54
22 count
number of connections to the same destination host as
the current connection (in time window)
discrete
integer
0-511
23 srv count
number of connections to the same service (port num.)
as the current connection (in time window)
discrete
integer
0-511
24 serror rate
percentage of connections that have activated flags s0,
s1, s2 or s3 among the connections in count (col. 22)
discrete
float
0.00-1.00
25 srv serror rate
percentage of connections that have activated flags s0,
s1, s2 or s3 among the connections in srv count (col.23)
discrete
float
0.00-1.00
26 rerror rate
percentage of connections that have activated the flag
REJ among the connections in count (col.22)
discrete
float
0.00-1.00
27 srv rerror rate
percentage of connections that have activated the flag
REJ among the connections in srv count (col.23)
discrete
float
0.00-1.00
28 same srv rate
percentage of connections that were to the same service
among the connections in count (col.22)
discrete
float
0.00-1.00
29 diff srv rate
percentage of connections that were to different services
among the connections in count (col.22)
discrete
float
0.00-1.00
30
srv diff host
rate
percentage of connections that were to different
machines among the connections in srv count (col.23)
discrete
float
0.00-1.00
31 dst host count
number of connections with the same destination host IP
address
discrete
integer
0-255
32
dst host srv
count
number of connections with the same port number
discrete
integer
0-255
33
dst host same
srv rate
percentage of connections that were to the same
services among the connections in dst host count (col.31)
discrete
float
0.00-1.00
34
dst host diff
srv rate
percentage of connections that were to different services
among the connections in dst host count (col.31)
discrete
float
0.00-1.00
35
dst host same
src port rate
percentage of connections that were to the same
services among the connections in dst host srv count
(col.32)
discrete
float
0.00-1.00
36
dst host srv
diff host rate
percentage of connections that were to different
destination machines among the connections in dst host
srv count (col.32)
discrete
float
0.00-1.00