HTTP Request logs mix up data in rows

[Vyerni]

Describe the Bug

When viewing the http request logs, I'm getting a lot of allowed from random IPs to services which are 100% blocked from these IP addresses.

When the logs are exported to CSV, I can see the correct data and everything lines up; So it's just a mix up in the GUI somewhere.

Environment

• OS Type & Version: Debian 12
• Pangolin Version: v1.20.0-ee
• Edition (Community or Enterprise):
• Gerbil Version: 1.4.2
• Traefik Version: 3.7
• Newt Version: 1.14
• Client Version: N/A

To Reproduce

Any activity and check the logs

(I have a high amount of activity because Homepage dashboard triggers a heap of activity with the widgets)

Expected Behavior

GUI to match what is exported in the CSV.

As of currently, it's impossible to use the GUI to diagnose anything

[Vyerni]

Just checked the authentication logs page too, and it appears to have the same issue.

[oschwartz10612]

Hi @Vyerni while there very well may be something going on in the gui I am not 100% sure I understand what you are saying. In the screenshots you provide there are different IPs - the top shows different ones to the bottom. Could you clarify a little more what the issue is? Is it the fact that its ordered / filtered differently?

[Vyerni]

They are the same records.

Those results should all be showing 172 23.17.3 in the GUI. It was my desktop accessing that resource and path.

All of those IPs in the GUI screenshot were actually blocked

[oschwartz10612]

Are you sure those IPs from the UI dont show up elsewhere in the logs and the ordering is different between the UI and the CSV?

[Vyerni]

Those IPs 100% show in logs, but are blocked and from other countries.

Apologies i cant give more details or examples etc at the moment, been on mobile for a few days

[Vyerni]

Just randomly went to check something via phone and the logs appeared to show completely correct.

Its either something to do with my PC, or homepage widgets and constant polling stuff (Ive almost always got a homepage tab open).

If i can end up debugging a bit more over the weekend, Ill post back with some more info.

[Vyerni]

See screenshots from normal firefox, and an incognito firefox. The one with the 172.23.17.3 addresses is correct, the incognito window.

I've attempted to "forget about this site" in firefox history, and the problem still appears.

Hope those screens help detail it a little better