Ultimately, what you want from the routers are the routing tables. The routing tables should contain a log of the MAC addresses that accessed the DHCP to resolve IP addresses.
Non-technies: What does that mean? A MAC address is a unique numerical identifier on every network card. It's like a fingerprint for that computer. Ideally (without spoofing), no two MAC addresses from a network card are alike. The MAC address will tell you exactly which voting machine, PC, or server was associated to which IP, and the other IP's that communicated with it.
It will also tell you if these supposedly "closed" Dominion systems were PXE booting to another server or accessed the internet at all.
Tech guy here.
Ultimately, what you want from the routers are the routing tables. The routing tables should contain a log of the MAC addresses that accessed the DHCP to resolve IP addresses.
Non-technies: What does that mean? A MAC address is a unique numerical identifier on every network card. It's like a fingerprint for that computer. Ideally (without spoofing), no two MAC addresses from a network card are alike. The MAC address will tell you exactly which voting machine, PC, or server was associated to which IP, and the other IP's that communicated with it.
It will also tell you if these supposedly "closed" Dominion systems were PXE booting to another server or accessed the internet at all.
TL;DR: The routing tables contain the receipts.