| Attack category | Label | Attack classification |
| Normal | 0 | Normal | Dos | 1 | Apache2, back, land, mailbomb, neptune, pod, processtable, smurf, teardrop, udpstorm (10) | Probe | 2 | ipsweep, mscan, nmap, portsweep, saint, satan (6) | R2L | 3 | Fpt_write, guess passwd, nmap, multihop, named, phf, sendmail, snmpgetattack, snmpguess, spy, warezmaster, worm, xlock, xsnoop (15) | U2R | 4 | Buffer_overflow, httytunnel, loacmodule, perl, ps, rootkit, sqlattack, xterm (8) |
|
|