Table 1.

Distribution of different attack behaviors in the NSL-KDD data set.

Data set	Attack behavior					Total
	Normal	Dos	Probe	R2L	U2R
KDDTrain+	67,343	45,927	11,656	995	52	125,973
KDDTest+	9,889	7,460	2,707	2,421	67	22,544
Total	77,232	53,387	14,363	3,416	119	148,517