Pfelk: Revised Initial GROK Filter (03-filter.conf) Supporting pfSense Optional BSD/syslog Formats

Created on 31 Dec 2020 · 37Comments · Source: pfelk/pfelk

Is your feature request related to a problem? Please describe.
pfSense Log Message Format contains an option to utilize BSD(RFC 3164) or syslog (RFC 5424)
103306259-23aae580-49db-11eb-806d-7140c11e5ea5

Describe the solution you'd like
03-filter.conf contains an initial filter to parse out syslog data from the log message. The current version will not parse pfSense when the log message format is set to syslog (RFC 5424). The revised filter below was tested (limited due to not having pfSense logs to extensively test; OPNsense is working fine with filterlog, squid, Suricata, unbound, dhcp).

# 03-filter.conf
####################################################################
# Version: 21.01                                                   #
# Description: Filters initial message from RFC3164 and RFC5424    #
# supporting both pfSense and OPNsense logging                     #
####################################################################
filter {
  if [observer][type] == "firewall" or [observer][type] == "haproxy" or [observer][type] == "suricata" {
    grok {
      match => {"message" => "<%{POSINT:[log][syslog][priority]}>(%{INT:version}\s*)?(%{SYSLOGTIMESTAMP:[event][created]}|%{TIMESTAMP_ISO8601:[event][created]})\s(%{SYSLOGHOST:[host][name]}\s+)?%{PROG:[process][name]}\s*?(\[)?%{POSINT:[process][pid]}(\]:)?\s*(\-\s*\-)?\s*%{GREEDYDATA:filter_message}"}
      }
      date {
        match => [ "[event][created]", "MMM  d HH:mm:ss", "MMM dd HH:mm:ss", "ISO8601" ]
        target => "[event][created]"
      }
    mutate {
      rename => {"message" => "[log][original]"}
      strip => ["[process][name]"]
    }
    ### BEATS ###
    if [observer][type] == "beats" {
      grok {
        match => { "[log][original]" => "%{SYSLOGLINE}" }
      }
    }
  }
}

Additional context
Seeking additional testing prior to updating the repo. Please utilize the amended 03-filter.conf above and provide any feedback, specifically issues and if it works with pfSense (both log message output options).

[x] Works with pfSense
[x] Works with pfSense and BSD (RFC 3164)
[ ] Works with pfSense and syslog (RFC 5424)
[x] Works with OPNsense

Notes: Initial issue was identified by @jsinix via issue #243
Reference: https://github.com/logstash-plugins/logstash-patterns-core/blob/master/patterns/grok-patterns

OPNsense enhancement help wanted pfSense testing needed wip

Source

a3ilson

Most helpful comment

I will also do a little more looking into 2.5.0. Its been on the horizon for quite a while...maybe its not that far away anymore.

revere521 on 4 Jan 2021

👍2

All 37 comments

I'm not yet using pfsense 2.5.0 as its still in 'dev' - pfsense 2.4.5_1 does not have the option to choose the log message format, I'm assuming by default it would be BSD (RFC 3164). I can test that.....

revere521 on 3 Jan 2021

👍1

Thanks for looking into it...Please give it a try and see if it works...

I revised it to parse OPNsense and pfSense (both formats). If it works with the current version, it'll help when 2.5.0 is released.

a3ilson on 3 Jan 2021

lt looks like his might break DHCP and DNS parsing. I just updated everything to the current items in the repo; and this 03-filter.

I'm going to go back to the repo config and see what happens

revere521 on 3 Jan 2021

confirmed, using this experimental 03-filter.com beaks parsing of unbound DNS and DCHP. Unbound just stops, nothing in discover. DHCP logs appear in the firewall index as _grokparsefailures rather than in the DHCP index

revere521 on 3 Jan 2021

Dang... can you send a few of your logs (original) for Unbound and dhcp? And any others that didn’t parse. I’ll revise and reduce the grim pattern.

feel free to sanitize data with similar filter data.

a3ilson on 3 Jan 2021

here is a section of DHCPD log messages (MACs sanitized):

`<190>Jan 3 12:36:27 dhcpd: DHCPACK on 192.168.1.17 to 00:00:00:00:00:00 via re0 <190>Jan 3 12:36:27 dhcpd: DHCPACK on 192.168.1.17 to 00:00:00:00:00:00 via re0 <190>Jan 3 12:36:27 dhcpd: DHCPREQUEST for 192.168.1.17 from 00:00:00:00:00:00 via re0 <190>Jan 3 12:36:27 dhcpd: DHCPREQUEST for 192.168.1.17 from 00:00:00:00:00:00 via re0 <190>Jan 3 12:36:17 dhcpd: DHCPREQUEST for 192.168.1.108 from 00:00:00:00:00:00 via re0 <190>Jan 3 12:36:17 dhcpd: DHCPACK on 192.168.1.108 to 00:00:00:00:00:00 via re0 <190>Jan 3 12:36:17 dhcpd: DHCPREQUEST for 192.168.1.108 from 00:00:00:00:00:00 via re0 <190>Jan 3 12:36:17 dhcpd: DHCPACK on 192.168.1.108 to 00:00:00:00:00:00 via re0 <187>Jan 3 12:36:17 dhcpd: uid lease 192.168.1.223 for client 00:00:00:00:00:00 is duplicate on 192.168.1.0/24 <187>Jan 3 12:36:17 dhcpd: uid lease 192.168.1.223 for client 00:00:00:00:00:00 is duplicate on 192.168.1.0/24 <190>Jan 3 12:35:20 dhcpd: DHCPREQUEST for 192.168.1.109 from 00:00:00:00:00:00 via re0 <190>Jan 3 12:35:20 dhcpd:DHCPREQUEST for 192.168.1.109 from 00:00:00:00:00:00 via re0 <190>Jan 3 12:35:20 dhcpd: DHCPACK on 192.168.1.109 to 00:00:00:00:00:00 via re0 <190>Jan 3 12:35:20 dhcpd: DHCPACK on 192.168.1.109 to 00:00:00:00:00:00 via re0 <190>Jan 3 12:34:49 dhcpd: DHCPACK on 192.168.1.102 to 00:00:00:00:00:00 via re0 <190>Jan 3 12:34:49 dhcpd: DHCPACK on 192.168.1.102 to 00:00:00:00:00:00 via re0 <190>Jan 3 12:34:49 dhcpd: DHCPREQUEST for 192.168.1.102 from 00:00:00:00:00:00 via re0 <190>Jan 3 12:34:49 dhcpd: DHCPREQUEST for 192.168.1.102 from 00:00:00:00:00:00 via re0 <190>Jan 3 12:30:54 dhcpd: DHCPREQUEST for 192.168.1.117 from 00:00:00:00:00:00 via re0 <190>Jan 3 12:30:54 dhcpd: DHCPACK on 192.168.1.117 to 00:00:00:00:00:00 via re0 <190>Jan 3 12:30:54 dhcpd: DHCPREQUEST for 192.168.1.117 from 00:00:00:00:00:00 via re0 <190>Jan 3 12:30:54 dhcpd: DHCPACK on 192.168.1.117 to 00:00:00:00:00:00 via re0 <187>Jan 3 12:30:54 dhcpd: uid lease 192.168.1.229 for client 00:00:00:00:00:00 is duplicate on 192.168.1.0/24 <187>Jan 3 12:30:54 dhcpd: uid lease 192.168.1.229 for client 00:00:00:00:00:00 is duplicate on 192.168.1.0/24 <190>Jan 3 12:30:10 dhcpd: DHCPREQUEST for 192.168.1.110 from 00:05:cd:7a:a0:06 via re0 <190>Jan 3 12:30:10 dhcpd: DHCPREQUEST for 192.168.1.110 from 00:05:cd:7a:a0:06 via re0 <190>Jan 3 12:30:10 dhcpd: DHCPACK on 192.168.1.110 to 00:00:00:00:00:00 via re0 <190>Jan 3 12:30:10 dhcpd: DHCPACK on 192.168.1.110 to 00:00:00:00:00:00 via re0 <187>Jan 3 12:30:10 dhcpd: uid lease 192.168.1.226 for client 00:00:00:00:00:00 is duplicate on 192.168.1.0/24 <187>Jan 3 12:30:10 dhcpd: uid lease 192.168.1.226 for client 00:00:00:00:00:00 is duplicate on 192.168.1.0/24 <190>Jan 3 12:27:05 dhcpd: DHCPACK on 192.168.1.162 to 00:00:00:00:00:00 via re0 <190>Jan 3 12:27:05 dhcpd: DHCPACK on 192.168.1.162 to 00:00:00:00:00:00 via re0 <190>Jan 3 12:27:05 dhcpd: DHCPREQUEST for 192.168.1.162 (192.168.1.1) from 00:00:00:00:00:00 via re0 <190>Jan 3 12:27:05 dhcpd: DHCPREQUEST for 192.168.1.162 (192.168.1.1) from 00:00:00:00:00:00 via re0 <190>Jan 3 12:01:09 dhcpd: DHCPREQUEST for 192.168.1.18 from 00:00:00:00:00:00 via re0 <190>Jan 3 12:01:09 dhcpd: DHCPREQUEST for 192.168.1.18 from 00:00:00:00:00:00 via re0 <190>Jan 3 12:01:09 dhcpd: DHCPACK on 192.168.1.18 to 00:00:00:00:00:00 via re0 <190>Jan 3 12:01:09 dhcpd: DHCPACK on 192.168.1.18 to 00:00:00:00:00:00 via re0 <190>Jan 3 11:58:48 dhcpd: DHCPREQUEST for 192.168.1.195 from 00:00:00:00:00:00 via re0

revere521 on 3 Jan 2021

here is a whole bunch of unbound log original messages

<30>Jan  3 12:43:59 unbound: [77753:1] info: 127.0.0.1 255.1.168.192.in-addr.arpa. PTR IN
<30>Jan  3 12:43:59 unbound: [77753:1] info: 127.0.0.1 255.1.168.192.in-addr.arpa. PTR IN
<30>Jan  3 12:43:59 unbound: [77753:0] info: 127.0.0.1 255.1.168.192.in-addr.arpa. PTR IN
<30>Jan  3 12:43:59 unbound: [77753:0] info: 127.0.0.1 255.1.168.192.in-addr.arpa. PTR IN
<30>Jan  3 12:43:59 unbound: [77753:0] info: 127.0.0.1 255.1.168.192.in-addr.arpa. PTR IN
<30>Jan  3 12:43:59 unbound: [77753:0] info: 127.0.0.1 255.1.168.192.in-addr.arpa. PTR IN
<30>Jan  3 12:43:59 unbound: [77753:1] info: 127.0.0.1 255.1.168.192.in-addr.arpa. PTR IN
<30>Jan  3 12:43:59 unbound: [77753:1] info: 127.0.0.1 255.1.168.192.in-addr.arpa. PTR IN
<30>Jan  3 12:43:54 unbound: [77753:0] info: 192.168.1.115 api.thingspeak.com. AAAA IN
<30>Jan  3 12:43:54 unbound: [77753:0] info: 192.168.1.115 api.thingspeak.com. AAAA IN
<30>Jan  3 12:43:54 unbound: [77753:1] info: 192.168.1.115 api.thingspeak.com. A IN
<30>Jan  3 12:43:54 unbound: [77753:1] info: 192.168.1.115 api.thingspeak.com. A IN
<30>Jan  3 12:43:54 unbound: [77753:0] info: 192.168.1.101 outlook.office365.com. A IN
<30>Jan  3 12:43:54 unbound: [77753:0] info: 192.168.1.101 outlook.office365.com. A IN
<30>Jan  3 12:43:48 unbound: [77753:0] info: 192.168.1.161 b-graph.facebook.com. A IN
<30>Jan  3 12:43:48 unbound: [77753:0] info: 192.168.1.161 b-graph.facebook.com. A IN
<30>Jan  3 12:43:48 unbound: [77753:0] info: 192.168.1.161 graph.facebook.com. A IN
<30>Jan  3 12:43:48 unbound: [77753:0] info: 192.168.1.161 graph.facebook.com. A IN
<30>Jan  3 12:43:48 unbound: [77753:0] info: 192.168.1.161 b-api.facebook.com. A IN
<30>Jan  3 12:43:48 unbound: [77753:0] info: 192.168.1.161 b-api.facebook.com. A IN
<30>Jan  3 12:43:48 unbound: [77753:0] info: 192.168.1.161 api.facebook.com. A IN
<30>Jan  3 12:43:48 unbound: [77753:0] info: 192.168.1.161 api.facebook.com. A IN
<30>Jan  3 12:43:46 unbound: [77753:0] info: 192.168.1.161 play-lh.googleusercontent.com. A IN
<30>Jan  3 12:43:46 unbound: [77753:0] info: 192.168.1.161 play-lh.googleusercontent.com. A IN
<30>Jan  3 12:43:45 unbound: [77753:0] info: 192.168.1.161 api.dropbox.com. A IN
<30>Jan  3 12:43:45 unbound: [77753:0] info: 192.168.1.161 api.dropbox.com. A IN
<30>Jan  3 12:43:39 unbound: [77753:0] info: 192.168.1.105 connectivitycheck.gstatic.com. A IN
<30>Jan  3 12:43:39 unbound: [77753:0] info: 192.168.1.105 connectivitycheck.gstatic.com. A IN
<30>Jan  3 12:43:39 unbound: [77753:1] info: 192.168.1.105 connectivitycheck.gstatic.com. AAAA IN
<30>Jan  3 12:43:39 unbound: [77753:1] info: 192.168.1.105 connectivitycheck.gstatic.com. AAAA IN
<30>Jan  3 12:43:39 unbound: [77753:0] info: 192.168.1.115 api.thingspeak.com. AAAA IN
<30>Jan  3 12:43:39 unbound: [77753:0] info: 192.168.1.115 api.thingspeak.com. AAAA IN
<30>Jan  3 12:43:39 unbound: [77753:0] info: 192.168.1.115 api.thingspeak.com. A IN
<30>Jan  3 12:43:39 unbound: [77753:0] info: 192.168.1.115 api.thingspeak.com. A IN
<30>Jan  3 12:43:33 unbound: [77753:0] info: 192.168.1.161 service.game-mode.net. A IN
<30>Jan  3 12:43:33 unbound: [77753:0] info: 192.168.1.161 service.game-mode.net. A IN
<30>Jan  3 12:43:29 unbound: [77753:0] info: 192.168.1.111 www.youtube.com. A IN
<30>Jan  3 12:43:29 unbound: [77753:0] info: 192.168.1.111 www.youtube.com. A IN
<30>Jan  3 12:43:27 unbound: [77753:0] info: 192.168.1.161 reports.crashlytics.com. A IN
<30>Jan  3 12:43:27 unbound: [77753:0] info: 192.168.1.161 reports.crashlytics.com. A IN
<30>Jan  3 12:43:25 unbound: [77753:0] info: 192.168.1.161 www.googleadservices.com. A IN
<30>Jan  3 12:43:25 unbound: [77753:0] info: 192.168.1.161 www.googleadservices.com. A IN
<30>Jan  3 12:43:25 unbound: [77753:0] info: 192.168.1.161 android.clients.google.com. A IN
<30>Jan  3 12:43:25 unbound: [77753:0] info: 192.168.1.161 android.clients.google.com. A IN
<30>Jan  3 12:43:25 unbound: [77753:0] info: 192.168.1.161 android.googleapis.com. A IN
<30>Jan  3 12:43:25 unbound: [77753:0] info: 192.168.1.161 android.googleapis.com. A IN
<30>Jan  3 12:43:24 unbound: [77753:0] info: 192.168.1.161 i.ytimg.com. A IN
<30>Jan  3 12:43:24 unbound: [77753:0] info: 192.168.1.161 i.ytimg.com. A IN
<30>Jan  3 12:43:24 unbound: [77753:0] info: 192.168.1.161 playatoms-pa.googleapis.com. A IN
<30>Jan  3 12:43:24 unbound: [77753:0] info: 192.168.1.161 playatoms-pa.googleapis.com. A IN
<30>Jan  3 12:43:23 unbound: [77753:0] info: 192.168.1.161 youtubei.googleapis.com. A IN
<30>Jan  3 12:43:23 unbound: [77753:0] info: 192.168.1.161 youtubei.googleapis.com. A IN
<30>Jan  3 12:43:23 unbound: [77753:0] info: 192.168.1.161 www.googleapis.com. A IN
<30>Jan  3 12:43:23 unbound: [77753:0] info: 192.168.1.161 www.googleapis.com. A IN
<30>Jan  3 12:43:23 unbound: [77753:1] info: 192.168.1.115 api.thingspeak.com. AAAA IN
<30>Jan  3 12:43:23 unbound: [77753:1] info: 192.168.1.115 api.thingspeak.com. AAAA IN
<30>Jan  3 12:43:23 unbound: [77753:0] info: 192.168.1.115 api.thingspeak.com. A IN
<30>Jan  3 12:43:23 unbound: [77753:0] info: 192.168.1.115 api.thingspeak.com. A IN
<30>Jan  3 12:43:22 unbound: [77753:0] info: 192.168.1.161 notifications-pa.googleapis.com. A IN
<30>Jan  3 12:43:22 unbound: [77753:0] info: 192.168.1.161 notifications-pa.googleapis.com. A IN
<30>Jan  3 12:43:22 unbound: [77753:0] info: 192.168.1.161 www.google.com. A IN
<30>Jan  3 12:43:22 unbound: [77753:0] info: 192.168.1.161 www.google.com. A IN
<30>Jan  3 12:43:20 unbound: [77753:0] info: 192.168.1.111 dpu.samsungelectronics.com. A IN
<30>Jan  3 12:43:20 unbound: [77753:0] info: 192.168.1.111 dpu.samsungelectronics.com. A IN
<30>Jan  3 12:43:15 unbound: [77753:0] info: 192.168.1.161 connectivitycheck.gstatic.com. A IN
<30>Jan  3 12:43:15 unbound: [77753:0] info: 192.168.1.161 connectivitycheck.gstatic.com. A IN
<30>Jan  3 12:43:14 unbound: [77753:0] info: 192.168.1.161 settings.crashlytics.com. A IN
<30>Jan  3 12:43:14 unbound: [77753:0] info: 192.168.1.161 settings.crashlytics.com. A IN
<30>Jan  3 12:43:13 unbound: [77753:0] info: 192.168.1.161 www.facebook.com. A IN
<30>Jan  3 12:43:13 unbound: [77753:0] info: 192.168.1.161 www.facebook.com. A IN
<30>Jan  3 12:43:12 unbound: [77753:0] info: 192.168.1.161 in.appcenter.ms. A IN
<30>Jan  3 12:43:12 unbound: [77753:0] info: 192.168.1.161 in.appcenter.ms. A IN
<30>Jan  3 12:43:12 unbound: [77753:0] info: 192.168.1.161 ads.mopub.com. A IN
<30>Jan  3 12:43:12 unbound: [77753:0] info: 192.168.1.161 ads.mopub.com. A IN
<30>Jan  3 12:43:12 unbound: [77753:0] info: 192.168.1.165 ssl.google-analytics.com. A IN
<30>Jan  3 12:43:12 unbound: [77753:0] info: 192.168.1.165 ssl.google-analytics.com. A IN
<30>Jan  3 12:43:12 unbound: [77753:0] info: 192.168.1.161 graph.facebook.com. A IN
<30>Jan  3 12:43:12 unbound: [77753:0] info: 192.168.1.161 graph.facebook.com. A IN

revere521 on 3 Jan 2021

@revere521 - Thanks!

I'll keep plugging away at this one with the goal to have one grok pattern to decipher the variations (maybe one exception). A few notes thus far... utilizing the %{SYSLOGLINE:[event][original]} parses most syslog messages from OPNsense/pfSense (actually all of OPNsense and none for pfSense). However, it appears v2.5.0 aligns with the syslog RFC and this added complexity may be short lived until pfSense releases v2.5.0.

Currently, leaning toward building out the required grok patterns and placing within the pfelk.grok file as the current complexity is a rather lengthy vomit of optional patterns.

GROK Pattern SYSLOG RFC3164 (OPNsense + pfSense v2.5.0)
<%{POSINT:[log][syslog][priority]}>(%{INT:version}\s*)?%{SYSLOGLINE:[event][original]}

The required GROK Pattern for the current pfSense is currently five (5x) the length of the GROK pattern above.

a3ilson on 4 Jan 2021

I will also do a little more looking into 2.5.0. Its been on the horizon for quite a while...maybe its not that far away anymore.

revere521 on 4 Jan 2021

👍2

https://redmine.pfsense.org/versions/33

the bug tracker has gone from about 90 items to about 40 in the last 10 days. pFsense 2.5.0 stable may become available this spring. The buzz is maybe April, but that's not official.

So depending on how quickly you want to deploy this syslog format change, it may resolve itself faster than the need to build compensation for it.

revere521 on 14 Jan 2021

👍1

Thanks @revere521

My thoughts were to leave this open pending the release and finalization of 2.5.0 (pfSense). The current filter works for the latest 2.5.0 build but only if the log output is set to BSD (RFC 3164). I'd like to have both log formats working, to mitigate future issues. I haven't spent much time on this as I feel it may be a moving target until it is released...and again it currently works by defining the output to BSD vs syslog.

I'll finalize as time permits hoping the revision will work once 2.5.0 is officially released and further testing can be conducted.

a3ilson on 14 Jan 2021

pFsense 2.5.0 is now the stable base - as of yesterday. I upgraded my install and I can see the log message format choices:

I was planning to rebuild my pfelk machine with the newest stuff sometime this week. If you want me to test other things, I will. I'll let you know when i'm at the new baseline.

revere521 on 18 Feb 2021

👍1

pfSense 2.5.0 was officially released.

Looking for testing on the optional logging output:

[x] BSD RFC 3164 - Works with pfelk
[ ] Syslog RFC 5424 - Requires testing
- match => {"message" => "<%{POSINT:[log][syslog][priority]}>(%{INT:version}\s*)?(%{SYSLOGTIMESTAMP:[event][created]}|%{TIMESTAMP_ISO8601:[event][created]})\s(%{SYSLOGHOST:[host][name]}\s+)?%{PROG:[process][name]}\s*?(\[)?%{POSINT:[process][pid]}(\]:)?\s*(\-\s*\-)?\s*%{GREEDYDATA:filter_message}"} - known work around but not fully tested...
[ ] Suricata logging via Syslog RFC 5424
- Requires acceptance of messages larger than 2048 octets in length and may provide work around/alternative from utilizing syslog-ng

a3ilson on 18 Feb 2021

@revere521 - That would be great!

The BSD (RFC 3164) works fine with pfELK. However, the syslog (RFC 5424) requires an updated grok pattern (initial grok from line 12 of 03-filter.conf.

At your leisure, I'd just need a sampling of logs (firewall, dhcp, unbound etc...) and will amend the filter as needed. My plans were to utilize one single GROK pattern but that may get messy and might not be feasible (i.e. it may require a separate GROK). Additionally, I am very curious with the increased message length (defined in RFC 5424) if suricata logs can now be sent via syslog (RF 5424).

a3ilson on 18 Feb 2021

After i get everything settled i may decide to try out suricata, i've been thinking about it for a while since it now seems like a more fully featured IDS. I might not be able to be your Snort dashboard guy if i did that though....

revere521 on 18 Feb 2021

quick question where does the new installer script put the config files?

it appears to be working, but there's nothing in /etc/logstash/conf.d ?

revere521 on 18 Feb 2021

super nevermind, i remembered how to read things

revere521 on 18 Feb 2021

Syslog RFC 5424 - Requires testing

match => {"message" => "<%{POSINT:[log][syslog][priority]}>(%{INT:version}\s*)?(%{SYSLOGTIMESTAMP:[event][created]}|%{TIMESTAMP_ISO8601:[event][created]})\s(%{SYSLOGHOST:[host][name]}\s+)?%{PROG:[process][name]}\s*?(\[)?%{POSINT:[process][pid]}(\]:)?\s*(\-\s*\-)?\s*%{GREEDYDATA:filter_message}"} - known work around but not fully tested...

Ok, i have done this on my fresh install and i'm watching everything - so far it looks ok; no grokparsefailures

revere521 on 18 Feb 2021

👍1

Awesome! And your parsing other application too (e.g. snort, unbound, dhcp etc...)

a3ilson on 18 Feb 2021

@revere521 - any thoughts on the revised file structure? The intention was to align it with the docker installation thus preventing multiple conf file variations. Additionally, I wanted to mitigate issues as a result of multiple conf files (e.g. Wazuh etc...) and the revision will more easily allow for multiple pipelines.

I also stumbled across Sigma and may test integration for automation of alerts.

a3ilson on 18 Feb 2021

so far so good.

I'm dealing with some crashing at the server level that could be unrelated... I may be running out of resources.

What Java versions are supported right now, by the way - I saw an issue float by about the system Java version. I think i have 8, 11 and 14 installed

revere521 on 18 Feb 2021

the file structure is fine, it just took me a minute to figure it out again. If it makes all the disparate install types work better - then its good.

revere521 on 18 Feb 2021

👍1

I removed Java as it is bundled with Logstash similar to the Geo Location Databases and simplified the install.

It will utilize the installed version of Java but if one isn't installed, the bundled version will be utilized. I believe it is based off of v11 LTS. Additionally, it is recommended to only use Java v8, v11 or v14 LTS for Logstash.

I converted my primary install and running within multiple containers (Dockers). I originally had three Elasticsearch instanced running but have since moved Kibana and Logstash over as well. It appears to have a bit more pep (responsiveness).

Thanks for testing the updated GROK... Later today or tomorrow, I can throw another one your way for testing with both outputs and OPNsense.

Reference: https://www.elastic.co/guide/en/logstash/current/getting-started-with-logstash.html

a3ilson on 18 Feb 2021

After a day, most everything looks good so far. I am seeing grokparsefailures in two places:

in the unbound log, i am seeing lots of parse failures - here is a pull of the last 24 hrs of just the parse failure event.original lines. they are all apparently "Info" lines

<30>1 2021-02-19T09:18:07.791684-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T09:18:07.791611-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T09:18:07.791611-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T09:18:07.791684-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T09:18:07.788163-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T09:18:07.788083-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T09:18:07.788083-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T09:18:07.788163-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T09:18:07.784738-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T09:18:07.784630-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T09:18:07.784630-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T09:18:07.784738-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T09:16:46.462419-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T09:16:46.462419-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T09:16:13.803266-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T09:16:13.803266-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T09:16:01.835773-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 slimscreen.HOME. A IN
<30>1 2021-02-19T09:16:01.835773-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 slimscreen.HOME. A IN
<30>1 2021-02-19T09:15:34.006430-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T09:15:34.006430-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T09:15:33.639172-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T09:15:33.639172-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T09:14:44.792137-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 nzb.cat. A IN
<30>1 2021-02-19T09:14:44.792137-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 nzb.cat. A IN
<30>1 2021-02-19T09:14:44.698939-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 nzb.cat. A IN
<30>1 2021-02-19T09:14:44.698939-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 nzb.cat. A IN
<30>1 2021-02-19T09:14:13.727440-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T09:14:13.727440-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T09:13:54.296193-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T09:13:54.296193-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T09:13:10.839144-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.163 app-measurement.com. A IN
<30>1 2021-02-19T09:13:10.839144-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.163 app-measurement.com. A IN
<30>1 2021-02-19T09:12:52.417934-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T09:12:52.417934-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T09:12:52.418029-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T09:12:52.418029-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T09:11:52.177455-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.163 app-measurement.com. A IN
<30>1 2021-02-19T09:11:52.177455-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.163 app-measurement.com. A IN
<30>1 2021-02-19T09:10:24.933719-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T09:10:24.933719-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T09:09:37.470601-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 VMSERVER2016ESS.HOME. A IN
<30>1 2021-02-19T09:09:37.470601-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 VMSERVER2016ESS.HOME. A IN
<30>1 2021-02-19T09:09:31.889220-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 outlook.com. A IN
<30>1 2021-02-19T09:09:31.889220-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 outlook.com. A IN
<30>1 2021-02-19T09:09:31.795594-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 outlook.com. A IN
<30>1 2021-02-19T09:09:31.795594-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 outlook.com. A IN
<30>1 2021-02-19T09:09:21.998775-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T09:09:21.998775-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T09:06:13.799027-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T09:06:13.799027-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T09:03:58.175296-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.107 homeserver.HOME. A IN
<30>1 2021-02-19T09:03:58.175296-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.107 homeserver.HOME. A IN
<30>1 2021-02-19T09:03:54.303539-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T09:03:54.303539-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T09:03:07.778909-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T09:03:07.778909-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T09:03:07.778832-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T09:03:07.778832-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T09:03:07.775526-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T09:03:07.775526-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T09:03:07.775609-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T09:03:07.775609-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T09:03:07.673250-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T09:03:07.673284-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T09:03:07.673284-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T09:03:07.673250-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T09:02:52.411460-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T09:02:52.411428-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T09:02:52.411428-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T09:02:52.411460-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T09:01:32.583606-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.108 magicmirror01. AAAA IN
<30>1 2021-02-19T09:01:32.583606-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.108 magicmirror01. AAAA IN
<30>1 2021-02-19T09:01:32.580241-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.108 magicmirror01.HOME. AAAA IN
<30>1 2021-02-19T09:01:32.580241-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.108 magicmirror01.HOME. AAAA IN
<30>1 2021-02-19T09:00:42.643295-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.107 lastpass.com. A IN
<30>1 2021-02-19T09:00:42.643295-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.107 lastpass.com. A IN
<30>1 2021-02-19T09:00:41.248948-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.166 app-measurement.com. A IN
<30>1 2021-02-19T09:00:41.248948-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.166 app-measurement.com. A IN
<30>1 2021-02-19T09:00:24.910372-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T09:00:24.910372-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T08:59:22.003812-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T08:59:22.003812-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T08:57:38.376114-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 HOME.local. SOA IN
<30>1 2021-02-19T08:57:38.376114-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 HOME.local. SOA IN
<30>1 2021-02-19T08:57:36.115925-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzbnoob.com. A IN
<30>1 2021-02-19T08:57:36.115925-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzbnoob.com. A IN
<30>1 2021-02-19T08:57:36.097454-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzb.cat. A IN
<30>1 2021-02-19T08:57:36.097454-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzb.cat. A IN
<30>1 2021-02-19T08:57:36.022364-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzbnoob.com. A IN
<30>1 2021-02-19T08:57:36.022364-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzbnoob.com. A IN
<30>1 2021-02-19T08:57:36.003931-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzb.cat. A IN
<30>1 2021-02-19T08:57:36.003931-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzb.cat. A IN
<30>1 2021-02-19T08:56:46.461372-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T08:56:46.461372-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T08:56:13.794946-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T08:56:13.794946-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T08:55:51.955477-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.50 isatap.HOME. A IN
<30>1 2021-02-19T08:55:51.955477-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.50 isatap.HOME. A IN
<30>1 2021-02-19T08:55:51.893543-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 isatap.HOME. A IN
<30>1 2021-02-19T08:55:51.893543-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 isatap.HOME. A IN
<30>1 2021-02-19T08:54:33.006558-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 VMSERVER2016ESS.HOME. A IN
<30>1 2021-02-19T08:54:33.006558-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 VMSERVER2016ESS.HOME. A IN
<30>1 2021-02-19T08:54:13.710812-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T08:54:13.710812-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T08:53:54.314448-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T08:53:54.314448-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T08:52:52.408423-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T08:52:52.408423-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T08:52:52.408114-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T08:52:52.408114-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T08:50:53.322964-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 undefined.HOME. A IN
<30>1 2021-02-19T08:50:53.322964-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 undefined.HOME. A IN
<30>1 2021-02-19T08:50:24.888721-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T08:50:24.888721-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T08:49:22.008685-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T08:49:22.008685-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T08:48:07.667745-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:48:07.667745-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:48:07.667656-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:48:07.667656-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:48:07.664531-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:48:07.664531-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:48:07.664209-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:48:07.664209-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:48:07.636255-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:48:07.636255-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:48:07.636187-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:48:07.636187-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:47:22.478623-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 HOME.local. NS IN
<30>1 2021-02-19T08:47:22.478623-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 HOME.local. NS IN
<30>1 2021-02-19T08:46:13.791656-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T08:46:13.791656-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T08:45:53.853425-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.117 ubuntuserver1.HOME. A IN
<30>1 2021-02-19T08:45:53.853425-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.117 ubuntuserver1.HOME. A IN
<30>1 2021-02-19T08:43:59.659514-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.163 app-measurement.com. A IN
<30>1 2021-02-19T08:43:59.659514-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.163 app-measurement.com. A IN
<30>1 2021-02-19T08:43:57.486601-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.163 . A IN
<30>1 2021-02-19T08:43:57.486601-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.163 . A IN
<30>1 2021-02-19T08:43:57.460552-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.163 . AAAA IN
<30>1 2021-02-19T08:43:57.460552-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.163 . AAAA IN
<30>1 2021-02-19T08:43:54.323236-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T08:43:54.323236-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T08:42:52.405511-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T08:42:52.405426-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T08:42:52.405511-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T08:42:52.405426-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T08:42:06.634350-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 emby.media. A IN
<30>1 2021-02-19T08:42:06.634350-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 emby.media. A IN
<30>1 2021-02-19T08:42:06.542214-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 emby.media. A IN
<30>1 2021-02-19T08:42:06.542214-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 emby.media. A IN
<30>1 2021-02-19T08:41:38.972012-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T08:41:38.972012-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T08:40:24.873167-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T08:40:24.873167-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T08:39:28.728071-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 VMSERVER2016ESS.HOME. A IN
<30>1 2021-02-19T08:39:28.728071-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 VMSERVER2016ESS.HOME. A IN
<30>1 2021-02-19T08:39:22.000541-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T08:39:22.000541-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T08:37:46.325396-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T08:37:46.325396-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T08:36:46.451197-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T08:36:46.451197-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T08:36:13.787731-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T08:36:13.787731-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T08:35:55.823835-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 slimscreen.HOME. A IN
<30>1 2021-02-19T08:35:55.823835-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 slimscreen.HOME. A IN
<30>1 2021-02-19T08:34:31.905081-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 freecad.HOME. A IN
<30>1 2021-02-19T08:34:31.905081-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 freecad.HOME. A IN
<30>1 2021-02-19T08:34:22.273229-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 HOME.local. NS IN
<30>1 2021-02-19T08:34:22.273229-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 HOME.local. NS IN
<30>1 2021-02-19T08:34:22.272417-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 HOME.local. NS IN
<30>1 2021-02-19T08:34:22.272417-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 HOME.local. NS IN
<30>1 2021-02-19T08:34:13.678395-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T08:34:13.678395-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T08:33:54.339532-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T08:33:54.339532-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T08:33:07.631761-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:33:07.631761-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:33:07.631833-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:33:07.631833-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:33:07.628373-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:33:07.628373-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:33:07.628429-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:33:07.628429-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:33:07.526848-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:33:07.526848-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:33:07.526800-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:33:07.526800-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:32:52.405501-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T08:32:52.405501-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T08:32:52.405454-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T08:32:52.405454-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T08:31:32.584494-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.108 magicmirror01. AAAA IN
<30>1 2021-02-19T08:31:32.584494-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.108 magicmirror01. AAAA IN
<30>1 2021-02-19T08:31:32.580544-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.108 magicmirror01.HOME. AAAA IN
<30>1 2021-02-19T08:31:32.580544-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.108 magicmirror01.HOME. AAAA IN
<30>1 2021-02-19T08:30:24.854979-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T08:30:24.854979-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T08:30:04.696239-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 homeserver.HOME. A IN
<30>1 2021-02-19T08:30:04.696239-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 homeserver.HOME. A IN
<30>1 2021-02-19T08:29:21.989872-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T08:29:21.989872-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T08:27:05.770982-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzbnoob.com. A IN
<30>1 2021-02-19T08:27:05.770982-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzbnoob.com. A IN
<30>1 2021-02-19T08:27:05.677399-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzbnoob.com. A IN
<30>1 2021-02-19T08:27:05.677399-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzbnoob.com. A IN
<30>1 2021-02-19T08:26:13.783456-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T08:26:13.783456-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T08:25:40.087047-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 https.HOME. A IN
<30>1 2021-02-19T08:25:40.087047-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 https.HOME. A IN
<30>1 2021-02-19T08:25:11.772016-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.163 app-measurement.com. A IN
<30>1 2021-02-19T08:25:11.772016-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.163 app-measurement.com. A IN
<30>1 2021-02-19T08:24:21.682190-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 VMSERVER2016ESS.HOME. A IN
<30>1 2021-02-19T08:24:21.682190-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 VMSERVER2016ESS.HOME. A IN
<30>1 2021-02-19T08:23:54.342895-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T08:23:54.342895-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T08:23:40.668942-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.160 app-measurement.com. A IN
<30>1 2021-02-19T08:23:40.668942-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.160 app-measurement.com. A IN
<30>1 2021-02-19T08:22:52.409217-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T08:22:52.409217-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T08:22:52.409132-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T08:22:52.409132-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T08:20:24.843482-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T08:20:24.843482-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T08:19:21.994978-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T08:19:21.994978-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T08:18:07.523014-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:18:07.523014-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:18:07.523091-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:18:07.523091-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:18:07.519732-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:18:07.519732-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:18:07.519660-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:18:07.519660-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:18:07.516272-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:18:07.516272-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:18:07.516237-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:18:07.516237-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:16:46.449845-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T08:16:46.449845-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T08:16:13.778249-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T08:16:13.778249-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T08:14:13.648241-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T08:14:13.648241-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T08:13:54.342803-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T08:13:54.342803-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T08:12:52.409367-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T08:12:52.409367-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T08:12:52.409485-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T08:12:52.409485-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T08:10:50.568224-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T08:10:50.568224-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T08:10:24.817976-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T08:10:24.817976-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T08:09:58.965730-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.166 app-measurement.com. A IN
<30>1 2021-02-19T08:09:58.965730-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.166 app-measurement.com. A IN
<30>1 2021-02-19T08:09:29.887037-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 outlook.com. A IN
<30>1 2021-02-19T08:09:29.887037-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 outlook.com. A IN
<30>1 2021-02-19T08:09:29.794001-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 outlook.com. A IN
<30>1 2021-02-19T08:09:29.794001-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 outlook.com. A IN
<30>1 2021-02-19T08:09:21.998936-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T08:09:21.998936-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T08:09:14.338057-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 VMSERVER2016ESS.HOME. A IN
<30>1 2021-02-19T08:09:14.338057-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 VMSERVER2016ESS.HOME. A IN
<30>1 2021-02-19T08:06:13.773990-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T08:06:13.773990-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T08:03:58.095896-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.107 homeserver.HOME. A IN
<30>1 2021-02-19T08:03:58.095896-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.107 homeserver.HOME. A IN
<30>1 2021-02-19T08:03:53.336187-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T08:03:53.336187-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T08:03:07.510750-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:03:07.510836-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:03:07.510750-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:03:07.510836-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:03:07.507338-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:03:07.507423-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:03:07.507338-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:03:07.507423-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:03:07.503341-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:03:07.503430-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:03:07.503341-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:03:07.503430-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:02:52.407440-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T08:02:52.407440-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T08:02:52.407481-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T08:02:52.407481-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T08:01:32.596480-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.108 magicmirror01. AAAA IN
<30>1 2021-02-19T08:01:32.596480-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.108 magicmirror01. AAAA IN
<30>1 2021-02-19T08:01:32.594796-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.108 magicmirror01.HOME. AAAA IN
<30>1 2021-02-19T08:01:32.594796-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.108 magicmirror01.HOME. AAAA IN
<30>1 2021-02-19T08:00:24.796825-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T08:00:24.796825-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T07:59:22.001061-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T07:59:22.001061-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T07:57:31.820971-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 HOME.local. SOA IN
<30>1 2021-02-19T07:57:31.820971-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 HOME.local. SOA IN
<30>1 2021-02-19T07:56:46.441248-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T07:56:46.441248-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T07:56:43.375862-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 steam-chat.com. A IN
<30>1 2021-02-19T07:56:43.375862-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 steam-chat.com. A IN
<30>1 2021-02-19T07:56:42.375206-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 steam-chat.com. A IN
<30>1 2021-02-19T07:56:42.375206-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 steam-chat.com. A IN
<30>1 2021-02-19T07:56:42.284479-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T07:56:42.284479-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T07:56:42.281624-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 steam-chat.com. A IN
<30>1 2021-02-19T07:56:42.281624-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 steam-chat.com. A IN
<30>1 2021-02-19T07:56:13.770423-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T07:56:13.770423-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T07:56:05.328065-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 nzb.cat. A IN
<30>1 2021-02-19T07:56:05.328065-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 nzb.cat. A IN
<30>1 2021-02-19T07:56:05.328028-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzbnoob.com. A IN
<30>1 2021-02-19T07:56:05.328028-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzbnoob.com. A IN
<30>1 2021-02-19T07:56:05.233450-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzb.cat. A IN
<30>1 2021-02-19T07:56:05.233450-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzb.cat. A IN
<30>1 2021-02-19T07:56:05.226849-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzbnoob.com. A IN
<30>1 2021-02-19T07:56:05.226849-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzbnoob.com. A IN
<30>1 2021-02-19T07:54:31.913545-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.160 youtube.com. A IN
<30>1 2021-02-19T07:54:31.913545-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.160 youtube.com. A IN
<30>1 2021-02-19T07:53:53.349418-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T07:53:53.349418-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T07:52:55.990453-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 isatap.HOME. A IN
<30>1 2021-02-19T07:52:55.990453-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 isatap.HOME. A IN
<30>1 2021-02-19T07:52:52.406664-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T07:52:52.406698-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T07:52:52.406698-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T07:52:52.406664-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T07:52:50.345513-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 VMSERVER2016ESS.HOME. A IN
<30>1 2021-02-19T07:52:50.345513-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 VMSERVER2016ESS.HOME. A IN
<30>1 2021-02-19T07:52:38.409727-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 dxfbdiarr.HOME. A IN
<30>1 2021-02-19T07:52:38.409727-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 dxfbdiarr.HOME. A IN
<30>1 2021-02-19T07:52:37.732103-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T07:52:37.732103-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T07:51:53.827671-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.163 app-measurement.com. A IN
<30>1 2021-02-19T07:51:53.827671-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.163 app-measurement.com. A IN
<30>1 2021-02-19T07:50:24.786203-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T07:50:24.786203-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T07:49:21.999088-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T07:49:21.999088-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T07:48:07.498432-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:48:07.498432-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:48:07.498236-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:48:07.498236-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:48:07.495113-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:48:07.495113-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:48:07.494895-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:48:07.494895-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:48:07.491282-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:48:07.491282-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:48:07.491137-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:48:07.491137-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:46:29.598797-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.108 local. SOA IN
<30>1 2021-02-19T07:46:29.598797-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.108 local. SOA IN
<30>1 2021-02-19T07:46:27.331071-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.108 local. SOA IN
<30>1 2021-02-19T07:46:27.331071-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.108 local. SOA IN
<30>1 2021-02-19T07:46:22.038656-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 HOME.local. NS IN
<30>1 2021-02-19T07:46:22.038656-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 HOME.local. NS IN
<30>1 2021-02-19T07:46:13.766172-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T07:46:13.766172-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T07:45:53.433449-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.117 ubuntuserver1.HOME. A IN
<30>1 2021-02-19T07:45:53.433449-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.117 ubuntuserver1.HOME. A IN
<30>1 2021-02-19T07:44:34.912137-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T07:44:34.912137-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T07:43:53.355611-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T07:43:53.355611-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T07:43:41.308900-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T07:43:41.308900-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T07:43:30.873893-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.51 wpad.HOME. A IN
<30>1 2021-02-19T07:43:30.873893-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.51 wpad.HOME. A IN
<30>1 2021-02-19T07:42:52.404852-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T07:42:52.404852-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T07:42:52.404895-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T07:42:52.404895-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T07:41:54.200243-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.51 wpad.HOME. A IN
<30>1 2021-02-19T07:41:54.200243-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.51 wpad.HOME. A IN
<30>1 2021-02-19T07:41:54.159286-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.51 wpad.HOME. A IN
<30>1 2021-02-19T07:41:54.159286-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.51 wpad.HOME. A IN
<30>1 2021-02-19T07:40:24.762426-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T07:40:24.762426-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T07:40:02.727491-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T07:40:02.727491-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T07:39:21.991263-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T07:39:21.991263-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T07:37:04.987740-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 thexem.de. A IN
<30>1 2021-02-19T07:37:04.987740-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 thexem.de. A IN
<30>1 2021-02-19T07:37:04.895247-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 thexem.de. A IN
<30>1 2021-02-19T07:37:04.895247-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 thexem.de. A IN
<30>1 2021-02-19T07:36:46.425000-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T07:36:46.425000-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T07:36:13.761476-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T07:36:13.761476-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T07:35:21.138195-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 slimscreen.HOME. A IN
<30>1 2021-02-19T07:35:21.138195-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 slimscreen.HOME. A IN
<30>1 2021-02-19T07:35:03.111363-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 prophecynewswatch.com. A IN
<30>1 2021-02-19T07:35:03.111363-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 prophecynewswatch.com. A IN
<30>1 2021-02-19T07:34:46.324846-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:34:46.324846-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:34:46.324930-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:34:46.324930-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:34:46.322554-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:34:46.322638-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:34:46.322638-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:34:46.322554-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:34:46.320011-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:34:46.320095-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:34:46.320095-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:34:46.320011-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:34:16.439956-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 HOME.local. NS IN
<30>1 2021-02-19T07:34:16.439073-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 HOME.local. NS IN
<30>1 2021-02-19T07:34:16.439073-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 HOME.local. NS IN
<30>1 2021-02-19T07:34:16.439956-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 HOME.local. NS IN
<30>1 2021-02-19T07:34:10.630816-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 doh.test. A IN
<30>1 2021-02-19T07:34:10.630816-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 doh.test. A IN
<30>1 2021-02-19T07:34:10.402325-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 use-application-dns.net. A IN
<30>1 2021-02-19T07:34:10.402325-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 use-application-dns.net. A IN
<30>1 2021-02-19T07:34:10.378435-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 google.com. A IN
<30>1 2021-02-19T07:34:10.378435-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 google.com. A IN
<30>1 2021-02-19T07:33:53.358118-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T07:33:53.358118-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T07:33:30.851424-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.51 wpad.HOME. A IN
<30>1 2021-02-19T07:33:30.851424-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.51 wpad.HOME. A IN
<30>1 2021-02-19T07:33:27.831278-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 github.com. A IN
<30>1 2021-02-19T07:33:27.831278-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 github.com. A IN
<30>1 2021-02-19T07:33:27.639315-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:27.639315-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:27.639349-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:27.639349-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:27.611151-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:27.611151-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:27.611054-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:27.611054-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:27.587692-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:27.587692-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:27.587604-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:27.587604-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:25.211054-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:25.211054-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:25.211214-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:25.211214-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:21.385413-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:21.385413-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:21.385358-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:21.385358-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:20.388711-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:20.388711-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:20.388789-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:20.388789-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:19.410257-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:19.410257-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:19.410171-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:19.410171-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:19.320037-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:19.320037-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:19.320119-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:19.320119-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:19.278382-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:19.278382-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:19.278456-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:19.278456-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:18.689533-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:18.689533-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:18.689444-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:18.689444-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:07.489342-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:07.489342-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:07.489425-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:07.489425-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:07.487060-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:07.487145-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:07.487060-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:07.487145-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:07.484520-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:07.484520-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:07.484452-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:07.484452-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:07.480011-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:07.480011-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:07.480096-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:07.480096-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:07.477715-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:07.477773-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:07.477715-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:07.477773-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:07.369909-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:07.370066-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:07.370066-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:07.369909-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:32:52.404718-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T07:32:52.404569-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T07:32:52.404569-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T07:32:52.404718-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T07:32:34.412954-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.163 app-measurement.com. A IN
<30>1 2021-02-19T07:32:34.412954-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.163 app-measurement.com. A IN
<30>1 2021-02-19T07:32:30.848700-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.51 wpad.HOME. A IN
<30>1 2021-02-19T07:32:30.848700-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.51 wpad.HOME. A IN
<30>1 2021-02-19T07:32:15.837788-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.51 wpad.HOME. A IN
<30>1 2021-02-19T07:32:15.837788-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.51 wpad.HOME. A IN
<30>1 2021-02-19T07:31:32.583528-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.108 magicmirror01. AAAA IN
<30>1 2021-02-19T07:31:32.583528-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.108 magicmirror01. AAAA IN
<30>1 2021-02-19T07:31:32.580114-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.108 magicmirror01.HOME. AAAA IN
<30>1 2021-02-19T07:31:32.580114-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.108 magicmirror01.HOME. AAAA IN

I am also seeing grokparsefailures still on that "is a duplicate of" line in DHCP that we looked at before.

<187>1 2021-02-19T09:07:42.489285-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.226 for client 00:05:cd:7a:a0:06 is duplicate on 192.168.1.0/24
<187>1 2021-02-19T09:07:42.489285-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.226 for client 00:05:cd:7a:a0:06 is duplicate on 192.168.1.0/24
<187>1 2021-02-19T08:58:22.660513-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.218 for client 98:29:a6:82:11:cd is duplicate on 192.168.1.0/24
<187>1 2021-02-19T08:58:22.660513-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.218 for client 98:29:a6:82:11:cd is duplicate on 192.168.1.0/24
<187>1 2021-02-19T08:43:42.523549-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.223 for client 74:da:38:8b:f5:e7 is duplicate on 192.168.1.0/24
<187>1 2021-02-19T08:43:42.523549-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.223 for client 74:da:38:8b:f5:e7 is duplicate on 192.168.1.0/24
<187>1 2021-02-19T08:41:30.049720-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.229 for client a0:48:1c:a3:6b:69 is duplicate on 192.168.1.0/24
<187>1 2021-02-19T08:41:30.049720-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.229 for client a0:48:1c:a3:6b:69 is duplicate on 192.168.1.0/24
<187>1 2021-02-19T08:32:31.438663-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.231 for client b8:27:eb:6e:71:db is duplicate on 192.168.1.0/24
<187>1 2021-02-19T08:32:31.438663-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.231 for client b8:27:eb:6e:71:db is duplicate on 192.168.1.0/24
<187>1 2021-02-19T08:07:42.364818-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.226 for client 00:05:cd:7a:a0:06 is duplicate on 192.168.1.0/24
<187>1 2021-02-19T08:07:42.364818-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.226 for client 00:05:cd:7a:a0:06 is duplicate on 192.168.1.0/24
<187>1 2021-02-19T07:58:22.662319-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.218 for client 98:29:a6:82:11:cd is duplicate on 192.168.1.0/24
<187>1 2021-02-19T07:58:22.662319-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.218 for client 98:29:a6:82:11:cd is duplicate on 192.168.1.0/24
<187>1 2021-02-19T07:43:42.515106-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.223 for client 74:da:38:8b:f5:e7 is duplicate on 192.168.1.0/24
<187>1 2021-02-19T07:43:42.515106-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.223 for client 74:da:38:8b:f5:e7 is duplicate on 192.168.1.0/24
<187>1 2021-02-19T07:41:29.714742-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.229 for client a0:48:1c:a3:6b:69 is duplicate on 192.168.1.0/24
<187>1 2021-02-19T07:41:29.714742-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.229 for client a0:48:1c:a3:6b:69 is duplicate on 192.168.1.0/24
<187>1 2021-02-19T07:32:31.336929-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.231 for client b8:27:eb:6e:71:db is duplicate on 192.168.1.0/24
<187>1 2021-02-19T07:32:31.336929-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.231 for client b8:27:eb:6e:71:db is duplicate on 192.168.1.0/24
<187>1 2021-02-19T07:07:42.237345-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.226 for client 00:05:cd:7a:a0:06 is duplicate on 192.168.1.0/24
<187>1 2021-02-19T07:07:42.237345-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.226 for client 00:05:cd:7a:a0:06 is duplicate on 192.168.1.0/24
<187>1 2021-02-19T06:58:22.635469-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.218 for client 98:29:a6:82:11:cd is duplicate on 192.168.1.0/24
<187>1 2021-02-19T06:58:22.635469-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.218 for client 98:29:a6:82:11:cd is duplicate on 192.168.1.0/24
<187>1 2021-02-19T06:43:42.498822-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.223 for client 74:da:38:8b:f5:e7 is duplicate on 192.168.1.0/24
<187>1 2021-02-19T06:43:42.498822-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.223 for client 74:da:38:8b:f5:e7 is duplicate on 192.168.1.0/24
<187>1 2021-02-19T06:41:28.903608-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.229 for client a0:48:1c:a3:6b:69 is duplicate on 192.168.1.0/24
<187>1 2021-02-19T06:41:28.903608-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.229 for client a0:48:1c:a3:6b:69 is duplicate on 192.168.1.0/24
<187>1 2021-02-19T06:32:31.235066-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.231 for client b8:27:eb:6e:71:db is duplicate on 192.168.1.0/24
<187>1 2021-02-19T06:32:31.235066-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.231 for client b8:27:eb:6e:71:db is duplicate on 192.168.1.0/24
<187>1 2021-02-19T06:07:42.111597-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.226 for client 00:05:cd:7a:a0:06 is duplicate on 192.168.1.0/24
<187>1 2021-02-19T06:07:42.111597-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.226 for client 00:05:cd:7a:a0:06 is duplicate on 192.168.1.0/24
<187>1 2021-02-19T05:58:22.614709-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.218 for client 98:29:a6:82:11:cd is duplicate on 192.168.1.0/24
<187>1 2021-02-19T05:58:22.614709-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.218 for client 98:29:a6:82:11:cd is duplicate on 192.168.1.0/24
<187>1 2021-02-19T05:43:42.462988-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.223 for client 74:da:38:8b:f5:e7 is duplicate on 192.168.1.0/24
<187>1 2021-02-19T05:43:42.462988-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.223 for client 74:da:38:8b:f5:e7 is duplicate on 192.168.1.0/24
<187>1 2021-02-19T05:41:28.964117-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.229 for client a0:48:1c:a3:6b:69 is duplicate on 192.168.1.0/24
<187>1 2021-02-19T05:41:28.964117-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.229 for client a0:48:1c:a3:6b:69 is duplicate on 192.168.1.0/24
<187>1 2021-02-19T05:32:31.133415-05:00 pfSense.HOME dhcpd 61878 - - uid lease 192.168.1.231 for client b8:27:eb:6e:71:db is duplicate on 192.168.1.0/24

revere521 on 19 Feb 2021

@revere521 - The logs provided are Unbound but you indicated the GROK failures with DHCP?

Can you provide some of the DHCP logs?

a3ilson on 19 Feb 2021

i edited my comment so that the bottom set is the DHCP ones. those are the "uid lease is duplicate" ones we looked at before. I'l less concerned with those.

revere521 on 19 Feb 2021

i edited my comment so that the bottom set is the DHCP ones. those are the "uid lease is duplicate" ones we looked at before. I'l less concerned with those.

Awe...I remember. These GROK failures were only related to the duplications?

Everything else is working then?

a3ilson on 19 Feb 2021

Here's a revised GROK filter that should work on all variants but will needs to be tested with pfSense RFC3164 (default)

%{POSINT:[log][syslog][priority]}?(%{INT:[log][syslog][version]}\s*)?(%{SYSLOGTIMESTAMP:[event][created]}|%{TIMESTAMP_ISO8601:[event][created]})\s(%{SYSLOGHOST:[host][name]}\s+)?%{PROG:[process][name]}\s*?(\[)?%{POSINT:[process][pid]}(\]:)?\s*(\-\s*\-)?\s*%{GREEDYDATA:filter_message}

which will amend 03-inputs.conf as follows:

# 03-filter.conf
################################################################################
# Version: 21.03                                                               #
# Required: Yes                                                                #
# Descritpion: Inital GROK pattern filtering for delinating syslog messages    #
# Works for pfSense 2.5.0 (RFC 5424/RFC3164) and OPNsense 21.1+.               #
################################################################################
#
filter {
  if [observer][type] == "firewall" or [observer][type] == "haproxy" or [observer][type] == "suricata" {
    grok {
      match => {"message" => "%{POSINT:[log][syslog][priority]}?(%{INT:[log][syslog][version]}\s*)?(%{SYSLOGTIMESTAMP:[event][created]}|%{TIMESTAMP_ISO8601:[event][created]})\s(%{SYSLOGHOST:[host][name]}\s+)?%{PROG:[process][name]}\s*?(\[)?%{POSINT:[process][pid]}(\]:)?\s*(\-\s*\-)?\s*%{GREEDYDATA:filter_message}"}
      }
    date {
      match => [ "[event][created]", "MMM  d HH:mm:ss", "MMM dd HH:mm:ss", "ISO8601" ]
      target => "[event][created]"
    }
  }
}

a3ilson on 19 Feb 2021

Please test that one...I have it running on OPNsense without any issues.

I'll dig into the DHCP grok issue too (separate GROK pattern)

a3ilson on 19 Feb 2021

@revere521

For the DHCP duplication error, amend your pfelk.grok file lines 17-27 to the following:

# DHCPv4 (Optional)
DHCPD DHCP(%{DHCPD_DISCOVER}|%{DHCPD_DUPLICATE}|%{DHCPD_OFFER_ACK}|%{DHCPD_REQUEST}|%{DHCPD_DECLINE}|%{DHCPD_RELEASE}|%{DHCPD_INFORM}|%{DHCPD_LEASE})(: %{GREEDYDATA:[dhcpv4][option][message]})?
DHCPD_DISCOVER (?<[dhcp][operation]>DISCOVER) from %{MAC:[dhcpv4][client][mac]}( \(%{DATA:[dhcpv4][option][hostname]}\))? %{DHCPD_VIA}
DHCPD_DECLINE (?<[dhcp][operation]>DECLINE) of %{IP:[dhcpv4][client][ip]} from %{MAC:[dhcpv4][client][mac]}( \(%{DATA:[dhcpv4][option][hostname]}\))? %{DHCPD_VIA}
DHCPD_DUPLICATE uid %{WORD:[dhcp][operation]} %{IP:[dhcpv4][client][ip]} for client %{MAC:[dhcpv4][client][mac]} is %{WORD:[dhcpv4][error][code]} on %{GREEDYDATA:[dhcpv4][client][address]}
DHCPD_INFORM (?<[dhcp][operation]>INFORM) from %{IP:[dhcpv4][client][ip]}? %{DHCPD_VIA}
DHCPD_LEASE (?<[dhcp][operation]>LEASE(QUERY|UNKNOWN|ACTIVE|UNASSIGNED)) (from|to) %{IP:[dhcpv4][client][ip]} for (IP %{IP:[dhcpv4][query][ip]}|client-id %{NOTSPACE:[dhcpv4][query][id]}|MAC address %{MAC:[dhcpv4][query][mac]})( \(%{NUMBER:[dhcpv4][query][associated]} associated IPs\))?
DHCPD_OFFER_ACK (?<[dhcp][operation]>(OFFER|N?ACK)) on %{IP:[dhcpv4][client][ip]} to %{MAC:[dhcpv4][client][mac]}( \(%{DATA:[dhcpv4][option][hostname]}\))? %{DHCPD_VIA}
DHCPD_RELEASE (?<[dhcp][operation]>RELEASE) of %{IP:[dhcpv4][client][ip]} from %{MAC:[dhcpv4][client][mac]}( \(%{DATA:[dhcpv4][option][hostname]}\))? %{DHCPD_VIA} \((?<dhcpd_release>(not )?found)\)
DHCPD_REQUEST (?<[dhcp][operation]>REQUEST) for %{IP:[dhcpv4][client][ip]}( \(%{DATA:[dhcpv4][server][ip]}\))? from %{MAC:[dhcpv4][client][mac]}( \(%{DATA:[dhcpv4][option][hostname]}\))? %{DHCPD_VIA}
DHCPD_VIA via (%{IP:[dhcpv4][relay][ip]}|(?<[interface][name]>[^: ]+))

a3ilson on 19 Feb 2021

OK, i have updated my 03-filter.conf and also updated my pfelk.grok. I will let this run for a bit and see if i get any new errors in DHCP with the revised grok.

I'm still seeing the First set of Unbound DNS grokparsefailures - it seems to be all "info" statements

Thats these log messages:

<30>1 2021-02-19T09:18:07.791684-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T09:18:07.791611-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T09:18:07.791611-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T09:18:07.791684-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T09:18:07.788163-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T09:18:07.788083-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T09:18:07.788083-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T09:18:07.788163-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T09:18:07.784738-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T09:18:07.784630-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T09:18:07.784630-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T09:18:07.784738-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T09:16:46.462419-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T09:16:46.462419-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T09:16:13.803266-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T09:16:13.803266-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T09:16:01.835773-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 slimscreen.HOME. A IN
<30>1 2021-02-19T09:16:01.835773-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 slimscreen.HOME. A IN
<30>1 2021-02-19T09:15:34.006430-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T09:15:34.006430-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T09:15:33.639172-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T09:15:33.639172-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T09:14:44.792137-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 nzb.cat. A IN
<30>1 2021-02-19T09:14:44.792137-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 nzb.cat. A IN
<30>1 2021-02-19T09:14:44.698939-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 nzb.cat. A IN
<30>1 2021-02-19T09:14:44.698939-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 nzb.cat. A IN
<30>1 2021-02-19T09:14:13.727440-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T09:14:13.727440-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T09:13:54.296193-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T09:13:54.296193-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T09:13:10.839144-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.163 app-measurement.com. A IN
<30>1 2021-02-19T09:13:10.839144-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.163 app-measurement.com. A IN
<30>1 2021-02-19T09:12:52.417934-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T09:12:52.417934-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T09:12:52.418029-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T09:12:52.418029-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T09:11:52.177455-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.163 app-measurement.com. A IN
<30>1 2021-02-19T09:11:52.177455-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.163 app-measurement.com. A IN
<30>1 2021-02-19T09:10:24.933719-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T09:10:24.933719-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T09:09:37.470601-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 VMSERVER2016ESS.HOME. A IN
<30>1 2021-02-19T09:09:37.470601-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 VMSERVER2016ESS.HOME. A IN
<30>1 2021-02-19T09:09:31.889220-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 outlook.com. A IN
<30>1 2021-02-19T09:09:31.889220-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 outlook.com. A IN
<30>1 2021-02-19T09:09:31.795594-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 outlook.com. A IN
<30>1 2021-02-19T09:09:31.795594-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 outlook.com. A IN
<30>1 2021-02-19T09:09:21.998775-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T09:09:21.998775-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T09:06:13.799027-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T09:06:13.799027-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T09:03:58.175296-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.107 homeserver.HOME. A IN
<30>1 2021-02-19T09:03:58.175296-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.107 homeserver.HOME. A IN
<30>1 2021-02-19T09:03:54.303539-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T09:03:54.303539-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T09:03:07.778909-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T09:03:07.778909-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T09:03:07.778832-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T09:03:07.778832-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T09:03:07.775526-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T09:03:07.775526-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T09:03:07.775609-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T09:03:07.775609-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T09:03:07.673250-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T09:03:07.673284-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T09:03:07.673284-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T09:03:07.673250-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T09:02:52.411460-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T09:02:52.411428-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T09:02:52.411428-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T09:02:52.411460-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T09:01:32.583606-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.108 magicmirror01. AAAA IN
<30>1 2021-02-19T09:01:32.583606-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.108 magicmirror01. AAAA IN
<30>1 2021-02-19T09:01:32.580241-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.108 magicmirror01.HOME. AAAA IN
<30>1 2021-02-19T09:01:32.580241-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.108 magicmirror01.HOME. AAAA IN
<30>1 2021-02-19T09:00:42.643295-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.107 lastpass.com. A IN
<30>1 2021-02-19T09:00:42.643295-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.107 lastpass.com. A IN
<30>1 2021-02-19T09:00:41.248948-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.166 app-measurement.com. A IN
<30>1 2021-02-19T09:00:41.248948-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.166 app-measurement.com. A IN
<30>1 2021-02-19T09:00:24.910372-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T09:00:24.910372-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T08:59:22.003812-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T08:59:22.003812-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T08:57:38.376114-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 HOME.local. SOA IN
<30>1 2021-02-19T08:57:38.376114-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 HOME.local. SOA IN
<30>1 2021-02-19T08:57:36.115925-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzbnoob.com. A IN
<30>1 2021-02-19T08:57:36.115925-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzbnoob.com. A IN
<30>1 2021-02-19T08:57:36.097454-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzb.cat. A IN
<30>1 2021-02-19T08:57:36.097454-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzb.cat. A IN
<30>1 2021-02-19T08:57:36.022364-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzbnoob.com. A IN
<30>1 2021-02-19T08:57:36.022364-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzbnoob.com. A IN
<30>1 2021-02-19T08:57:36.003931-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzb.cat. A IN
<30>1 2021-02-19T08:57:36.003931-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzb.cat. A IN
<30>1 2021-02-19T08:56:46.461372-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T08:56:46.461372-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T08:56:13.794946-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T08:56:13.794946-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T08:55:51.955477-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.50 isatap.HOME. A IN
<30>1 2021-02-19T08:55:51.955477-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.50 isatap.HOME. A IN
<30>1 2021-02-19T08:55:51.893543-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 isatap.HOME. A IN
<30>1 2021-02-19T08:55:51.893543-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 isatap.HOME. A IN
<30>1 2021-02-19T08:54:33.006558-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 VMSERVER2016ESS.HOME. A IN
<30>1 2021-02-19T08:54:33.006558-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 VMSERVER2016ESS.HOME. A IN
<30>1 2021-02-19T08:54:13.710812-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T08:54:13.710812-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T08:53:54.314448-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T08:53:54.314448-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T08:52:52.408423-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T08:52:52.408423-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T08:52:52.408114-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T08:52:52.408114-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T08:50:53.322964-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 undefined.HOME. A IN
<30>1 2021-02-19T08:50:53.322964-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 undefined.HOME. A IN
<30>1 2021-02-19T08:50:24.888721-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T08:50:24.888721-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T08:49:22.008685-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T08:49:22.008685-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T08:48:07.667745-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:48:07.667745-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:48:07.667656-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:48:07.667656-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:48:07.664531-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:48:07.664531-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:48:07.664209-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:48:07.664209-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:48:07.636255-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:48:07.636255-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:48:07.636187-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:48:07.636187-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:47:22.478623-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 HOME.local. NS IN
<30>1 2021-02-19T08:47:22.478623-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 HOME.local. NS IN
<30>1 2021-02-19T08:46:13.791656-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T08:46:13.791656-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T08:45:53.853425-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.117 ubuntuserver1.HOME. A IN
<30>1 2021-02-19T08:45:53.853425-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.117 ubuntuserver1.HOME. A IN
<30>1 2021-02-19T08:43:59.659514-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.163 app-measurement.com. A IN
<30>1 2021-02-19T08:43:59.659514-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.163 app-measurement.com. A IN
<30>1 2021-02-19T08:43:57.486601-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.163 . A IN
<30>1 2021-02-19T08:43:57.486601-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.163 . A IN
<30>1 2021-02-19T08:43:57.460552-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.163 . AAAA IN
<30>1 2021-02-19T08:43:57.460552-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.163 . AAAA IN
<30>1 2021-02-19T08:43:54.323236-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T08:43:54.323236-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T08:42:52.405511-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T08:42:52.405426-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T08:42:52.405511-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T08:42:52.405426-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T08:42:06.634350-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 emby.media. A IN
<30>1 2021-02-19T08:42:06.634350-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 emby.media. A IN
<30>1 2021-02-19T08:42:06.542214-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 emby.media. A IN
<30>1 2021-02-19T08:42:06.542214-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 emby.media. A IN
<30>1 2021-02-19T08:41:38.972012-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T08:41:38.972012-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T08:40:24.873167-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T08:40:24.873167-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T08:39:28.728071-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 VMSERVER2016ESS.HOME. A IN
<30>1 2021-02-19T08:39:28.728071-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 VMSERVER2016ESS.HOME. A IN
<30>1 2021-02-19T08:39:22.000541-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T08:39:22.000541-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T08:37:46.325396-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T08:37:46.325396-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T08:36:46.451197-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T08:36:46.451197-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T08:36:13.787731-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T08:36:13.787731-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T08:35:55.823835-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 slimscreen.HOME. A IN
<30>1 2021-02-19T08:35:55.823835-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 slimscreen.HOME. A IN
<30>1 2021-02-19T08:34:31.905081-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 freecad.HOME. A IN
<30>1 2021-02-19T08:34:31.905081-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 freecad.HOME. A IN
<30>1 2021-02-19T08:34:22.273229-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 HOME.local. NS IN
<30>1 2021-02-19T08:34:22.273229-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 HOME.local. NS IN
<30>1 2021-02-19T08:34:22.272417-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 HOME.local. NS IN
<30>1 2021-02-19T08:34:22.272417-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 HOME.local. NS IN
<30>1 2021-02-19T08:34:13.678395-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T08:34:13.678395-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T08:33:54.339532-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T08:33:54.339532-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T08:33:07.631761-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:33:07.631761-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:33:07.631833-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:33:07.631833-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:33:07.628373-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:33:07.628373-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:33:07.628429-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:33:07.628429-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:33:07.526848-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:33:07.526848-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:33:07.526800-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:33:07.526800-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:32:52.405501-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T08:32:52.405501-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T08:32:52.405454-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T08:32:52.405454-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T08:31:32.584494-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.108 magicmirror01. AAAA IN
<30>1 2021-02-19T08:31:32.584494-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.108 magicmirror01. AAAA IN
<30>1 2021-02-19T08:31:32.580544-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.108 magicmirror01.HOME. AAAA IN
<30>1 2021-02-19T08:31:32.580544-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.108 magicmirror01.HOME. AAAA IN
<30>1 2021-02-19T08:30:24.854979-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T08:30:24.854979-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T08:30:04.696239-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 homeserver.HOME. A IN
<30>1 2021-02-19T08:30:04.696239-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 homeserver.HOME. A IN
<30>1 2021-02-19T08:29:21.989872-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T08:29:21.989872-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T08:27:05.770982-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzbnoob.com. A IN
<30>1 2021-02-19T08:27:05.770982-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzbnoob.com. A IN
<30>1 2021-02-19T08:27:05.677399-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzbnoob.com. A IN
<30>1 2021-02-19T08:27:05.677399-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzbnoob.com. A IN
<30>1 2021-02-19T08:26:13.783456-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T08:26:13.783456-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T08:25:40.087047-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 https.HOME. A IN
<30>1 2021-02-19T08:25:40.087047-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 https.HOME. A IN
<30>1 2021-02-19T08:25:11.772016-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.163 app-measurement.com. A IN
<30>1 2021-02-19T08:25:11.772016-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.163 app-measurement.com. A IN
<30>1 2021-02-19T08:24:21.682190-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 VMSERVER2016ESS.HOME. A IN
<30>1 2021-02-19T08:24:21.682190-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 VMSERVER2016ESS.HOME. A IN
<30>1 2021-02-19T08:23:54.342895-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T08:23:54.342895-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T08:23:40.668942-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.160 app-measurement.com. A IN
<30>1 2021-02-19T08:23:40.668942-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.160 app-measurement.com. A IN
<30>1 2021-02-19T08:22:52.409217-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T08:22:52.409217-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T08:22:52.409132-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T08:22:52.409132-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T08:20:24.843482-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T08:20:24.843482-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T08:19:21.994978-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T08:19:21.994978-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T08:18:07.523014-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:18:07.523014-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:18:07.523091-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:18:07.523091-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:18:07.519732-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:18:07.519732-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:18:07.519660-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:18:07.519660-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:18:07.516272-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:18:07.516272-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:18:07.516237-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:18:07.516237-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:16:46.449845-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T08:16:46.449845-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T08:16:13.778249-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T08:16:13.778249-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T08:14:13.648241-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T08:14:13.648241-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T08:13:54.342803-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T08:13:54.342803-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T08:12:52.409367-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T08:12:52.409367-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T08:12:52.409485-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T08:12:52.409485-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T08:10:50.568224-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T08:10:50.568224-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T08:10:24.817976-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T08:10:24.817976-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T08:09:58.965730-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.166 app-measurement.com. A IN
<30>1 2021-02-19T08:09:58.965730-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.166 app-measurement.com. A IN
<30>1 2021-02-19T08:09:29.887037-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 outlook.com. A IN
<30>1 2021-02-19T08:09:29.887037-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 outlook.com. A IN
<30>1 2021-02-19T08:09:29.794001-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 outlook.com. A IN
<30>1 2021-02-19T08:09:29.794001-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 outlook.com. A IN
<30>1 2021-02-19T08:09:21.998936-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T08:09:21.998936-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T08:09:14.338057-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 VMSERVER2016ESS.HOME. A IN
<30>1 2021-02-19T08:09:14.338057-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 VMSERVER2016ESS.HOME. A IN
<30>1 2021-02-19T08:06:13.773990-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T08:06:13.773990-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T08:03:58.095896-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.107 homeserver.HOME. A IN
<30>1 2021-02-19T08:03:58.095896-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.107 homeserver.HOME. A IN
<30>1 2021-02-19T08:03:53.336187-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T08:03:53.336187-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T08:03:07.510750-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:03:07.510836-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:03:07.510750-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:03:07.510836-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:03:07.507338-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:03:07.507423-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:03:07.507338-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:03:07.507423-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:03:07.503341-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:03:07.503430-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:03:07.503341-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T08:03:07.503430-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T08:02:52.407440-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T08:02:52.407440-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T08:02:52.407481-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T08:02:52.407481-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T08:01:32.596480-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.108 magicmirror01. AAAA IN
<30>1 2021-02-19T08:01:32.596480-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.108 magicmirror01. AAAA IN
<30>1 2021-02-19T08:01:32.594796-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.108 magicmirror01.HOME. AAAA IN
<30>1 2021-02-19T08:01:32.594796-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.108 magicmirror01.HOME. AAAA IN
<30>1 2021-02-19T08:00:24.796825-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T08:00:24.796825-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T07:59:22.001061-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T07:59:22.001061-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T07:57:31.820971-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 HOME.local. SOA IN
<30>1 2021-02-19T07:57:31.820971-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 HOME.local. SOA IN
<30>1 2021-02-19T07:56:46.441248-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T07:56:46.441248-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T07:56:43.375862-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 steam-chat.com. A IN
<30>1 2021-02-19T07:56:43.375862-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 steam-chat.com. A IN
<30>1 2021-02-19T07:56:42.375206-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 steam-chat.com. A IN
<30>1 2021-02-19T07:56:42.375206-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 steam-chat.com. A IN
<30>1 2021-02-19T07:56:42.284479-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T07:56:42.284479-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T07:56:42.281624-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 steam-chat.com. A IN
<30>1 2021-02-19T07:56:42.281624-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 steam-chat.com. A IN
<30>1 2021-02-19T07:56:13.770423-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T07:56:13.770423-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T07:56:05.328065-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 nzb.cat. A IN
<30>1 2021-02-19T07:56:05.328065-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 nzb.cat. A IN
<30>1 2021-02-19T07:56:05.328028-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzbnoob.com. A IN
<30>1 2021-02-19T07:56:05.328028-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzbnoob.com. A IN
<30>1 2021-02-19T07:56:05.233450-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzb.cat. A IN
<30>1 2021-02-19T07:56:05.233450-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzb.cat. A IN
<30>1 2021-02-19T07:56:05.226849-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzbnoob.com. A IN
<30>1 2021-02-19T07:56:05.226849-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 nzbnoob.com. A IN
<30>1 2021-02-19T07:54:31.913545-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.160 youtube.com. A IN
<30>1 2021-02-19T07:54:31.913545-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.160 youtube.com. A IN
<30>1 2021-02-19T07:53:53.349418-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T07:53:53.349418-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T07:52:55.990453-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 isatap.HOME. A IN
<30>1 2021-02-19T07:52:55.990453-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 isatap.HOME. A IN
<30>1 2021-02-19T07:52:52.406664-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T07:52:52.406698-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T07:52:52.406698-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T07:52:52.406664-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T07:52:50.345513-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 VMSERVER2016ESS.HOME. A IN
<30>1 2021-02-19T07:52:50.345513-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.109 VMSERVER2016ESS.HOME. A IN
<30>1 2021-02-19T07:52:38.409727-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 dxfbdiarr.HOME. A IN
<30>1 2021-02-19T07:52:38.409727-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 dxfbdiarr.HOME. A IN
<30>1 2021-02-19T07:52:37.732103-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T07:52:37.732103-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T07:51:53.827671-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.163 app-measurement.com. A IN
<30>1 2021-02-19T07:51:53.827671-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.163 app-measurement.com. A IN
<30>1 2021-02-19T07:50:24.786203-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T07:50:24.786203-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T07:49:21.999088-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T07:49:21.999088-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T07:48:07.498432-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:48:07.498432-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:48:07.498236-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:48:07.498236-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:48:07.495113-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:48:07.495113-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:48:07.494895-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:48:07.494895-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:48:07.491282-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:48:07.491282-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:48:07.491137-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:48:07.491137-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:46:29.598797-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.108 local. SOA IN
<30>1 2021-02-19T07:46:29.598797-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.108 local. SOA IN
<30>1 2021-02-19T07:46:27.331071-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.108 local. SOA IN
<30>1 2021-02-19T07:46:27.331071-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.108 local. SOA IN
<30>1 2021-02-19T07:46:22.038656-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 HOME.local. NS IN
<30>1 2021-02-19T07:46:22.038656-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 HOME.local. NS IN
<30>1 2021-02-19T07:46:13.766172-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T07:46:13.766172-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T07:45:53.433449-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.117 ubuntuserver1.HOME. A IN
<30>1 2021-02-19T07:45:53.433449-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.117 ubuntuserver1.HOME. A IN
<30>1 2021-02-19T07:44:34.912137-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T07:44:34.912137-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T07:43:53.355611-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T07:43:53.355611-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T07:43:41.308900-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T07:43:41.308900-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T07:43:30.873893-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.51 wpad.HOME. A IN
<30>1 2021-02-19T07:43:30.873893-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.51 wpad.HOME. A IN
<30>1 2021-02-19T07:42:52.404852-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T07:42:52.404852-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.104 grafana.com. AAAA IN
<30>1 2021-02-19T07:42:52.404895-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T07:42:52.404895-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.104 grafana.com. A IN
<30>1 2021-02-19T07:41:54.200243-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.51 wpad.HOME. A IN
<30>1 2021-02-19T07:41:54.200243-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.51 wpad.HOME. A IN
<30>1 2021-02-19T07:41:54.159286-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.51 wpad.HOME. A IN
<30>1 2021-02-19T07:41:54.159286-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.51 wpad.HOME. A IN
<30>1 2021-02-19T07:40:24.762426-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T07:40:24.762426-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.107 wpad.HOME. A IN
<30>1 2021-02-19T07:40:02.727491-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T07:40:02.727491-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T07:39:21.991263-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T07:39:21.991263-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.192 wpad.HOME. A IN
<30>1 2021-02-19T07:37:04.987740-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 thexem.de. A IN
<30>1 2021-02-19T07:37:04.987740-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 thexem.de. A IN
<30>1 2021-02-19T07:37:04.895247-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 thexem.de. A IN
<30>1 2021-02-19T07:37:04.895247-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 thexem.de. A IN
<30>1 2021-02-19T07:36:46.425000-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T07:36:46.425000-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 wpad.HOME. A IN
<30>1 2021-02-19T07:36:13.761476-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T07:36:13.761476-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 wpad.HOME. A IN
<30>1 2021-02-19T07:35:21.138195-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 slimscreen.HOME. A IN
<30>1 2021-02-19T07:35:21.138195-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 slimscreen.HOME. A IN
<30>1 2021-02-19T07:35:03.111363-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 prophecynewswatch.com. A IN
<30>1 2021-02-19T07:35:03.111363-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 prophecynewswatch.com. A IN
<30>1 2021-02-19T07:34:46.324846-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:34:46.324846-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:34:46.324930-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:34:46.324930-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:34:46.322554-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:34:46.322638-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:34:46.322638-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:34:46.322554-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:34:46.320011-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:34:46.320095-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:34:46.320095-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:34:46.320011-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:34:16.439956-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 HOME.local. NS IN
<30>1 2021-02-19T07:34:16.439073-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 HOME.local. NS IN
<30>1 2021-02-19T07:34:16.439073-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 HOME.local. NS IN
<30>1 2021-02-19T07:34:16.439956-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.109 HOME.local. NS IN
<30>1 2021-02-19T07:34:10.630816-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 doh.test. A IN
<30>1 2021-02-19T07:34:10.630816-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 doh.test. A IN
<30>1 2021-02-19T07:34:10.402325-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 use-application-dns.net. A IN
<30>1 2021-02-19T07:34:10.402325-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 use-application-dns.net. A IN
<30>1 2021-02-19T07:34:10.378435-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 google.com. A IN
<30>1 2021-02-19T07:34:10.378435-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.101 google.com. A IN
<30>1 2021-02-19T07:33:53.358118-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T07:33:53.358118-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.102 wpad.HOME. A IN
<30>1 2021-02-19T07:33:30.851424-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.51 wpad.HOME. A IN
<30>1 2021-02-19T07:33:30.851424-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.51 wpad.HOME. A IN
<30>1 2021-02-19T07:33:27.831278-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 github.com. A IN
<30>1 2021-02-19T07:33:27.831278-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.101 github.com. A IN
<30>1 2021-02-19T07:33:27.639315-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:27.639315-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:27.639349-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:27.639349-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:27.611151-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:27.611151-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:27.611054-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:27.611054-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:27.587692-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:27.587692-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:27.587604-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:27.587604-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:25.211054-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:25.211054-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:25.211214-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:25.211214-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:21.385413-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:21.385413-05:00 pfSense.HOME unbound 61095 - - [61095:0] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:21.385358-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:21.385358-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:20.388711-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:20.388711-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:20.388789-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:20.388789-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:19.410257-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:19.410257-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. AAAA IN
<30>1 2021-02-19T07:33:19.410171-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:19.410171-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:19.320037-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN
<30>1 2021-02-19T07:33:19.320037-05:00 pfSense.HOME unbound 61095 - - [61095:1] info: 192.168.1.113 octoprint.org. A IN

revere521 on 19 Feb 2021

👍1

@revere521 - To confirm is your Unbound Log Level Verbosity set to 1

a3ilson on 19 Feb 2021

@revere521 - The Unbound issue was fixed, please update the 05-apps.conf file.

a3ilson on 19 Feb 2021

I updated the file, my verbosity is set to 0 in the GUI, and i use the command in the custom commands to log only the queries...no issues so far, thanks!

revere521 on 19 Feb 2021

👍1

pfSense 2.5.0 RFC5424 supported

🏆 Kuddos to @revere521 for testing/validating!

a3ilson on 19 Feb 2021

@revere521 - When/if you take the Suricata plunge - let me know! I am curious as to if the EVE logs can be sent via RFC5424 without installing syslog-ng (pfSense).

a3ilson on 19 Feb 2021

I'm not in a rush, but when I do i will certainly test. I have been spending my weekends away from the PC (usually not going into my office at all) so I'm not doing as much tinkering as usual.

revere521 on 19 Feb 2021

Was this page helpful?

0 / 5 - 0 ratings