Viewing the systems generating the most traffic

The DDoS Mitigation and Reporting portal shows the systems generating the most traffic on the network.

 

The time and individual peak rate are shown for top-ranked hosts. Each host has a unique color in the graph. DNS host names appear next to the IP address if they can be resolved.

 

You can also view a TCP traffic summary or a traffic summary by IP-level protocol.

To view traffic top talkers: 

  1. Depending on your DDoS product, you can access the DDoS Mitigation and Reporting dashboard using one of the following methods:

    • Using the left menu, click Services, click Service Portals, then click DDoS Mitigation and Reporting. Confirm that you are going to an external site, then click Log In with SSO.

    • Using the left menu, click Monitoring & Reports, click Security Solutions Analytics, then click DDoS Mitigation and Reporting (in either the Reports or DDoS Mitigation Service sections). 
       

The DDoS Mitigation and Reporting portal shows the dashboard.

DDoS Mitigation and Reporting dashboard
  1. Click the Traffic tab click Profiles, then click Top Talkers or Top Talkers IPv6. 

    The DDoS Mitigation and Reporting portal shows a summary of the traffic for all monitored networks broken down by IP address. 
DDoS Mitigation and Reporting traffic top talkers
  1. To change the traffic summary, do any of the following:

    • To modify the summary to show different timeframes, click the Time menu, then click Update.

    • To specify a timeframe, select a date and time from Start and End, then click Update.

    • To switch between bits per second (bps) and packets per second (pps), click the Units menu, then click Update.

    • To select a different profile click Select Customer, then click OK.

    • To remove a host from the graph, click the checkbox in the Name column.

    • To sort the table, click a column header. To reverse the order, click the header again.