Table 6.
The list of the collected network features.
| Feature | Description |
|---|---|
| BIFLOW_DIRECTION | Determines who initiated the flow |
| DIRECTION | Determines the direction of flow |
| DST_TO_SRC_SECOND_BYTES | An indicator that determines the flow of bytes per |
| second (dst to src) | |
| FIREWALL_EVEN | Information flag from the firewall |
| FIRST_SWITCHED | Time of appearance of the first flow |
| FLOW_ACTIVE_TIMEOUT | Network traffic activity timeout |
| FLOW_DURATION_MICROSECONDS | Duration of flow expressed in microseconds |
| FLOW_DURATION_MILLISECONDS | Duration of flow expressed in milliseconds |
| FLOW_END_MILLISECONDS | Duration of flow end expressed in milliseconds |
| FLOW_END_SEC | Duration of flow end expressed in seconds |
| FLOW_ID | Unique ID |
| FLOW_INACTIVE_TIMEOUT | Inactivity time of the flow |
| FLOW_START_MILLISECONDS | Duration of flow start expressed in milliseconds |
| FLOW_START_SEC | Duration of flow start expressed in seconds |
| FRAME_LENGTH | Frame length |
| IN_BYTES | Number of incoming bytes |
| IN_PKTS | Number of incoming packets |
| IPV4_DST_ADDR | Destination IP V4 address |
| IPV4_SRC_ADDR | Source IP V4 address |
| L4_DST_PORT | Destination Port |
| L4_SRC_PORT | Source Port |
| LAST_SWITCHED | Time of the last packet |
| MAX_IP_PKT_LEN | The largest length of the observed packet |
| MIN_IP_PKT_LEN | The smallest length of the observed packet |
| OOORDER_IN_PKTS | Number of incoming packets that were out of order |
| OOORDER_OUT_PKTS | Number of outgoing packets that were out of order |
| OUT_BYTES | Outgoing bytes |
| OUT_PKTS | Outgoing packets |
| PROTOCOL | Protocol flag |
| PROTOCOL_MAP | Name of protocol |
| RETRANSMITTED_IN_BYTES | Number of incoming bytes repeated |
| RETRANSMITTED_IN_PKTS | Number of incoming packets repeated |
| RETRANSMITTED_OUT_BYTES | Number of outgoing bytes repeated |
| RETRANSMITTED_OUT_PKTS | Number of outgoing packets repeated |
| SRC_TO_DST_SECOND_BYTES | An indicator that determines the flow of bytes per |
| second (src to dst) | |
| TCP_WIN_MAX_IN | Maximum incoming TCP window size |
| TCP_WIN_MAX_OUT | Maximum outgoing TCP window size |
| TCP_WIN_MIN_IN | Minimum incoming TCP window size |
| TCP_WIN_MIN_OUT | Minimum outgoing TCP window size |
| TCP_WIN_MSS_IN | Incoming TCP segment size |
| TCP_WIN_MSS_OUT | Outgoing TCP segment size |
| TCP_WIN_SCALE_IN | Incoming TCP scale size |
| SRC_TOS | Sets the service type byte on entry to |
| the incoming interface. | |
| L7_PROTO_NAME | Name of the layer 7 protocol |
| TOTAL_FLOWS_EXP | Total number of exported flows |