Announcement

Collapse
No announcement yet.

Thousands of log lines

Collapse
X
Collapse
 
  • Page of 1
  • Filter
  • Time
  • Show
Clear All
new posts
Previous template Next
  • #1

    Thousands of log lines

    Version: 4.7.1.2

    My logs are filling up with hundreds of thousands of the lines below. How can I see what the entries are or resolve the issue, or is this normal?

    2025-01-07T08:48:51.418405-05:00 dns1 startup.sh[146492]: message repeated 2 times: [ INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 1.]
    2025-01-07T08:48:51.424192-05:00 dns1 startup.sh[146492]: INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 2.
    2025-01-07T08:48:51.427944-05:00 dns1 startup.sh[146492]: INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 1.
    2025-01-07T08:48:51.439113-05:00 dns1 startup.sh[146492]: message repeated 3 times: [ INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 1.]
    2025-01-07T08:48:51.444385-05:00 dns1 startup.sh[146492]: INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 3.
    2025-01-07T08:48:51.449828-05:00 dns1 startup.sh[146492]: INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 2.
    2025-01-07T08:48:51.455469-05:00 dns1 startup.sh[146492]: INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 1.
    2025-01-07T08:48:51.476454-05:00 dns1 startup.sh[146492]: message repeated 4 times: [ INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 1.]
    2025-01-07T08:48:51.479276-05:00 dns1 startup.sh[146492]: INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 2.
    2025-01-07T08:48:51.481883-05:00 dns1 startup.sh[146492]: INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 1.
    2025-01-07T08:48:51.496166-05:00 dns1 startup.sh[146492]: message repeated 4 times: [ INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 1.]
    2025-01-07T08:48:51.500560-05:00 dns1 startup.sh[146492]: INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 2.
    2025-01-07T08:48:51.507179-05:00 dns1 startup.sh[146492]: INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 3.
    2025-01-07T08:48:51.510988-05:00 dns1 startup.sh[146492]: INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 1.
    2025-01-07T08:48:51.530789-05:00 dns1 startup.sh[146492]: message repeated 5 times: [ INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 1.]
    2025-01-07T08:48:51.533891-05:00 dns1 startup.sh[146492]: INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 2.
    2025-01-07T08:48:51.537426-05:00 dns1 startup.sh[146492]: INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 1.
    2025-01-07T08:48:51.542590-05:00 dns1 startup.sh[146492]: INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 1.
    2025-01-07T08:48:51.547797-05:00 dns1 startup.sh[146492]: INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 4.
    2025-01-07T08:48:51.551765-05:00 dns1 startup.sh[146492]: INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 2.
    2025-01-07T08:48:51.555009-05:00 dns1 startup.sh[146492]: INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 1.
    2025-01-07T08:48:51.558026-05:00 dns1 startup.sh[146492]: INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 1.
    2025-01-07T08:48:51.560950-05:00 dns1 startup.sh[146492]: INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 3.
    2025-01-07T08:48:51.564310-05:00 dns1 startup.sh[146492]: INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 1.
    2025-01-07T08:48:51.567940-05:00 dns1 startup.sh[146492]: INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 2.
    2025-01-07T08:48:51.571675-05:00 dns1 startup.sh[146492]: INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 1.
    2025-01-07T08:48:51.575470-05:00 dns1 startup.sh[146492]: INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 2.
    2025-01-07T08:48:51.579993-05:00 dns1 startup.sh[146492]: INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 2.
    2025-01-07T08:48:51.584822-05:00 dns1 startup.sh[146492]: INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 1.
    2025-01-07T08:48:51.596945-05:00 dns1 startup.sh[146492]: message repeated 3 times: [ INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 1.]
    2025-01-07T08:48:51.599881-05:00 dns1 startup.sh[146492]: INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 2.
    2025-01-07T08:48:51.604028-05:00 dns1 startup.sh[146492]: INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 1.
    2025-01-07T08:48:51.607882-05:00 dns1 startup.sh[146492]: INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 2.
    2025-01-07T08:48:51.612609-05:00 dns1 startup.sh[146492]: INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 1.
    2025-01-07T08:48:51.616889-05:00 dns1 startup.sh[146492]: INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 1.
    2025-01-07T08:48:51.620867-05:00 dns1 startup.sh[146492]: INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 3.
    2025-01-07T08:48:51.624313-05:00 dns1 startup.sh[146492]: INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 0.
    2025-01-07T08:48:51.627907-05:00 dns1 startup.sh[146492]: INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 1.
    2025-01-07T08:48:51.642907-05:00 dns1 startup.sh[146492]: message repeated 4 times: [ INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 1.]
    2025-01-07T08:48:51.646569-05:00 dns1 startup.sh[146492]: INFO [01-07 08:48:51] - UdpServer.run, requestQueue.size = 2.
    Tags: None
  • #2
    Seems to be weird. It prints out that requestQueue.size message once in 100 DNS requests. But it seems like there's nothing between those messages. Do you not see any other message? Only that message in every log files?

    Comment

    • #3
      Just those - is there a debug feature I can turn on to see what is causing it or anything else? Is there any log files anywhere else I can look?

      Comment

      • #4
        To enable debugging: https://tutorial.nxfilter.org/i-faq.php#enable-debug

        Comment

        • #5
          Here is the debug log.

          2025-01-07T10:50:17.667562-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, RH #1, signaler-pa.clients6.google.com, rqSize = 38, rDc = 1, rTtl = 0, rType = 65, cltIp = 64.203.140.94.
          2025-01-07T10:50:17.667628-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, REFUESD to Type 65, 64.203.140.94 - signaler-pa.clients6.google.com.
          2025-01-07T10:50:17.667662-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, RH #1, signaler-pa.clients6.google.com, rqSize = 37, rDc = 1, rTtl = 0, rType = 65, cltIp = 64.203.151.18.
          2025-01-07T10:50:17.667674-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, REFUESD to Type 65, 64.203.151.18 - signaler-pa.clients6.google.com.
          2025-01-07T10:50:17.667720-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, RH #1, signaler-pa.clients6.google.com, rqSize = 36, rDc = 1, rTtl = 0, rType = 65, cltIp = 206.74.195.134.
          2025-01-07T10:50:17.667731-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, REFUESD to Type 65, 206.74.195.134 - signaler-pa.clients6.google.com.
          2025-01-07T10:50:17.667766-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, RH #1, signaler-pa.clients6.google.com, rqSize = 35, rDc = 1, rTtl = 0, rType = 65, cltIp = 206.74.195.134.
          2025-01-07T10:50:17.667777-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, REFUESD to Type 65, 206.74.195.134 - signaler-pa.clients6.google.com.
          2025-01-07T10:50:17.667795-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, RH #1, signaler-pa.clients6.google.com, rqSize = 34, rDc = 1, rTtl = 0, rType = 65, cltIp = 64.203.151.18.
          2025-01-07T10:50:17.667808-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, REFUESD to Type 65, 64.203.151.18 - signaler-pa.clients6.google.com.
          2025-01-07T10:50:17.667927-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, RH #1, signaler-pa.clients6.google.com, rqSize = 33, rDc = 1, rTtl = 0, rType = 65, cltIp = 64.203.151.18.
          2025-01-07T10:50:17.667946-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, REFUESD to Type 65, 64.203.151.18 - signaler-pa.clients6.google.com.
          2025-01-07T10:50:17.668023-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, RH #1, signaler-pa.clients6.google.com, rqSize = 32, rDc = 1, rTtl = 0, rType = 65, cltIp = 64.203.151.2.
          2025-01-07T10:50:17.668036-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, REFUESD to Type 65, 64.203.151.2 - signaler-pa.clients6.google.com.
          2025-01-07T10:50:17.668080-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, RH #1, signaler-pa.clients6.google.com, rqSize = 31, rDc = 1, rTtl = 0, rType = 65, cltIp = 64.203.140.94.
          2025-01-07T10:50:17.668091-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, REFUESD to Type 65, 64.203.140.94 - signaler-pa.clients6.google.com.
          2025-01-07T10:50:17.668121-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, RH #1, signaler-pa.clients6.google.com, rqSize = 30, rDc = 1, rTtl = 0, rType = 65, cltIp = 206.74.195.134.
          2025-01-07T10:50:17.668136-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, REFUESD to Type 65, 206.74.195.134 - signaler-pa.clients6.google.com.
          2025-01-07T10:50:17.668146-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, RH #1, signaler-pa.clients6.google.com, rqSize = 29, rDc = 1, rTtl = 0, rType = 65, cltIp = 64.203.151.66.
          2025-01-07T10:50:17.668196-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, REFUESD to Type 65, 64.203.151.66 - signaler-pa.clients6.google.com.
          2025-01-07T10:50:17.668213-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, RH #1, signaler-pa.clients6.google.com, rqSize = 28, rDc = 1, rTtl = 0, rType = 65, cltIp = 64.203.151.2.
          2025-01-07T10:50:17.668249-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, REFUESD to Type 65, 64.203.151.2 - signaler-pa.clients6.google.com.
          2025-01-07T10:50:17.668281-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, RH #15, signaler-pa.clients6.google.com, rqSize = 105, rDc = 1, rTtl = 0, rType = 65, cltIp = 64.203.151.2.
          2025-01-07T10:50:17.668325-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, REFUESD to Type 65, 64.203.151.2 - signaler-pa.clients6.google.com.
          2025-01-07T10:50:17.668374-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, RH #12, signaler-pa.clients6.google.com, rqSize = 106, rDc = 1, rTtl = 0, rType = 65, cltIp = 64.203.151.18.
          2025-01-07T10:50:17.668408-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, REFUESD to Type 65, 64.203.151.18 - signaler-pa.clients6.google.com.
          2025-01-07T10:50:17.668455-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, RH #15, signaler-pa.clients6.google.com, rqSize = 26, rDc = 1, rTtl = 0, rType = 65, cltIp = 64.203.151.18.
          2025-01-07T10:50:17.668468-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, REFUESD to Type 65, 64.203.151.18 - signaler-pa.clients6.google.com.
          2025-01-07T10:50:17.668501-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, RH #1, signaler-pa.clients6.google.com, rqSize = 27, rDc = 1, rTtl = 0, rType = 65, cltIp = 64.203.151.66.
          2025-01-07T10:50:17.668514-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, REFUESD to Type 65, 64.203.151.66 - signaler-pa.clients6.google.com.
          2025-01-07T10:50:17.668603-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, RH #13, signaler-pa.clients6.google.com, rqSize = 45, rDc = 1, rTtl = 0, rType = 65, cltIp = 64.203.151.66.
          2025-01-07T10:50:17.668626-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, REFUESD to Type 65, 64.203.151.66 - signaler-pa.clients6.google.com.
          2025-01-07T10:50:17.668654-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, REFUESD to Type 65, 64.203.151.18 - signaler-pa.clients6.google.com.
          2025-01-07T10:50:17.668720-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, REFUESD to Type 65, 64.203.151.18 - signaler-pa.clients6.google.com.
          2025-01-07T10:50:17.668764-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, REFUESD to Type 65, 64.203.151.66 - signaler-pa.clients6.google.com.
          2025-01-07T10:50:17.668786-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, RH #14, signaler-pa.clients6.google.com, rqSize = 20, rDc = 1, rTtl = 0, rType = 65, cltIp = 64.203.151.66.
          2025-01-07T10:50:17.668806-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, REFUESD to Type 65, 64.203.156.54 - signaler-pa.clients6.google.com.
          2025-01-07T10:50:17.668871-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, REFUESD to Type 65, 204.116.9.18 - signaler-pa.clients6.google.com.
          2025-01-07T10:50:17.668922-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, RH #16, signaler-pa.clients6.google.com, rqSize = 101, rDc = 1, rTtl = 0, rType = 65, cltIp = 64.203.151.2.
          2025-01-07T10:50:17.668933-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, REFUESD to Type 65, 64.203.151.2 - signaler-pa.clients6.google.com.
          2025-01-07T10:50:17.668945-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, REFUESD to Type 65, 64.203.140.94 - signaler-pa.clients6.google.com.
          2025-01-07T10:50:17.668990-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, RH #5, signaler-pa.clients6.google.com, rqSize = 15, rDc = 1, rTtl = 0, rType = 65, cltIp = 206.74.195.134.
          2025-01-07T10:50:17.669021-05:00 dns1 startup.sh[228186]: DEBUG [01-07 10:50:17] - RHr, REFUESD to Type 65, 206.74.195.134 - signaler-pa.clients6.google.com.

          Comment

          • #6
            Do you have Apple devices in your network?

            What's the version of NxFilter?

            Comment

            • #7
              Yes I have users with iphones and ipads

              Version: 4.7.1.2

              Comment

              • #8
                They send tons of type 65 queries to bypass filtering and we block it. That's what happened. Maybe we print it out once in 1000 then or make it debug level.

                Comment

                • #9
                  Ahh... with the amount of apple devices, I suggest making it a debug level logging event.

                  Comment

                  • #10
                    It will be on debug level from the next version.

                    Comment

                    Previous template Next
                    Working...
                    X