Top N Request Trend

Prerequisites

Top N Requested Domain Names and Top N DNS Source IP Addresses by Request Traffic Rate are enabled. For details, see Top N Study.

Function

The top N DNS request trend displays top N requested domain names or top N source IP addresses by DNS request traffic rate in incoming traffic, outgoing traffic, or detecting traffic.

For top N requests, you can perform the following operations:

Add top N domain names to the DNS cache to improve the response rate and reduce burdens on the DNS server.
Limit the packet rates of top N domain names.
Limit the packet rates of top N source IP addresses.

For details, see DNS Defense Policy.

Parameter

**Table 1** Parameters for querying Top N Request Trend
Parameter	Description
Device	Select a device from the drop-down list. Total-Cleaning and Total-Detecting are described as follows: Total-Cleaning: Indicates that DNS traffic on all cleaning devices is queried. Total-Detecting: If two or more detecting devices in a defense group work in Load Redundancy mode, the maximum DNS traffic volume in the defense group is queried and the sum of DNS traffic volumes among defense groups is queried. If two or more detecting devices in each defense group work in Load Balancing mode, the sum of DNS traffic volumes within each defense group and among defense groups is queried.
Zone	Click , select a Zone on the Zone page that is displayed, and then click OK.
Time	Click to select the start time and end time of statistics. Or you can change the time values in corresponding text boxes. The end time must be later than the start time and the interval cannot be longer than one year. If the query interval is longer than or equal to seven days and shorter than one year, statistics are collected daily. If the query interval is longer than or equal to one day and shorter than seven days, statistics are collected hourly. If the query interval is shorter than one day, statistics are collected every five minutes.
Traffic type	Select the top N types to be queried. Domain Name Request: indicates the trend of top N domain names that are mostly requested. Source IP Address Request: indicates the trend of top N source IP addresses that request the DNS server most.
Statistics	Select a mode for collecting statistics.
Top N	Enter the value of N.

Example

If the Device is set to Total-Cleaning, traffic type to Domain Name Request, and statistical method to Current Top N, top N trend analysis results with a period of time are displayed in Figure 1.

Figure 1 Request top N trend

Procedure

Choose Report > Report > DNS Analysis.
Click the Top N Request Trend tab.
Set query parameters.
Click Search.
Top N trend analysis results are displayed.
Optional: Open or save the query results as files, or send queried reports to the specified email address.
- Click to open or save the query results as PDF files. A maximum of 10,000 entries can be displayed.
- Click to open or save the query results as EXCEL files. A maximum of 10,000 entries can be displayed.
- Click to open or save the query results as CSV files. All data except figures can be displayed.
- Click to enter a recipient mail address and select an attachment format. Then click OK.