From: A study on efficient detection of network-based IP spoofing DDoS and malware-infected Systems
Attribute | Type | Feature data | Description |
---|---|---|---|
SN | VARCHAR(20) | S00001 | Sequence number to traffic |
SGN | VARCHAR(20) | G00001 | Same group number with the same destination IP |
Attribute Info. | |||
 SRCIP | VARCHAR(15) | 58.203.201.36 | Source IP |
 SRCPORT | VARCHAR(6) | 5312 | Source Port |
 DSTIP | VARCHAR(15) | 211.106.66.102 | Destination IP |
 DSTPORT | VARCHAR(6) | 80 | Destination Port |
 MAC | VARCHAR(17) | D0-27-88-47-15-4B | Media access control (MAC) |
 PT | VARCHAR(8) | TCP | Protocol |
 AT | DATE | 2016.08.12 07:05:28 | Destination IP connection time |
 TIN | FLOAT | 2 s | Interval from previous traffic |
 CND | INTEGER | 28 hit | Destination IP connection hits |
 RATD | FLOAT | 136 s | Interval from previous traffic connected to destination IP |
 CNTI | INTEGER | 12 hit | Hits to the destination IP over 3 min |
 STATE | VARCHAR(20) | Abnormal | Traffic anomaly status |