Thanks man, I appreciate you willing to help!post the output of "show run" and "show sz status" and "show sz logs"
My pihole reports this entry several times a minute:
2020-12-29 11:39:50 | A | sw-registrar.ruckuswireless.com | utm.local | Blocked (exact blacklist) | IP (0.0ms) |
That shows coming from my Untangle box, which shows up like that since I use it for DHCP and pihole contacts it for local name resolution. So it doesn't show coming from my Brocade switch directly, but this 7250-48P is the only Brocade/Ruckus device I have running on the network and I 100% assume it to be the culprit.
Here's the requested info, I've cut out my VLAN and port names so it isn't a mile long.
Code:
show run
Current configuration:
!
ver 08.0.80eT213
!
stack unit 1
module 1 icx7250-48p-poe-port-management-module
module 2 icx7250-sfp-plus-8port-80g-module
!
!
!
no inline power ethernet 1/1/35 to 1/1/36
aaa authentication web-server default local
aaa authentication login default local
enable telnet authentication
enable aaa console
hostname fl-es1
ip dhcp-client disable
ip dns domain-list 200freedomlane.com
ip dns server-address 192.168.1.1 9.9.9.9
ip route 0.0.0.0/0 192.168.1.1
!
no telnet server
username admin password .....
!
!
snmp-server community ..... ro
!
!
clock summer-time
clock timezone gmt GMT-05
!
!
ntp
disable serve
server 216.239.35.0
server 216.239.35.4
!
!
!
sz disable
!
no sz registrar
!
!
!
end
Code:
show sz status
============ SZ Agent State Info ===================
Config Status: Disabled Operation Status: Disabled
State: DISABLED Prev State: INIT Event: NONE
SWR List : None
Active List : None
DHCP Option 43 : No
DHCP Opt 43 List : None
Passive List : None
Merged List : None
Merged Idx: 0 IP : 0.0.0.0
SZ IP Used : 0.0.0.0
SZ Query Status :
Not Initiated
SSH Tunnel Status - :
Tunnel Status : Not Initiated
CLI IP/Port : /0
SNMP IP/Port : /0
Syslog IP/Port : /0
Timer Status : Not Running
EDIT It looks like my log output is being truncated here and there are current entries. I can't figure out the correct syntax to get current date info.
show sz logs | begin xxx may work if I can use it to search for today.
Code:
IP Addrs:
Sep 9 15:57:34:54.186.0.83
Sep 9 15:57:34:54.191.58.33
Sep 9 15:57:34:34.208.35.231
Sep 9 15:57:34:
Sep 9 15:57:34:Resolved swr_ip:54.186.0.83
Sep 9 15:57:34:ca_connect_via_https>Init request to 54.186.0.83 Method: 3 URL: /api/v2/switches/DUQ3219N108
Sep 9 15:57:34:https_connmgr_send_request>Entered.
Sep 9 15:57:34:https_connmgr_send_request>Starting Connect with con: 0 req: 0 Comb:00000000
Sep 9 15:57:34:https_connmgr_send_request>Done.
Sep 9 15:57:34:https_client_callback>with Action: 4097 -- User-Data: 00000000
Sep 9 15:57:34:https_client_callback:125>Connect:Rx Handle 1 My hdl-0/0
Sep 9 15:57:36:http_conn_mgr_outgoing_connection_ready_cb>Entered.
Sep 9 15:57:36:http_conn_mgr_outgoing_connection_ready_cb>HTTP Send with con: 0 req: 0 Comb:00000000
Sep 9 15:57:36:http_conn_mgr_outgoing_connection_ready_cb>Done.
Sep 9 15:57:36:https_client_callback>with Action: 4115 -- User-Data: 00000000
Sep 9 15:57:36:https_client_callback:148>Get/Post:Rx Handle 1 My hdl-0/0
Sep 9 15:57:37:http_conn_mgr_receive_data_ready_cb>Entered.
Sep 9 15:57:37:http_conn_mgr_receive_data_ready_cb>HTTP Recv with con: 0 req: 0 Comb:00000000
Sep 9 15:57:37:http_conn_mgr_receive_data_ready_cb>Done.
Sep 9 15:57:37:http_conn_mgr_remote_close_connection_cb>Entered.
Sep 9 15:57:37:http_conn_mgr_remote_close_connection_cb>HTTP Closing con: 0 req: 0 Comb:00000000
Sep 9 15:57:37:https_client_callback>with Action: 4098 -- User-Data: 00000000
Sep 9 15:57:37:https_client_callback:166>Recv:Rx Handle 1 My hdl-0/0
Sep 9 15:57:37:Enter sz_agt_swr_query_resp_cb with status: 404, buf: , parm: 0
Sep 9 15:57:37:Start SZ_SWR_TIMER with time_out: 57570544
Sep 9 15:57:37:ca_stop_timer>Cancelled Timer id 0, rc=0
Sep 9 15:57:37:ca_start_timer:-89159962>Started timer with l/p 57570544/57570544 for u17, rc 0, id 0
Sep 9 15:57:37:Switch registrar discovery failed with http status = 404
Sep 9 15:57:37:https_client_callback>with Action: 4099 -- User-Data: 00000000
Sep 9 15:57:37:https_client_callback:135>Close:Rx Handle 1 My hdl-0/0
Sep 10 07:57:05:ca_stop_timer>Cancelled Timer id 0, rc=344846205
Sep 10 07:57:05:sz_swr_discovery>Attempting Switch Registrar DISCOVER count = 1144
Sep 10 07:57:05:Enter sz_send_swr_query_request with source = 0
Sep 10 07:57:05:Resolving Switch REGISTRAR FQDN: sw-registrar.ruckuswireless.com
Sep 10 07:57:05:FQDN Info for ca_resolve_fqdn
Sep 10 07:57:05:IP Count: 3 FQDN: sw-registrar.ruckuswireless.com
IP Addrs:
Sep 10 07:57:05:34.208.35.231
Sep 10 07:57:05:54.191.58.33
Sep 10 07:57:05:54.186.0.83
Sep 10 07:57:05:
Sep 10 07:57:05:Resolved swr_ip:34.208.35.231
Sep 10 07:57:05:ca_connect_via_https>Init request to 34.208.35.231 Method: 3 URL: /api/v2/switches/DUQ3219N108
Sep 10 07:57:05:https_connmgr_send_request>Entered.
Sep 10 07:57:05:https_connmgr_send_request>Starting Connect with con: 0 req: 0 Comb:00000000
Sep 10 07:57:05:https_connmgr_send_request>Done.
Sep 10 07:57:05:https_client_callback>with Action: 4097 -- User-Data: 00000000
Sep 10 07:57:05:https_client_callback:125>Connect:Rx Handle 1 My hdl-0/0
Sep 10 07:57:07:http_conn_mgr_outgoing_connection_ready_cb>Entered.
Sep 10 07:57:07:http_conn_mgr_outgoing_connection_ready_cb>HTTP Send with con: 0 req: 0 Comb:00000000
Sep 10 07:57:07:http_conn_mgr_outgoing_connection_ready_cb>Done.
Sep 10 07:57:07:https_client_callback>with Action: 4115 -- User-Data: 00000000
Sep 10 07:57:07:https_client_callback:148>Get/Post:Rx Handle 1 My hdl-0/0
Sep 10 07:57:07:http_conn_mgr_receive_data_ready_cb>Entered.
Sep 10 07:57:07:http_conn_mgr_receive_data_ready_cb>HTTP Recv with con: 0 req: 0 Comb:00000000
Sep 10 07:57:07:http_conn_mgr_receive_data_ready_cb>Done.
Sep 10 07:57:07:http_conn_mgr_remote_close_connection_cb>Entered.
Sep 10 07:57:07:http_conn_mgr_remote_close_connection_cb>HTTP Closing con: 0 req: 0 Comb:00000000
Sep 10 07:57:07:https_client_callback>with Action: 4098 -- User-Data: 00000000
Sep 10 07:57:07:https_client_callback:166>Recv:Rx Handle 1 My hdl-0/0
Sep 10 07:57:07:Enter sz_agt_swr_query_resp_cb with status: 404, buf: , parm: 0
Sep 10 07:57:07:Start SZ_SWR_TIMER with time_out: 57570544
Sep 10 07:57:07:ca_stop_timer>Cancelled Timer id 0, rc=0
Sep 10 07:57:07:ca_start_timer:-31587303>Started timer with l/p 57570544/57570544 for u17, rc 0, id 0
Sep 10 07:57:07:Switch registrar discovery failed with http status = 404
Sep 10 07:57:07:https_client_callback>with Action: 4099 -- User-Data: 00000000
Sep 10 07:57:07:https_client_callback:135>Close:Rx Handle 1 My hdl-0/0
Sep 10 23:56:35:ca_stop_timer>Cancelled Timer id 0, rc=349544543
Sep 10 23:56:35:sz_swr_discovery>Attempting Switch Registrar DISCOVER count = 1145
Sep 10 23:56:35:Enter sz_send_swr_query_request with source = 0
Sep 10 23:56:35:Resolving Switch REGISTRAR FQDN: sw-registrar.ruckuswireless.com
Sep 10 23:56:35:FQDN Info for ca_resolve_fqdn
Sep 10 23:56:35:IP Count: 3 FQDN: sw-registrar.ruckuswireless.com
IP Addrs:
Sep 10 23:56:35:54.191.58.33
Sep 10 23:56:35:34.208.35.231
Sep 10 23:56:35:54.186.0.83
Sep 10 23:56:35:
Sep 10 23:56:35:Resolved swr_ip:54.191.58.33
Sep 10 23:56:35:ca_connect_via_https>Init request to 54.191.58.33 Method: 3 URL: /api/v2/switches/DUQ3219N108
Sep 10 23:56:35:https_connmgr_send_request>Entered.
Sep 10 23:56:35:https_connmgr_send_request>Starting Connect with con: 0 req: 0 Comb:00000000
Sep 10 23:56:35:https_connmgr_send_request>Done.
Sep 10 23:56:35:https_client_callback>with Action: 4097 -- User-Data: 00000000
Sep 10 23:56:35:https_client_callback:125>Connect:Rx Handle 1 My hdl-0/0
Sep 10 23:56:38:http_conn_mgr_outgoing_connection_ready_cb>Entered.
Sep 10 23:56:38:http_conn_mgr_outgoing_connection_ready_cb>HTTP Send with con: 0 req: 0 Comb:00000000
Sep 10 23:56:38:http_conn_mgr_outgoing_connection_ready_cb>Done.
Sep 10 23:56:38:https_client_callback>with Action: 4115 -- User-Data: 00000000
Sep 10 23:56:38:https_client_callback:148>Get/Post:Rx Handle 1 My hdl-0/0
Sep 10 23:56:38:http_conn_mgr_receive_data_ready_cb>Entered.
Sep 10 23:56:38:http_conn_mgr_receive_data_ready_cb>HTTP Recv with con: 0 req: 0 Comb:00000000
Sep 10 23:56:38:http_conn_mgr_receive_data_ready_cb>Done.
Sep 10 23:56:38:http_conn_mgr_remote_close_connection_cb>Entered.
Sep 10 23:56:38:http_conn_mgr_remote_close_connection_cb>HTTP Closing con: 0 req: 0 Comb:00000000
Sep 10 23:56:38:https_client_callback>with Action: 4098 -- User-Data: 00000000
Sep 10 23:56:38:https_client_callback:166>Recv:Rx Handle 1 My hdl-0/0
Sep 10 23:56:38:Enter sz_agt_swr_query_resp_cb with status: 404, buf: , parm: 0
Sep 10 23:56:38:Start SZ_SWR_TIMER with time_out: 57570544
Sep 10 23:56:38:ca_stop_timer>Cancelled Timer id 0, rc=0
Sep 10 23:56:38:ca_start_timer:25985660>Started timer with l/p 57570544/57570544 for u17, rc 0, id 0
Sep 10 23:56:38:Switch registrar discovery failed with http status = 404
Sep 10 23:56:38:https_client_callback>with Action: 4099 -- User-Data: 00000000
Sep 10 23:56:38:https_client_callback:135>Close:Rx Handle 1 My hdl-0/0
Sep 11 10:20:53:ca_stop_timer>Cancelled Timer id 0, rc=354242886
Sep 11 10:20:59:sz_execute_state_machine>Entering with state/event: INIT/0, DISABLE/2005
Sep 11 10:20:59:sz_execute_state_machine>Exit with state/event: DISABLED/1, NONE/2000 RC: 1
End i/max/iter 250/250/0
Last edited: