Simple question I have just installed the darkstat package.
Could someone let me know is the ip list generated of blocked ip from wan or all ip's going out on lan and coming in on wan?.
Just trying to get an idea of what and whois is on the system.
From looking at states and then the filter logs I cant see half of what is turning up in the darkstat summary ???\
It would be great to get a list in a nice format of which pc/mac is accessing which ip address this could help with finding if any compromised system/s.