|
Feature | Description |
|
IP | {Source IP, destination IP} |
Port | {Source port, destination port} |
Protocol | The protocol of the flow |
Flow duration | The duration of the flow |
Packet | Total packets in the {forward, backward} direction |
Length of packet | {Total, max, min, mean, std} size of packet in {forward, backward} direction |
Flow packet length | {Max, min, mean, std, variance} length of a flow |
Flow bytes/s | # of bytes transferred per second |
Flow packets/s | # of packets transferred per second |
Packets/s | # of {forward, backward} packets per second |
Flow IAT | {Max, min, mean, std} time between two flows |
Forward IAT | {Total, max, min, mean, std} time between two packets sent in the forward direction |
Backward IAT | {Total, max, min, mean, std} time between two packets sent in the backward direction |
Flags | # of times the {PSH, URG} flag was set in packets travelling in the {forward, backward} direction (0 for UDP) |
Flag count | # of packets with {FIN, SYN, RST, PSH, ACK, URG, CWE, ECE} |
Header length | Total bytes used for headers in the {forward, backward} direction |
Ratio | {Down, up} ratio |
Average packet size | Average size of packet |
Segment size avg | Average size observed in the {flow, forward, backward} direction |
Bytes/Bulk avg | Average number of bytes bulk rate in the {forward, backward} direction |
Packet/Bulk avg | Average number of packets bulk rate in the {forward, backward} direction |
Bulk rate avg | Average number of bulk rate in the {forward, backward} direction |
Subflow packets | The average number of packets in a subflow in the {forward, backward} direction |
Subflow bytes | The average number of bytes in a subflow in the {forward, backward} direction |
Init win bytes | # of bytes sent in initial window in the {forward, backward} direction |
Forward Act data pkts | # of packets with at least 1 byte of TCP data payload in the forward direction |
Forward seg size min | Minimum segment size observed in the forward direction |
Active time | {Mean, max, min, std} time a flow was active before becoming idle |
Idle time | {Mean, max, min, std} time a flow was idle before becoming active |
|