Attribute/Feature Name

Type of attribute

Description of Host based traffic attribute

dst host count

continuous

In the past 100 connections the number of connections to the same host

dst host serror rate

continuous

percent of connections that have SYN errors

dst host rerror rate

continuous

percent of connections that have REJ errors

dst host same srv rate

continuous

percent of connections to the same service

dst host dif srv rate

continuous

percent of same host

connections to different services

dst host srv count

continuous

In the past 100 connections the number of connections to the same service

dst host srv serror rate

continuous

percent of same service connections that have SYN errors

dst host srv rerror rate

continuous

percent of same service connections that have REJ errors

dst host srv diff host rate

continuous

percent of same service

connections to different hosts

dst host same src port rate

continuous

percent of connections from the same source port