Top N Response Trend

Prerequisites

Top N DNS Source IP Addresses by Response Traffic Rate is enabled. For details, see Top N Study.

Function

The top N response trend diagram provides visibility into top N source IP addresses in DNS response traffic.

You can limit the rate of DNS response packets by top N DNS source IP addresses. For details, see DNS Defense Policy.

Parameter

**Table 1** Parameters for querying the top N response trend
Parameter	Description
Device	Select a device from the drop-down list. Total-Cleaning and Total-Detecting are described as follows: Total-Cleaning: Indicates that DNS traffic on all cleaning devices is queried. Total-Detecting: If two or more detecting devices in a defense group work in Load Redundancy mode, the maximum DNS traffic volume in the defense group is queried and the sum of DNS traffic volumes among defense groups is queried. If two or more detecting devices in each defense group work in Load Balancing mode, the sum of DNS traffic volumes within each defense group and among defense groups is queried.
Zone	Click , select a Zone on the Zone page that is displayed, and then click OK.
Time	Click to select the start time and end time of statistics. Or you can change the time values in corresponding text boxes. The end time must be later than the start time and the interval cannot be longer than one year. If the query interval is longer than or equal to seven days and shorter than one year, statistics are collected daily. If the query interval is longer than or equal to one day and shorter than seven days, statistics are collected hourly. If the query interval is shorter than one day, statistics are collected every five minutes.
Statistics	Select a mode for collecting statistics.
Top N	Enter the value of N.

Example

If the Device is set to Total-Cleaning, traffic type to Average Top N, the top N response trend within a given time segment is displayed, as shown in Figure 1.

Figure 1 Top N response trend

Procedure

Choose Report > Report > DNS Analysis.
Click the Top N Response Trend tab.
Set query parameters.
Click Search.
Top N trend analysis results that meet search conditions are displayed.
Optional: Open or save the query results as files, or send queried reports to the specified email address.
- Click to open or save the query results as PDF files. A maximum of 10,000 entries can be displayed.
- Click to open or save the query results as EXCEL files. A maximum of 10,000 entries can be displayed.
- Click to open or save the query results as CSV files. All data except figures can be displayed.
- Click to enter a recipient mail address and select an attachment format. Then click OK.