I'm looking at starting to graph inbound connections to our various services (web, mail, dns etc) by IP version, ie IPv4 connections versus IPv6 connections.
Currently the IPs are being stored in a single field. What's the best approach to count/graph the IPs by version? A new field and count them? Is there a query I can run to get only v4 or v6 IPs?