| Attribute/Feature Name | Type of attribute | Description of Basic attribute |
| duration | continuous | Time duration of the network connection in seconds |
| protocol type | nominal | protocol type (e.g. udp, tcp, etc.) |
| service | nominal | network connection service on the destination system (e.g. http, ftp, telnet, etc.) |
| src bytes | continuous | the number of data bytes transferring from source system to destination system |
| dst bytes | continuous | the number of data bytes transfering from destination system to source system |
| flag | nominal | the status of the network connection (e.g. normal or error) |
| land | binary | 1 if network connection is from/to the same host-port; 0 otherwise |
| wrong fragment | continuous | number of the wrong fragments |
| urgent | continuous | total number of the urgent packets |