192.168.69.25: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:53.961 267/T272] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.69.25
[2020-12-24 20:15:53.961 267/T272] Getting regex client groups for client with ID 1
[2020-12-24 20:15:53.962 267/T272] Regex whitelist: Querying groups for client 192.168.69.22: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:53.962 267/T272] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.69.22
[2020-12-24 20:15:53.962 267/T272] Getting regex client groups for client with ID 2
[2020-12-24 20:15:53.962 267/T272] Regex whitelist: Querying groups for client 192.168.69.21: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:53.962 267/T272] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.69.21
[2020-12-24 20:15:53.962 267/T272] Getting regex client groups for client with ID 3
[2020-12-24 20:15:53.963 267/T272] Regex whitelist: Querying groups for client 192.168.69.72: "SELECT id from vw_regex_whitelist WHERE group_id IN (1);"
[2020-12-24 20:15:53.963 267/T272] Getting regex client groups for client with ID 4
[2020-12-24 20:15:53.963 267/T272] Regex whitelist: Querying groups for client 192.168.69.23: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:53.963 267/T272] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.69.23
[2020-12-24 20:15:53.963 267/T272] Getting regex client groups for client with ID 5
[2020-12-24 20:15:53.964 267/T272] Regex whitelist: Querying groups for client 192.168.69.24: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:53.964 267/T272] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.69.24
[2020-12-24 20:15:53.964 267/T272] Getting regex client groups for client with ID 6
[2020-12-24 20:15:53.964 267/T272] Regex whitelist: Querying groups for client 192.168.69.105: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:53.965 267/T272] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.69.105
[2020-12-24 20:15:53.965 267/T272] Getting regex client groups for client with ID 7
[2020-12-24 20:15:53.965 267/T272] Regex whitelist: Querying groups for client 192.168.69.20: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:53.965 267/T272] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.69.20
[2020-12-24 20:15:53.965 267/T272] Getting regex client groups for client with ID 8
[2020-12-24 20:15:53.966 267/T272] Regex whitelist: Querying groups for client 192.168.69.100: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:53.966 267/T272] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.69.100
[2020-12-24 20:15:53.966 267/T272] Getting regex client groups for client with ID 9
[2020-12-24 20:15:53.966 267/T272] Regex whitelist: Querying groups for client 192.168.69.70: "SELECT id from vw_regex_whitelist WHERE group_id IN (1);"
[2020-12-24 20:15:53.966 267/T272] Getting regex client groups for client with ID 10
[2020-12-24 20:15:53.967 267/T272] Regex whitelist: Querying groups for client 192.168.1.102: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:53.967 267/T272] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.1.102
[2020-12-24 20:15:53.967 267/T272] Getting regex client groups for client with ID 11
[2020-12-24 20:15:53.967 267/T272] Regex whitelist: Querying groups for client 192.168.1.30: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:53.967 267/T272] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.1.30
[2020-12-24 20:15:53.967 267/T272] Getting regex client groups for client with ID 12
[2020-12-24 20:15:53.968 267/T272] Regex whitelist: Querying groups for client 192.168.1.101: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:53.968 267/T272] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.1.101
[2020-12-24 20:15:53.968 267/T272] Getting regex client groups for client with ID 13
[2020-12-24 20:15:53.968 267/T272] Regex whitelist: Querying groups for client 192.168.1.90: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:53.969 267/T272] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.1.90
[2020-12-24 20:15:53.969 267/T272] Getting regex client groups for client with ID 14
[2020-12-24 20:15:53.969 267/T272] Regex whitelist: Querying groups for client 192.168.1.106: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:53.969 267/T272] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.1.106
[2020-12-24 20:15:53.969 267/T272] Getting regex client groups for client with ID 15
[2020-12-24 20:15:53.970 267/T272] Regex whitelist: Querying groups for client 192.168.69.102: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:53.970 267/T272] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.69.102
[2020-12-24 20:15:53.970 267/T272] Getting regex client groups for client with ID 16
[2020-12-24 20:15:53.970 267/T272] Regex whitelist: Querying groups for client 192.168.69.106: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:53.970 267/T272] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.69.106
[2020-12-24 20:15:53.970 267/T272] Getting regex client groups for client with ID 17
[2020-12-24 20:15:53.971 267/T272] Regex whitelist: Querying groups for client 192.168.69.101: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:53.971 267/T272] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.69.101
[2020-12-24 20:15:53.971 267/T272] Getting regex client groups for client with ID 18
[2020-12-24 20:15:53.972 267/T272] Regex whitelist: Querying groups for client 192.168.69.104: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:53.972 267/T272] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.69.104
[2020-12-24 20:15:53.972 267/T272] Getting regex client groups for client with ID 19
[2020-12-24 20:15:53.973 267/T272] Regex whitelist: Querying groups for client 192.168.69.31: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:53.973 267/T272] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.69.31
[2020-12-24 20:15:53.973 267/T272] Getting regex client groups for client with ID 20
[2020-12-24 20:15:53.973 267/T272] Regex whitelist: Querying groups for client 192.168.69.30: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:53.973 267/T272] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.69.30
[2020-12-24 20:15:53.973 267/T272] Getting regex client groups for client with ID 21
[2020-12-24 20:15:53.974 267/T272] Regex whitelist: Querying groups for client 127.0.0.1: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:53.974 267/T272] Regex whitelist: Enabling regex with DB ID 3 for client 127.0.0.1
[2020-12-24 20:15:53.974 267/T272] Getting regex client groups for client with ID 22
[2020-12-24 20:15:53.974 267/T272] Regex whitelist: Querying groups for client 192.168.1.13: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:53.974 267/T272] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.1.13
[2020-12-24 20:15:53.975 267/T272] Getting regex client groups for client with ID 23
[2020-12-24 20:15:53.975 267/T272] Regex whitelist: Querying groups for client 192.168.69.103: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:53.975 267/T272] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.69.103
[2020-12-24 20:15:53.975 267/T272] Getting regex client groups for client with ID 24
[2020-12-24 20:15:53.976 267/T272] Regex whitelist: Querying groups for client 192.168.69.108: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:53.976 267/T272] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.69.108
[2020-12-24 20:15:53.976 267/T272] Getting regex client groups for client with ID 25
[2020-12-24 20:15:53.976 267/T272] Regex whitelist: Querying groups for client 192.168.69.33: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:53.976 267/T272] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.69.33
[2020-12-24 20:15:53.976 267/T272] Getting regex client groups for client with ID 26
[2020-12-24 20:15:53.977 267/T272] Regex whitelist: Querying groups for client 192.168.69.34: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:53.977 267/T272] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.69.34
[2020-12-24 20:15:53.977 267/T272] Getting regex client groups for client with ID 27
[2020-12-24 20:15:53.977 267/T272] Regex whitelist: Querying groups for client 192.168.1.10: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:53.978 267/T272] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.1.10
[2020-12-24 20:15:53.978 267/T272] Getting regex client groups for client with ID 28
[2020-12-24 20:15:53.978 267/T272] Regex whitelist: Querying groups for client 192.168.69.32: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:53.978 267/T272] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.69.32
[2020-12-24 20:15:53.978 267/T272] Getting regex client groups for client with ID 29
[2020-12-24 20:15:53.979 267/T272] Regex whitelist: Querying groups for client 192.168.1.200: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:53.979 267/T272] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.1.200
[2020-12-24 20:15:53.979 267/T272] Getting regex client groups for client with ID 30
[2020-12-24 20:15:53.979 267/T272] Regex whitelist: Querying groups for client 192.168.42.42: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:53.979 267/T272] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.42.42
[2020-12-24 20:15:53.979 267/T272] Getting regex client groups for client with ID 31
[2020-12-24 20:15:53.980 267/T272] Regex whitelist: Querying groups for client 192.168.69.109: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:53.980 267/T272] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.69.109
[2020-12-24 20:15:53.980 267/T272] Getting regex client groups for client with ID 32
[2020-12-24 20:15:53.981 267/T272] Regex whitelist: Querying groups for client 192.168.1.201: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:53.981 267/T272] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.1.201
[2020-12-24 20:15:53.981 267/T272] Getting regex client groups for client with ID 33
[2020-12-24 20:15:53.981 267/T272] Regex whitelist: Querying groups for client 192.168.1.242: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:53.981 267/T272] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.1.242
[2020-12-24 20:15:53.981 267/T272] Getting regex client groups for client with ID 34
[2020-12-24 20:15:53.982 267/T272] Regex whitelist: Querying groups for client 192.168.1.240: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:53.982 267/T272] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.1.240
[2020-12-24 20:15:53.982 267/T272] Getting regex client groups for client with ID 35
[2020-12-24 20:15:53.983 267/T272] Regex whitelist: Querying groups for client 192.168.42.43: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:53.983 267/T272] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.42.43
[2020-12-24 20:15:53.983 267/T272] Compiled 1 whitelist and 0 blacklist regex filters for 36 clients in 22.8 msec
[2020-12-24 20:15:54.211 267M] Getting regex client groups for client with ID 7
[2020-12-24 20:15:54.212 267M] Regex whitelist: Querying groups for client 192.168.69.20: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:54.212 267M] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.69.20
[2020-12-24 20:15:54.212 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "play.googleapis.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:15:55.450 267M] Regex whitelist (0, DB ID 3) NO match: "play.googleapis.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:15:55.453 267M] Getting regex client groups for client with ID 1
[2020-12-24 20:15:55.454 267M] Regex whitelist: Querying groups for client 192.168.69.22: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:15:55.454 267M] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.69.22
[2020-12-24 20:15:55.454 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "www.google.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:16:00.575 267M] Regex whitelist (0, DB ID 3) NO match: "www.google.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:16:00.576 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "www.google.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:16:00.579 267M] Regex whitelist (0, DB ID 3) NO match: "www.google.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:16:00.581 267M] Getting regex client groups for client with ID 2
[2020-12-24 20:16:00.581 267M] Regex whitelist: Querying groups for client 192.168.69.21: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:16:00.581 267M] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.69.21
[2020-12-24 20:16:00.581 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "www.google.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:16:00.582 267M] Regex whitelist (0, DB ID 3) NO match: "www.google.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:16:00.646 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "www.google.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:16:00.651 267M] Regex whitelist (0, DB ID 3) NO match: "www.google.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:16:03.193 267M] Getting regex client groups for client with ID 34
[2020-12-24 20:16:03.193 267M] Regex whitelist: Querying groups for client 192.168.1.240: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:16:03.193 267M] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.1.240
[2020-12-24 20:16:03.193 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "clients4.google.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:16:05.691 267M] Regex whitelist (0, DB ID 3) NO match: "clients4.google.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:16:05.710 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "clients.l.google.com", pmatch = 0x7ffcccd657f0
[2020-12-24 20:16:10.809 267M] Regex whitelist (0, DB ID 3) NO match: "clients.l.google.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:16:12.450 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "app-measurement.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:16:15.930 267M] Regex whitelist (0, DB ID 3) >> MATCH: "app-measurement.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:16:15.931 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "play.google.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:16:21.049 267M] Regex whitelist (0, DB ID 3) NO match: "play.google.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:16:21.056 267M] Getting regex client groups for client with ID 0
[2020-12-24 20:16:21.056 267M] Regex whitelist: Querying groups for client 192.168.69.25: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:16:21.056 267M] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.69.25
[2020-12-24 20:16:21.056 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "www.google.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:16:26.172 267M] Regex whitelist (0, DB ID 3) NO match: "www.google.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:16:26.174 267M] Getting regex client groups for client with ID 19
[2020-12-24 20:16:26.174 267M] Regex whitelist: Querying groups for client 192.168.69.31: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:16:26.174 267M] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.69.31
[2020-12-24 20:16:26.175 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "www.philips-hue.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:16:31.289 267M] Regex whitelist (0, DB ID 3) NO match: "www.philips-hue.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:16:31.291 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "app-measurement.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:16:36.414 267M] Regex whitelist (0, DB ID 3) >> MATCH: "app-measurement.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:16:36.415 267M] Getting regex client groups for client with ID 19
[2020-12-24 20:16:36.415 267M] Regex whitelist: Querying groups for client 192.168.69.31: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:16:36.415 267M] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.69.31
[2020-12-24 20:16:36.415 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "prod-02.signify.com.edgekey.net", pmatch = 0x7ffcccd657f0
[2020-12-24 20:16:41.528 267M] Regex whitelist (0, DB ID 3) NO match: "prod-02.signify.com.edgekey.net" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:16:41.530 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "e15987.dscf.akamaiedge.net", pmatch = 0x7ffcccd657f0
[2020-12-24 20:16:46.652 267M] Regex whitelist (0, DB ID 3) NO match: "e15987.dscf.akamaiedge.net" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:16:46.653 267M] Getting regex client groups for client with ID 29
[2020-12-24 20:16:46.653 267M] Regex whitelist: Querying groups for client 192.168.1.200: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:16:46.653 267M] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.1.200
[2020-12-24 20:16:46.654 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "clients4.google.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:16:46.656 267M] Regex whitelist (0, DB ID 3) NO match: "clients4.google.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:16:46.657 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "clients.l.google.com", pmatch = 0x7ffcccd65820
[2020-12-24 20:16:46.659 267M] Regex whitelist (0, DB ID 3) NO match: "clients.l.google.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:16:46.660 267M] Getting regex client groups for client with ID 32
[2020-12-24 20:16:46.660 267M] Regex whitelist: Querying groups for client 192.168.1.201: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:16:46.661 267M] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.1.201
[2020-12-24 20:16:46.661 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "clients4.google.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:16:46.662 267M] Regex whitelist (0, DB ID 3) NO match: "clients4.google.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:16:46.663 267M] Getting regex client groups for client with ID 32
[2020-12-24 20:16:46.663 267M] Regex whitelist: Querying groups for client 192.168.1.201: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:16:46.663 267M] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.1.201
[2020-12-24 20:16:46.665 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "clients.l.google.com", pmatch = 0x7ffcccd65820
[2020-12-24 20:16:46.667 267M] Regex whitelist (0, DB ID 3) NO match: "clients.l.google.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:16:46.669 267M] Getting regex client groups for client with ID 3
[2020-12-24 20:16:46.669 267M] Regex whitelist: Querying groups for client 192.168.69.72: "SELECT id from vw_regex_whitelist WHERE group_id IN (1);"
[2020-12-24 20:16:46.669 267M] Regex whitelist (0, DB ID 3) "(\.|^)app-measurement\.com$" NOT ENABLED for client 192.168.69.72
[2020-12-24 20:16:46.670 267M] Getting regex client groups for client with ID 3
[2020-12-24 20:16:46.670 267M] Regex whitelist: Querying groups for client 192.168.69.72: "SELECT id from vw_regex_whitelist WHERE group_id IN (1);"
[2020-12-24 20:16:46.670 267M] Regex whitelist (0, DB ID 3) "(\.|^)app-measurement\.com$" NOT ENABLED for client 192.168.69.72
[2020-12-24 20:16:46.671 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "mobile.pipe.aria.microsoft.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:16:46.674 267M] Regex whitelist (0, DB ID 3) NO match: "mobile.pipe.aria.microsoft.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:16:46.677 267M] Getting regex client groups for client with ID 34
[2020-12-24 20:16:46.677 267M] Regex whitelist: Querying groups for client 192.168.1.240: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:16:46.677 267M] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.1.240
[2020-12-24 20:16:46.677 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "app-measurement.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:16:46.682 267M] Regex whitelist (0, DB ID 3) >> MATCH: "app-measurement.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:16:46.683 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "safebrowsing.googleapis.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:16:46.686 267M] Regex whitelist (0, DB ID 3) NO match: "safebrowsing.googleapis.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:16:46.689 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "www.reddit.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:16:46.690 267M] Regex whitelist (0, DB ID 3) NO match: "www.reddit.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:16:46.692 267M] Regex whitelist (0, DB ID 3) "(\.|^)app-measurement\.com$" NOT ENABLED for client 192.168.69.72
[2020-12-24 20:16:46.693 267M] Getting regex client groups for client with ID 5
[2020-12-24 20:16:46.693 267M] Regex whitelist: Querying groups for client 192.168.69.24: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:16:46.693 267M] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.69.24
[2020-12-24 20:16:46.693 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "time.google.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:16:51.770 267M] Regex whitelist (0, DB ID 3) NO match: "time.google.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:16:51.771 267M] Getting regex client groups for client with ID 5
[2020-12-24 20:16:51.771 267M] Regex whitelist: Querying groups for client 192.168.69.24: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:16:51.771 267M] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.69.24
[2020-12-24 20:16:51.775 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "reddit.map.fastly.net", pmatch = 0x7ffcccd657f0
[2020-12-24 20:16:56.895 267M] Regex whitelist (0, DB ID 3) NO match: "reddit.map.fastly.net" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:16:56.896 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "time.google.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:16:56.900 267M] Regex whitelist (0, DB ID 3) NO match: "time.google.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:16:56.905 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "wpad.lan", pmatch = 0x7ffcccd658e0
[2020-12-24 20:16:56.907 267M] Regex whitelist (0, DB ID 3) NO match: "wpad.lan" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:16:56.911 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "www.signify.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:16:56.913 267M] Regex whitelist (0, DB ID 3) NO match: "www.signify.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:16:56.917 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "tile-service.weather.microsoft.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:16:56.920 267M] Regex whitelist (0, DB ID 3) NO match: "tile-service.weather.microsoft.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:16:56.921 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "service.weather.microsoft.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:16:56.922 267M] Regex whitelist (0, DB ID 3) NO match: "service.weather.microsoft.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:16:56.925 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "www.google.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:16:56.926 267M] Regex whitelist (0, DB ID 3) NO match: "www.google.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:16:56.927 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "www.google.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:16:56.928 267M] Regex whitelist (0, DB ID 3) NO match: "www.google.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:16:56.931 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "ssl.gstatic.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:16:56.933 267M] Regex whitelist (0, DB ID 3) NO match: "ssl.gstatic.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:16:56.933 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "ecn.dev.virtualearth.net", pmatch = 0x7ffcccd658e0
[2020-12-24 20:16:56.935 267M] Regex whitelist (0, DB ID 3) NO match: "ecn.dev.virtualearth.net" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:16:56.942 267M] Getting regex client groups for client with ID 7
[2020-12-24 20:16:56.942 267M] Regex whitelist: Querying groups for client 192.168.69.20: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:16:56.942 267M] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.69.20
[2020-12-24 20:16:56.942 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "www.google.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:16:56.944 267M] Regex whitelist (0, DB ID 3) NO match: "www.google.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:16:56.946 267M] Getting regex client groups for client with ID 4
[2020-12-24 20:16:56.946 267M] Regex whitelist: Querying groups for client 192.168.69.23: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:16:56.946 267M] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.69.23
[2020-12-24 20:16:56.946 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "mtalk.google.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:17:02.016 267M] Regex whitelist (0, DB ID 3) NO match: "mtalk.google.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:17:02.017 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "prod2.lighting.philips.com.edgekey.net", pmatch = 0x7ffcccd657f0
[2020-12-24 20:17:07.128 267M] Regex whitelist (0, DB ID 3) NO match: "prod2.lighting.philips.com.edgekey.net" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:17:07.128 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "e15384.dscf.akamaiedge.net", pmatch = 0x7ffcccd657f0
[2020-12-24 20:17:12.251 267M] Regex whitelist (0, DB ID 3) NO match: "e15384.dscf.akamaiedge.net" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:17:12.324 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "wildcard.weather.microsoft.com.edgekey.net", pmatch = 0x7ffcccd657f0
[2020-12-24 20:17:17.370 267M] Regex whitelist (0, DB ID 3) NO match: "wildcard.weather.microsoft.com.edgekey.net" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:17:17.370 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "e15275.g.akamaiedge.net", pmatch = 0x7ffcccd657f0
[2020-12-24 20:17:22.492 267M] Regex whitelist (0, DB ID 3) NO match: "e15275.g.akamaiedge.net" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:17:22.495 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "ssl2.tiles.virtualearth.net.edgekey.net", pmatch = 0x7ffcccd657f0
[2020-12-24 20:17:27.614 267M] Regex whitelist (0, DB ID 3) NO match: "ssl2.tiles.virtualearth.net.edgekey.net" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:17:27.615 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "e4113.dscd.akamaiedge.net", pmatch = 0x7ffcccd657f0
[2020-12-24 20:17:27.618 267M] Regex whitelist (0, DB ID 3) NO match: "e4113.dscd.akamaiedge.net" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:17:27.619 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "mobile-gtalk.l.google.com", pmatch = 0x7ffcccd657f0
[2020-12-24 20:17:27.620 267M] Regex whitelist (0, DB ID 3) NO match: "mobile-gtalk.l.google.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:17:27.624 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "www.google.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:17:27.625 267M] Regex whitelist (0, DB ID 3) NO match: "www.google.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:17:27.630 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "www.google.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:17:27.631 267M] Regex whitelist (0, DB ID 3) NO match: "www.google.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:17:27.637 267M] Getting regex client groups for client with ID 12
[2020-12-24 20:17:27.637 267M] Regex whitelist: Querying groups for client 192.168.1.101: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:17:27.638 267M] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.1.101
[2020-12-24 20:17:27.638 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "play.googleapis.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:17:27.641 267M] Regex whitelist (0, DB ID 3) NO match: "play.googleapis.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:17:27.642 267M] Getting regex client groups for client with ID 12
[2020-12-24 20:17:27.642 267M] Regex whitelist: Querying groups for client 192.168.1.101: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:17:27.642 267M] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.1.101
[2020-12-24 20:17:27.654 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "slack.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:17:32.731 267M] Regex whitelist (0, DB ID 3) NO match: "slack.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:17:32.733 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "app.slack.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:17:37.853 267M] Regex whitelist (0, DB ID 3) NO match: "app.slack.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:17:37.854 267M] Getting regex client groups for client with ID 29
[2020-12-24 20:17:37.854 267M] Regex whitelist: Querying groups for client 192.168.1.200: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:17:37.854 267M] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.1.200
[2020-12-24 20:17:37.856 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "clientservices.googleapis.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:17:42.970 267M] Regex whitelist (0, DB ID 3) NO match: "clientservices.googleapis.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:17:42.973 267M] Getting regex client groups for client with ID 5
[2020-12-24 20:17:42.973 267M] Regex whitelist: Querying groups for client 192.168.69.24: "SELECT id from vw_regex_whitelist WHERE group_id IN (0);"
[2020-12-24 20:17:42.973 267M] Regex whitelist: Enabling regex with DB ID 3 for client 192.168.69.24
[2020-12-24 20:17:42.974 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "apresolve.spotify.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:17:48.307 267M] Regex whitelist (0, DB ID 3) NO match: "apresolve.spotify.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:17:48.309 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "connectivitycheck.gstatic.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:17:53.211 267M] Regex whitelist (0, DB ID 3) NO match: "connectivitycheck.gstatic.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:17:53.213 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "clients3.google.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:17:58.328 267M] Regex whitelist (0, DB ID 3) NO match: "clients3.google.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:17:58.329 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "clients.l.google.com", pmatch = 0x7ffcccd65820
[2020-12-24 20:18:03.453 267M] Regex whitelist (0, DB ID 3) NO match: "clients.l.google.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:18:03.456 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "mtalk.google.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:18:08.568 267M] Regex whitelist (0, DB ID 3) NO match: "mtalk.google.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:18:08.592 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "mobile-gtalk.l.google.com", pmatch = 0x7ffcccd65820
[2020-12-24 20:18:13.696 267M] Regex whitelist (0, DB ID 3) NO match: "mobile-gtalk.l.google.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:18:13.697 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "www.gstatic.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:18:18.807 267M] Regex whitelist (0, DB ID 3) NO match: "www.gstatic.com" vs. "(\.|^)app-measurement\.com$"
[2020-12-24 20:18:18.811 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "play.google.com", pmatch = 0x7ffcccd658e0
[2020-12-24 20:18:23.930 267M] Regex whitelist (0, DB ID 3) NO match: "play.google.com" vs. "(\.|^)app-measurement\.com$"
I made a new container, proxmox 6.3, debian 10.7 container (ip is 192.168.42.43, using default 8.8.8.8/8.8.4.4 upstream config)
$ apt update
$ apt dist-upgrade
# only tzdata was updated
$ curl -sSL https://install.pi-hole.net | bash
then i added app-measurement.com to whitelist... other than that, did not touch the pihole config
$ time host app-measurement.com 192.168.42.43
Using domain server:
Name: 192.168.42.43
Address: 192.168.42.43#53
Aliases:
app-measurement.com has address 172.217.2.14
;; connection timed out; no servers could be reached
;; connection timed out; no servers could be reached
real: 24.56s user: 0.01s sys: 0.00s
also noticing, that it eventually resolves... maybe timing is involved. my proxmox machine is a intel nuc with a celeron, J5005 CPU (so significantly faster than Rpi4, but slower then any desktop/server)
root@ceres:~# pihole restartdns
[✓] Restarting DNS server
root@ceres:~# host app-measurement.com 192.168.42.43
Using domain server:
Name: 192.168.42.43
Address: 192.168.42.43#53
Aliases:
app-measurement.com has address 172.217.1.206
;; connection timed out; no servers could be reached
;; connection timed out; no servers could be reached
root@ceres:~# host app-measurement.com 192.168.42.43
Using domain server:
Name: 192.168.42.43
Address: 192.168.42.43#53
Aliases:
app-measurement.com has address 172.217.1.206
app-measurement.com has IPv6 address 2607:f8b0:400f:801::200e
once the name is eventually resolved and cached, it always works. in this example, using google dns
joeroback
on 25 Dec 2020
also noticing, that it eventually resolves...
Please also set DEBUG_QUERIES=true in /etc/pihole/pihole-FTL.conf and restart FTL once again. Then query one of the domains like you did before and copy the relevant lines from pihole-FTL.log - this should show us how the query was treated internally, how long the regex processing took, and a bit more.
The only thing we fixed with the latest update is that the correct binary gets downloaded if you're running an i386 virtualization on an x86_64 server but I don't think this is the case for you.
Does it also work fine with pihole checkout ftl release/v5.3.2 ? This other branch you tried is already a bit older, I don't recall right now what it is based on.
DL6ER
on 25 Dec 2020
👍1
Hello.
First of all, I'd like to apologize: it was almost 1am when I replied to this issue and didn't notice that most people were talking about virtualized systems. My pihole is running natively on Raspbian, no virtualization/dockerization involved.
The problem is exactly the same though. I don't know it is worth to open a new issue, please let me know.
The problem can be fixed using **pihole checkout ftl release/v5.3.2**, pihole checkout ftl old_regex_engine, but not using pihole checkout ftl fix/tre-regex-forks.
stefanomaxenti
on 25 Dec 2020
All affected, please try
pihole checkout ftl fix/no_regex_sync
We accidentally added a sync call which should have been called only in debugging mode. This obviously could lead to issues when you're running on a system with a slow disk/storage attached to it. The branch above avoids calling sync.
@smx97 If your issue is exactly the same, then this rather points towards that the virtualization isn't the cause here but really the update v5.3.2 -> v5.3.3 caused the issue. You are also using a 32bit OS with Raspbian on RPi4 as the RPI foundation never made the transition to 64bit (you'd need, e.g., Ubuntu server on a Raspberry Pi for that).
@joeroback Thanks for your hint with the high IO load. I've found the (unintentional) sync without this, however, it gives me some confidence that this is really the case of the slowdown you're seeing. Especially looking at
[2020-12-24 20:15:54.212 267M] Executing: index = 0, preg = 0x7f2e70023eb8, str = "play.googleapis.com", pmatch = 0x7ffcccd658e0 [2020-12-24 20:15:55.450 267M] Regex whitelist (0, DB ID 3) NO match: "play.googleapis.com" vs. "(\.|^)app-measurement\.com$"confirming a delay of slightly more than 1 second between two log lines which should immediately follow each other.
This is a great example of why Linux can perform very well on slow disks. Well, at least as long as you don't force it to commit filesystem caches to disk all the time :-)
DL6ER
on 25 Dec 2020
👍3
@DL6ER
I can confirm that the problem is the same as the others, the system is 32bit (armv7l) and that branch fix/no_regex_sync fixes the issue as well.
Thank you! 💯
stefanomaxenti
on 25 Dec 2020
👍1
All affected, please try
pihole checkout ftl fix/no_regex_sync
So far so good. 👍🏽
I'll report back in 24 hrs if I see no issues.
We accidentally added a
synccall which should have been called only in debugging mode. This obviously could lead to issues when you're running on a system with a slow disk/storage attached to it. The branch above avoids callingsync.
I was having issues even with my fast NVMe storage. :<
coldfire7
on 25 Dec 2020
👍1
Just made the change, looks good. The problem manifests itself instantly so I think we're good. Survived a reboot as well.
mr-bobdobalina
on 25 Dec 2020
👍1
can confirm, pihole checkout ftl fix/no_regex_sync seems great on my regular lxc container, the two test containers i made (one with debian 10 and one with debian 9) and my Rpi4
thanks so much! for listening and working with us as well! i really appreciate it!
joeroback
on 25 Dec 2020
The next version of FTL has been released (v5.3.4). Please run
pihole checkout master
to get back on-track. Thanks for helping us to make Pi-hole better for us all!
If you have any issues, please either reopen this ticket or (preferably) create a new ticket describing the issues in further detail and only reference this ticket. All slowdown should be finally resolved now. Organizing new issues in new tickets will just help us to help you best.
DL6ER
on 26 Dec 2020
👍3
yea, that was my bad adding onto this ticket, at first i thought it was related, but i should done a new ticket and it could have either been marked as duplicate or been its own thing, which is what it was in the end ...
joeroback
on 27 Dec 2020
All good, the important bit is that we manage to resolve all the issues in the end :-)
DL6ER
on 27 Dec 2020
Was this page helpful?
0 / 5 - 0 ratings
Related issues
JOHRY
·
17Comments
Daxtorim
·
10Comments
iamperson347
·
17Comments
deepgray
·
20Comments
C4Wiz
·
4Comments
Most helpful comment
The next version of FTL has been released (v5.3.4). Please run
to get back on-track. Thanks for helping us to make Pi-hole better for us all!
If you have any issues, please either reopen this ticket or (preferably) create a new ticket describing the issues in further detail and only reference this ticket. All slowdown should be finally resolved now. Organizing new issues in new tickets will just help us to help you best.