RockCloud-基石云安全-官方博客
How to Read Traffic and Network Logs in a CDN Console: From Dashboard Anomalies to Individual Requests
The CDN console has two layers: dashboards answer 'when and how much', logs answer 'who and what'. This article provides a three-minute inspection sequence, essential log fields, and troubleshooting paths for four types of anomalies: traffic spikes, cache hit rate drops, 403 surges, and 502/504 errors.
DDoS Attack Log Analysis and Traceback Methods: Layered Forensics and Response When Bandwidth Is Saturated
When a server's bandwidth is saturated or CPU is maxed out, this article provides a layered log-based forensics method to classify the attack type by analyzing inbound traffic characteristics, L4 connection states, and L7 access records, and map them to actionable response actions.
