Analytics
The Analytics page shows live LetXDP counters, monthly traffic history, country traffic, and recent logs.
Open this page after enabling or changing protection.
Traffic analytics
Section titled “Traffic analytics”Country and month views are stored packet aggregates. LetCore records them locally from LetXDP country counters, keeps the last 12 months, and persists the history in /var/lib/letcore/analytics.db.
LetXDP counters start fresh when LetXDP restarts. LetCore stores counter deltas in SQLite, so the monthly Analytics history survives LetCore and LetXDP restarts.
IPv4 country matches come from installed LetGeo data. Traffic without a country match appears as Unknown.
Live counters
Section titled “Live counters”| Counter | Meaning |
|---|---|
| Allowed packets | Traffic that matched an allow rule. |
| Passed packets | Traffic that passed through without being dropped. |
| Dropped packets | Traffic LetSecure dropped. |
Controls
Section titled “Controls”| Control | Meaning |
|---|---|
| Stats and logging | Turns visibility on or off. Keep it on while testing changes. |
| Refresh | Reloads analytics, counters, and log output. |
| Clear log | Clears the visible log output. It does not remove protection rules. |
Log terminal
Section titled “Log terminal”The log terminal shows recent LetXDP activity. Use it to understand whether a profile or custom rule is matching traffic.
What to watch
Section titled “What to watch”- Your real users can still connect.
- Dropped packets do not spike unexpectedly.
- Logs match the rule you just enabled.
- The service you protected still works after a few minutes.