First off, I just want to say thanks for the new statistics. It's awesome and I've already discovered something I didn't realize previously.
Is there any logic as to why sometimes the clients resolve to DNS names and sometimes they don't? I haven't noticed a pattern yet, but I am finding that some of my devices show just the IP in the statistics.
I just discovered something else. I have domains that are showing in the top 10 passed section but don't show up when searching the details tab.
Is there a limit to how far back the details tab data goes? I changed it from 100 to All but I still don't see those domains.
EDIT: Looks like the details tab has a 1000 record limit according to the other thread. Hopefully the update to remove all the arpa entries will allow for easier details searching.
I do have one request. Can we make the top blocked and allowed domains clickable like the clients are? That would allow us to more easily see who and what is causing all of the queries.
Turns out I had some devices that weren't reporting hostnames to the dhcp server and that's why I was getting IPs in the reporting section.
Weirdly, this is happening again. Under the DHCP leases, I see a hostname but unbound now reports an ip. Previously it was reporting the hostname for this machine.
EDIT: And it apparently resolved itself.