Viewing Network Traffic Analysis

You can view details about the inbound and outbound traffic and attack trend on cloud servers in real time to check for abnormal traffic.

Viewing Inbound Traffic

Log in to the management console.
Click in the upper left corner of the management console and select a region or project.
In the navigation pane on the left, click and choose Security & Compliance > Cloud Firewall. The Dashboard page will be displayed.
(Optional) If the current account has only one firewall instance, the firewall details page is displayed. If there are multiple firewall instances, click View in the Operation column to go to the details page.
In the navigation pane, choose Traffic Analysis > Inbound Traffic.

View the statistics on the traffic passing through the firewall. You can select the query duration from the drop-down list.

Traffic Dashboard: Information about the highest traffic from the Internet to internal servers.
Inbound Traffic: Inbound request and response traffic.

Visualizations: Top 5 items ranked by certain parameters regarding inbound traffic within a specified time range. For more information, see Table 1. You can click a data record to view the traffic details. A maximum of 50 data records can be viewed.

**Table 1** Inbound traffic parameters
Parameter	Description
Top Access Source IP Addresses	Source IP addresses of inbound traffic.
Top Access Source Regions	Geographical locations of the source IP addresses of inbound traffic.
Top Destination IP Addresses	Destination IP addresses of inbound traffic.
Top Open Ports	Destination ports of inbound traffic.
Application Distribution	Application information about inbound traffic.

IP analysis: Top 50 traffic records in a specified period.
- EIPs: Traffic information about destination IP addresses.
- Source IP Addresses: Traffic information about source IP addresses.

Viewing Outbound Traffic

Log in to the management console.
Click in the upper left corner of the management console and select a region or project.
In the navigation pane on the left, click and choose Security & Compliance > Cloud Firewall. The Dashboard page will be displayed.
(Optional) If the current account has only one firewall instance, the firewall details page is displayed. If there are multiple firewall instances, click View in the Operation column to go to the details page.
In the navigation pane, choose Traffic Analysis > Outbound Traffic.

View the statistics on the traffic passing through the firewall. You can select the query duration from the drop-down list.

Traffic Dashboard: Information about the highest traffic when internal servers access the Internet.
Outbound Traffic: Outbound request and response traffic.

Visualizations: Top 5 items ranked by certain parameters regarding outbound traffic within a specified time range. For more information, see Table 2. You can click a data record to view the traffic details. A maximum of 50 data records can be viewed.

**Table 2** Outbound traffic parameters
Parameter	Description
Top Destination IP Addresses	Destination IP addresses of outbound traffic.
Top Destination Regions	Geographical locations of the source IP addresses of outbound traffic.
Top Access Source IP Addresses	Source IP addresses of outbound traffic.
Top Open Ports	Destination ports of outbound traffic.
Application Distribution	Application information about outbound traffic.

IP analysis: Top 50 traffic records in a specified period.
- External IP Address: Traffic information about the destination IP address.
- Assets Initiating Internet Connections: Traffic information whose source IP addresses are public IP addresses.
- Assets Initiating Private Network Connections: Traffic information whose source IP addresses are private IP addresses.