| Attack type | DOS | Probe | R2L | U2R |
| 1 | back | ipsweep | ftp_write | buffer_overflow |
| 2 | land | portsweep | guess_passwd | loadmodule |
| 3 | neptune | satan | imap | perl |
| 4 | pod |
| multihop | rootkit |
| 5 | smurf |
| phf |
|
| 6 | teardrop |
| spy |
|
| 7 |
|
| warezclient |
|