Table 1.

Specific of KDD 99 10% percent.

Traffic category	Specific classes	Training size	Testing size
Normal	normal	97,278	60,593
DoS	mailbomb, smurf, teardrop, apache2, back, processtable, land, pod, neptune, udpstorm	391,458	229,853
Probe	satan, portsweep, mscan, saint, nmap, ipsweep	4107	4166
U2R	sqlattack, rootkit, xterm, perl, ps, httptunnel, buffer_overflow, loadmodule	52	228
R2L	xsnoop, xlock, ftp_write, spy, named, warezmaster, guess_passwd, phf, warezclient, worm, snmpgetattack, imap, snmpguess, multihop, sendmail	1126	16,189
Total	39 classes attacks	494,021	311,029