Top N Request Trend

Prerequisites

Top N Requested Domain Names and Top N DNS Source IP Addresses by Request Traffic Rate are enabled. For details, see Top N Study.

Function

The top N DNS request trend displays top N requested domain names or top N source IP addresses by DNS request traffic rate in incoming traffic, outgoing traffic, or detecting traffic.

For top N requests, you can perform the following operations:

  • Add top N domain names to the DNS cache to improve the response rate and reduce burdens on the DNS server.

  • Limit the packet rates of top N domain names.

  • Limit the packet rates of top N source IP addresses.

For details, see DNS Defense Policy.

Parameter

Table 1 Parameters for querying Top N Request Trend

Parameter

Description

Device

Select a device from the drop-down list.

Zone

Click , select a Zone on the Zone page that is displayed, and then click OK.

Time

Click to select the start time and end time of statistics. Or you can change the time values in corresponding text boxes.

The end time must be later than the start time and the interval cannot be longer than one year.

  • If the query interval is longer than or equal to seven days and shorter than one year, statistics are collected daily.
  • If the query interval is longer than or equal to one day and shorter than seven days, statistics are collected hourly.
  • If the query interval is shorter than one day, statistics are collected every five minutes.

Type

Select the top N types to be queried.

  • Domain Name Request: indicates the trend of top N domain names that are mostly requested.
  • Source IP Address Request: indicates the trend of top N source IP addresses that request the DNS server most.

Statistics

Select a mode for collecting statistics.

Top N

Enter the value of N.

Example

If the device is set to DDoS-Cleaning, traffic type to Domain Name Request, and statistical method to Current Top N, top N trend analysis results within a period of time are displayed in Figure 1.

Figure 1 Request top N trend

Procedure

  1. Choose Report > Report > DNS Analysis.
  2. Click the Top N Request Trend tab.
  3. Set query parameters. For detailed parameter description, see Table 1.
  4. Click Search.

    Top N trend analysis results are displayed.

  5. Optional: Open or save the query results as files, or send queried reports to the specified email address.

    • Click to open or save the query results as PDF files. A maximum of 10,000 entries can be displayed.
    • Click to open or save the query results as EXCEL files. A maximum of 10,000 entries can be displayed.
    • Click to open or save the query results as CSV files. All data except figures can be displayed.
    • Click to enter a recipient mail address and select an attachment format. Then click OK.


Copyright © Huawei Technologies Co., Ltd.