Skynet Skynet Statistics Results All mixed Up

[custmblt]

So recently after upgrading skynet to 7.6.4 all my blocked devices (outbound) is all mixed up meaning same devices multiple times with the wrong address. Ip's don't match devices and devices don't match Ip's...it just all mixed up. I have removed and reinstalled skynet including swap file and even did a factory restore on the router(RT-AX86U Pro) one time restoring backup and another time rebuilding without. Lastly tried renaming all the devices but still its all mixed up. Everything else appears to working correctly. Anyway to roll back to an older version of skynet?

I'm guessing this must be a bug?

 

[custmblt]

Anyway to downgrade to an older version of skynet? This bug doesn't appear to be effecting the main function , just how to organizes the logs for the connected devises. Its weird, for instance one device may show 2-3 times with the same name but different ip's just all mixed up. Yes I have IP and Mac binding on.

 

[Adamm]

Anyway to downgrade to an older version of skynet? This bug doesn't appear to be effecting the main function , just how to organizes the logs for the connected devises. Its weird, for instance one device may show 2-3 times with the same name but different ip's just all mixed up. Yes I have IP and Mac binding on.

Skynets logic hasn’t changed in years, you will need to provide some screenshots of the behaviour and possibly your log file so I can see if there is actually an issue here.

 

[custmblt]

I don't have any of the logs or screen shots anymore just did a factory reset then reinstalled Asus Merlin. I checked 3 of the 4 new USB drives being used for the swap and found that they were not formatted to ext4 as recommended. I don't completely understand why because I used the format function on Asus UI to format. In either case I formatted reinstalled and everything on the logs is looking good at the monument but this is what usually happens, then a few days later it gets all messed up. I will keep an eye on it for the next few days and report back with logs & screen shots or hopefully it was just the USB?

Thanks

 

[custmblt]

Well didn't take long, see below. Every time I open computer names will have the wrong IPs but from what I can tell the router is routing correctly just not able to show it correctly in the UI. This started as soon as I updated to the new SkyNet version. Really doesn't seem like a big deal has it doesn't appear to be causing any other problems at the moment. On average I have 15-25 devices on my network so this log can get super mixed up. In any case something changed maybe on my end maybe not. Any ideas would be helpful.

FYI just to clarify for instance: the (ideapad-laptop) is just one machine notice how it shows multiple times with different address and then if you refresh the page it will show different names with the same or different names and or IPs.....its just all mixed up. but if you look at the logs it doesn't reflect what you see below. Anyway I just reset on last time with another new USB formatted in EXT4 for extra measure but I'm confidante that it will do it again.

 

[Ripshod]

I haven't had any outbound traffic blocked by skynet from any of my devices yet to compare, but I'm noticing similar errors in pi-hole (on an internal Linux server). All my devices have manual IPs and some domains defined in LAN>DHCP, but these are getting mixed up somewhere along the line. I'm seeing MAC addresses for IoT devices on a VLAN used for devices like my server on the main (wired) network.
I don't think this is directly caused by skynet. What you're seeing @custmblt is likely just a symptom of something else - something serious but not yet identified.

 

[dave14305]

Look for any stale entries to understand if there’s a reasonable explanation for the name reuse (combinations of MAC, IP and name).

nvram get custom_clientlist
cat /var/lib/misc/dnsmasq.leases
ip neigh

Which IP is the real (or current) ideapad?

 

[Ripshod]

Look for any stale entries to understand if there’s a reasonable explanation for the name reuse (combinations of MAC, IP and name).

nvram get custom_clientlist
cat /var/lib/misc/dnsmasq.leases
ip neigh

Which IP is the real (or current) ideapad?

Is there any way to flush these entries? I have a few "STALE" entries, unrelated to the errors I'm seeing in Pi-hole.

 

[dave14305]

Is there any way to flush these entries? I have a few "STALE" entries, unrelated to the errors I'm seeing in Pi-hole.

Don’t worry about the ip neigh STALE entries. I was thinking more about the first 2 commands, then threw in the third for good measure to trace the Skynet lookup from IP to MAC to Name.

 

[Ripshod]

From nvram get custom-clientlist

<Gilly-Tablet>xx:xx:F6:38:9E:9D>0>9>>>>>

From cat /var/lib/misc/dnsmasq.leases

85877 xx:xx:f6:38:9e:9d 10.0.0.8 tablet 01:xx:xx:f6:38:9e:9d

From Pi-hole

 

[dave14305]

From Pi-hole
View attachment 63880

Not likely related to this thread, but check the Pi-Hole conditional forwarding settings to make sure it queries the router for the local domain and local subnet (10.0.0.0/24).

 

[Ripshod]

Not likely related to this thread, but check the Pi-Hole conditional forwarding settings to make sure it queries the router for the local domain and local subnet (10.0.0.0/24).

Conditional forwarding is correct, and matches the dhcp server on the router. I actually use 10.0.0.0/27 as not a lot of devices on the main lan - that's plenty enough and can be expanded as/when needed.

 

[dave14305]

Conditional forwarding is correct, and matches the dhcp server on the router. I actually use 10.0.0.0/27 as not a lot of devices on the main lan - that's plenty enough and can be expanded as/when needed.

How many lease files?

ls -l /var/lib/misc/dnsmasq*

 

[Ripshod]

How many lease files?

ls -l /var/lib/misc/dnsmasq*

Two.

-rw-r--r--    1 Gilly    root           315 Feb  8 12:47 /var/lib/misc/dnsmasq-4.leases
-rw-r--r--    1 Gilly    root           623 Feb  8 13:02 /var/lib/misc/dnsmasq.leases

 

[Twiglets]

Is there any way to flush these entries? I have a few "STALE" entries, unrelated to the errors I'm seeing in Pi-hole.

The only way I know to flush 'STALE' entries is to delete '/var/lib/misc/dnsmasq.leases' and restart dnsmasq.

[You can edit the entries out of the 'dnsmasq.lease' files as it is just a text list THEN do the restart of dnsmasq BUT this does not always work ]

rm /var/lib/misc/dnsmasq.leases

service restart_dnsmasq

 

[Ripshod]

rm /var/lib/misc/dnsmasq.leases

service restart_dnsmasq

Stone the crows. All fixed now. Thanks @Twiglets
View attachment 63889

 

[dave14305]

FYI just to clarify for instance: the (ideapad-laptop) is just one machine notice how it shows multiple times with different address and then if you refresh the page it will show different names with the same or different names and or IPs.....its just all mixed up.

Is ideapad-laptop the last entry in the list from nvram get custom_clientlist

If so, I think it’s a problem when the IP isn’t present in ip neigh output, but Skynet doesn’t check for an empty MAC result before searching the custom_clientlist. Then you always get the last entry from custom_clientlist.

Just a theory.

 

[custmblt]

Look for any stale entries to understand if there’s a reasonable explanation for the name reuse (combinations of MAC, IP and name).

nvram get custom_clientlist
cat /var/lib/misc/dnsmasq.leases
ip neigh

Which IP is the real (or current

Look for any stale entries to understand if there’s a reasonable explanation for the name reuse (combinations of MAC, IP and name).

nvram get custom_clientlist
cat /var/lib/misc/dnsmasq.leases
ip neigh

Which IP is the real (or current) ideapad?

) ideapad?

The 192.168.50.167

 

[custmblt]

How many lease files?

ls -l /var/lib/misc/dnsmasq*

just one

 

[custmblt]

just one

sorry forgot to show results ( -rw-r--r-- 1 Promptly root 1243 Feb 8 09:50 /var/lib/misc/dnsmasq.leases)