-
Notifications
You must be signed in to change notification settings - Fork 3
/
Copy pathfeatmap.json
42 lines (42 loc) · 2.24 KB
/
featmap.json
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
{
"apply(_tcpCwrTotalCount,backward)": "#dstTCPflag:cwr",
"apply(_tcpCwrTotalCount,forward)": "#srcTCPflag:cwr",
"apply(max(_interPacketTimeSeconds),backward)": "max_dstPktIAT",
"apply(max(_interPacketTimeSeconds),forward)": "max_srcPktIAT",
"apply(max(ipTTL),backward)": "max_dstTTL",
"apply(max(ipTTL),forward)": "max_srcTTL",
"apply(max(ipTotalLength),backward)": "max_dstPktLength",
"apply(max(ipTotalLength),forward)": "max_srcPktLength",
"apply(mean(_interPacketTimeSeconds),backward)": "mean_dstPktIAT",
"apply(mean(_interPacketTimeSeconds),forward)": "mean_srcPktIAT",
"apply(mean(ipTTL),backward)": "mean_dstTTL",
"apply(mean(ipTTL),forward)": "mean_srcTTL",
"apply(mean(ipTotalLength),backward)": "mean_dstPktLength",
"apply(mean(ipTotalLength),forward)": "mean_srcPktLength",
"apply(min(_interPacketTimeSeconds),backward)": "min_dstPktIAT",
"apply(min(_interPacketTimeSeconds),forward)": "min_srcPktIAT",
"apply(min(ipTTL),backward)": "min_dstTTL",
"apply(min(ipTTL),forward)": "min_srcTTL",
"apply(min(ipTotalLength),backward)": "min_dstPktLength",
"apply(min(ipTotalLength),forward)": "min_srcPktLength",
"apply(octetTotalCount,backward)": "dstBytes",
"apply(octetTotalCount,forward)": "srcBytes",
"apply(packetTotalCount,backward)": "dstPkts",
"apply(packetTotalCount,forward)": "srcPkts",
"apply(stdev(_interPacketTimeSeconds),backward)": "stdev_dstPktIAT",
"apply(stdev(_interPacketTimeSeconds),forward)": "stdev_srcPktIAT",
"apply(stdev(ipTTL),backward)": "stdev_dstTTL",
"apply(stdev(ipTTL),forward)": "stdev_srcTTL",
"apply(stdev(ipTotalLength),backward)": "stdev_dstPktLength",
"apply(stdev(ipTotalLength),forward)": "stdev_srcPktLength",
"apply(tcpAckTotalCount,backward)": "#dstTCPflag:ack",
"apply(tcpAckTotalCount,forward)": "#srcTCPflag:ack",
"apply(tcpFinTotalCount,backward)": "#dstTCPflag:fin",
"apply(tcpFinTotalCount,forward)": "#srcTCPflag:fin",
"apply(tcpSynTotalCount,backward)": "#dstTCPflag:syn",
"apply(tcpSynTotalCount,forward)": "#srcTCPflag:syn",
"destinationTransportPort": "dstPort",
"flowDurationMilliseconds": "duration",
"protocolIdentifier": "protocol",
"sourceTransportPort": "srcPort"
}