I think it would be great if LEM supported NetFlow data for the sake of showing connection details. This would allow you to take IP information from logs and look at the connection history for that specified IP.