Attribute/Feature Name

Type of attribute

Description of Traffic attribute

count

continuous

number of connections in the past two seconds to the same host as the current connection

serror rate

continuous

percent of connections for same host that have SYN errors

rerror rate

continuous

percent of connections for same hostmthat have REJ errors

same srv rate

continuous

percent of connections for same host to different services

srv count

continuous

number of connections in the past two seconds to the same service as the current connection

srv serror rate

continuous

percent of connections for same service that have SYN errors

srv rerror rate

continuous

percent of connections for same service that have REJ errors

srv diff host rate

continuous

percent of connections for same

service to different hosts