From: A new intrusion detection and alarm correlation technology based on neural network
Duration
Protocol type
Serve type
Link status
SR byte
RS byte
Land
Wrong frame
Urgent