Table 2. Attack types distribution in the NSL-KDD dataset.
| Dataset | Number of records | |||||
|---|---|---|---|---|---|---|
| Total | Normal | DoS | Probe | U2R | R2L | |
| KDDTrain+20% | 25,192 | 13,449 | 9,234 | 2,289 | 11 | 209 |
| KDDTrain+ | 125,973 | 67,343 | 45,927 | 11,656 | 52 | 995 |
| KDDTest+ | 22,544 | 9,711 | 7,458 | 2,421 | 200 | 2,654 |