Updated on 2024-12-24 GMT+08:00

Viewing Statistics Reports

CNAD shows normal traffic and attack traffic in two dimensions: traffic and packet rate. You can view the normal traffic and attack traffic to know your network security situation.

On the Dashboard tab, you can view the attack sources, received traffic, attack traffic, DDoS protection overview, peak traffic scrubbed, attack type distribution, and top 10 attacked IP addresses.

Viewing the CNAD Report

  1. Log in to the management console.
  2. Select a region in the upper part of the page, click in the upper left corner of the page, and choose Security & Compliance > Anti-DDoS Service. The Anti-DDoS Service Center page is displayed.
  3. In the navigation pane on the left, choose Cloud Native Anti-DDoS Advanced > Dashboard. The Data Reports page is displayed.

    Figure 1 Dashboard
    Table 1 Parameter description

    Parameter

    Description

    Peak Inbound Bandwidth

    Maximum traffic accessing the specified IP address of a specified instance per second

    Peak Packets Received

    Maximum number of incoming packets per second

    Peak Attack Bandwidth

    Maximum traffic attacking the specified IP address of a specified instance per second The attack traffic refers to the attack traffic that triggers security events.

    Peak Attack Packet Rate

    Maximum number of incoming attack packets per second

    Attacks

    Number of DDoS attacks launched on the specified IP address of a specified instance

    Traffic Trend

    Proportions and distribution trends of inbound traffic, outbound traffic, and discarded traffic.

    Protocol Distribution

    Proportions and distribution trend of protocols such as TCP, UDP, and ICMP in traffic.

    Concurrent Connections

    Number of concurrent connections.

    New Connections

    Number of new connections.

    DDoS Protection Overview

    Trend of scrubbing times.

    Peak Traffic Scrubbed

    Trend of peak scrubbed traffic.

    Attack Type Distribution

    Types of attack events. Views attack traffic by Attacks or Attack Traffic.

    Top 10 Attacked IP Addresses

    Top 10 IP addresses that are most frequently attacked. You can view statistics by Attacks or Bandwidth.

    DDoS Attack Events

    DDoS attack events

    Click Details next to the attack source IP address to view the complete attack source IP address list.

    • Click Details next to the attack source IP address to view the complete attack source IP address list.
    • For ongoing attack events, you can click View Dynamic Blacklist to view the blacklisted IP addresses that are in attack.
    • The attack sources of ongoing attacks may not be displayed.
    • Some attack events contain only some attack types. Their attack sources are not displayed.
    • Attack sources are sampled randomly. Not all attack source information is displayed.

  4. Click the Traffic tab to view the traffic data.

    Figure 2 Traffic Trend

  5. Click the Protocol Distribution tab to view the protocol distribution information.

    Figure 3 Protocol distribution

Related Operations

Downloading a report: Click in the upper right corner of the page to download the data report to the local host.