On connection accepted we print the ip address of the remote host in the logs. Any efforts we could make towards doing reverse dns would help correlate ingress and egress log lines (egress are always host and port, not resolved address).

A minimal effort might include a cache of ip address to host and port that was derived from egress connections. That would at least allow us to identify we ourselves are connecting to (like other replica set members).