Real-time dashboard of currently active devices

I'd like to see which devices on my network are actively querying through DPF right now and their query volume, to spot a compromised IoT gadget phoning home. Aviation-grade filtering deserves aviation-grade visibility.