can stats be delayed?

Comments

10 comments

  • Avatar
    rotblitz

    Stats generally appear delayed after 1 to 3 hours.  They are not real-time.  Also, if you configured OpenDNS on the router, the stats contain all DNS lookups out of your network, not just the ones from one computer.

    0
    Comment actions Permalink
  • Avatar
    betsyg

    roblitz - I am new to opendns.  You are the best!!  I cannot believe how poor the instructions and info is about setup from opendns.  But read a few of your posts and now I am on the way

    0
    Comment actions Permalink
  • Avatar
    Kristy Patullo

    @betsyg I'm sorry you think the instructions and info is about setup from opendns are poor.  Do you have any feedback on how we can make attaining instructions/information easier?

    0
    Comment actions Permalink
  • Avatar
    josiahdean.or.eddy

    @ Kristy Patullo   I have a suggestion:

    Either make the stats/logs real-time or make is very clear on the settings (the stats section) and all stats reporting pages that it is not real-time.

    1
    Comment actions Permalink
  • Avatar
    mattwilson9090

    Did you see the part at the top of the stats page where it says "Recent Activity (all your networks, last day)"?

    How would you suggest that that be made any more clear? The other pages make it very clear which day you are l looking at (it's also at the top of the page), though if you are looking at the current page if you are looking at a graph that displays numbers of something you'll generally see zeros for the stats that aren't being reported yet.

    -1
    Comment actions Permalink
  • Avatar
    redrush

    "Is there any way that the stats were somehow delayed, and are just reporting on today's date, when they were really from yesterday?"

     

    Can someone answer this question please?

     

    0
    Comment actions Permalink
  • Avatar
    Chris Frost

    @redrush there is usually a 3-4 hour delay on stats reporting, from when the request was made, to when you will see it in your reporting. Also, make sure that you have the correct time zone set. 

    1
    Comment actions Permalink
  • Avatar
    redrush

    I have the correct time zone set. For my own clarification, you are saying that if I make a request at 6pm on Friday then turn the computer off, the request I made at 6pm Friday will show up in my stats by 11pm on Friday. 

    Please explain how this happens. The computer was left on but was not used. It looks like avast sent requests for updates and such, but at 9am, there were 1,983 requests made, some to adult sites. The catch is the office was empty. 

    Saturday 2/7 12:00 AM EST 7
    Saturday 2/7 1:00 AM EST 12
    Saturday 2/7 2:00 AM EST 5
    Saturday 2/7 3:00 AM EST 12
    Saturday 2/7 4:00 AM EST 5
    Saturday 2/7 5:00 AM EST 12
    Saturday 2/7 6:00 AM EST 6
    Saturday 2/7 7:00 AM EST 4
    Saturday 2/7 8:00 AM EST 6
    Saturday 2/7 9:00 AM EST 1,983
    Saturday 2/7 10:00 AM EST 5
    Saturday 2/7 11:00 AM EST 6
    Saturday 2/7 12:00 PM EST 4
    Saturday 2/7 1:00 PM EST 11
    Saturday 2/7 2:00 PM EST 5
    Saturday 2/7 3:00 PM EST 6
    Saturday 2/7 4:00 PM EST 5
    Saturday 2/7 5:00 PM EST 30
    Saturday 2/7 6:00 PM EST 7
    Saturday 2/7 7:00 PM EST 7
    Saturday 2/7 8:00 PM EST 5
    Saturday 2/7 9:00 PM EST 13
    Saturday 2/7 10:00 PM EST 9
    Saturday 2/7 11:00 PM EST 6
    0
    Comment actions Permalink
  • Avatar
    rotblitz

    "you are saying that if I make a request at 6pm on Friday then turn the computer off, the request I made at 6pm Friday will show up in my stats by 11pm on Friday."

    Yes, something like this is meant.  From my own experience, the delay is ofter much shorter, like 1-2 hours.  And this delay is independent from the computer being turned off or not.  And the DNS requests are logged in "Total Requests" under the time when they were actually raised.

    "The computer was left on..."

    This could be an explanation for your observations.

    "...but was not used."

    This one is irrelevant.  DNS lookups are usually not raised by humans but by networking applications, almost independant from human activity.  And if you configured OpenDNS on the router, all your switched-on devices (inc the router) can raise (unexpected) DNS lookups at any time which are collected for your OpenDNS stats.  Think about, OpenDNS is a DNS service which can collect only your DNS traffic stats, not any other stats like your web stats and visited sites stats or mail program traffic.  The latter is not information you send to OpenDNS.

    "at 9am, there were 1,983 requests made, some to adult sites"

    How can you know what domains (not sites!) the lookups were related to within this hour?  There's nothing in the stats where you could obtain this information from.  If you want to know what domain names are being looked up at what time, you had to run a different tool, e.g. http://www.nirsoft.net/utils/dns_query_sniffer.html.  You can then compare the results from this tool with your OpenDNS stats to check for accuracy.  The latter seems to be the purpose of your concerns, right?

    Whatever, with so many requests within an hour, you should see a similar high count in your domain stats too, related to one or more domain names:
    https://dashboard.opendns.com/stats/all/topdomains/2015-02-07/
    What domains are there with such high ranking, summing to some 1,900?

    Btw, there are more reasons for "inaccurate" stats like your IP address information not always registered with your OpenDNS network.  This could lead to someone else's DNS activity being logged against your stats.  Or someone else was able to access your network through e.g. an unprotected WLAN, causing DNS (and other) traffic you didn't expect.

    "Please explain how this happens."

    I cannot and do not need to explain symptoms of your network, because it's your network.  Without full stats information I'm limited to guessing as of above.  You now know what to do to find it out yourself.

    1
    Comment actions Permalink

Please sign in to leave a comment.