Skynet Drill into Top 10 Blocked Devices (outbound)

[kramttocs]

Figure I am likely missing it somewhere but in the bottom chart it shows the Top 10 Blocked Devices (Outbound). I'd like to easily see, for a given device, a list of all the blocked IPs it has tried to hit.

 

[Ripshod]

Figure I am likely missing it somewhere but in the bottom chart it shows the Top 10 Blocked Devices (Outbound). I'd like to easily see, for a given device, a list of all the blocked IPs it has tried to hit.

What happens if you hover the mouse pointer over the relevant device's bar in the graph?

 

[kramttocs]

That shows the name and total count

 

[Ripshod]

I have only one hit on one device in there, so I wasn't sure. Mine shows the (blocked) remote IP.

 

[Marcus Yansen]

Not sure if any of these commands will help you, if at all

( firewall stats ) Compile Stats With Default Top10 Output
( firewall stats 20 ) Compile Stats With Customizable Top20 Output
( firewall stats tcp ) Compile Stats Showing Only TCP Entries
( firewall stats tcp 20 ) Compile Stats Showing Only TCP Entries With Customizable Top20 Output
( firewall stats search port 23 ) Search Logs For Entries On Port 23
( firewall stats search port 23 20 ) Search Logs For Entries On Port 23 With Customizable Top20 Output
( firewall stats search ip 8.8.8.8 ) Search Logs For Entries On 8.8.8.8
( firewall stats search ip 8.8.8.8 20 ) Search Logs For Entries On 8.8.8.8 With Customizable Top20 Output
( firewall stats search malware 8.8.8.8 ) Search Malwarelists For Specified IP
( firewall stats search manualbans ) Search For All Manual Bans
( firewall stats search device 192.168.1.134 ) Search For All Outbound Entries From Local Device 192.168.1.134
( firewall stats search device reports ) Search Previous Hourly Report History
( firewall stats search invalid ) Search For Invalid Packets
( firewall stats search iot ) Search For IOT Packets
( firewall stats search connections ip|port|proto|id xxxxxxxxxx) Search Active Connections
( firewall stats remove ip 8.8.8.8 ) Remove Log Entries Containing IP 8.8.8.8
( firewall stats remove port 23 ) Remove Log Entries Containing Port 23
( firewall stats reset ) Reset All Collected Logs