|
Number
|
Full features
|
Flow/MQTT features
|
TCP features
|
Top features (flow/MQTT and TCP)
|
|---|
|
1
|
sport
|
dur
|
sport
|
dur
|
|
2
|
dsport
|
Stime
|
dsport
|
dmeansz
|
|
3
|
dur
|
Ltime
|
dbytes
|
Dload
|
|
4
|
dbytes
|
Dload
|
sloss
|
Ltime
|
|
5
|
dttl
|
dmeansz
|
dloss
|
Stime
|
|
6
|
sloss
|
is_sm_ips_ports
|
Spkts
|
Dpkts
|
|
7
|
dloss
|
ct_srv_src
|
Dpkts
|
dbytes
|
|
8
|
Dload
|
ct_srv_dst
|
swin
|
Sintpkt
|
|
9
|
Spkts
|
ct_dst_ltm
|
dwin
|
Dintpkt
|
|
10
|
Dpkts
|
ct_src_ltm
|
stcpb
|
sport
|
|
11
|
swin
|
ct_src_dport_ltm
|
dtcpb
|
dsport
|
|
12
|
dwin
|
ct_dst_sport_ltm
|
Sjit
| |
|
13
|
stcpb
|
ct_dst_src_ltm
|
Djit
| |
|
14
|
dtcpb
| |
Sintpkt
| |
|
15
|
dmeansz
| |
Dintpkt
| |
|
16
|
trans_depth
| |
tcprtt
| |
|
17
|
res_bdy_len
| |
synack
| |
|
18
|
Sjit
| |
ackdat
| |
|
19
|
Djit
| | | |
|
20
|
Stime
| | | |
|
21
|
Ltime
| | | |
|
22
|
Sintpkt
| | | |
|
23
|
Dintpkt
| | | |
|
24
|
tcprtt
| | | |
|
25
|
synack
| | | |
|
26
|
ackdat
| | | |
|
27
|
is_sm_ips_ports
| | | |
|
28
|
ct_flw_http_mthd
| | | |
|
29
|
is_ftp_login
| | | |
|
30
|
ct_ftp_cmd
| | | |
|
31
|
ct_srv_src
| | | |
|
32
|
ct_srv_dst
| | | |
|
33
|
ct_dst_ltm
| | | |
|
34
|
ct_src_ltm
| | | |
|
35
|
ct_src_dport_ltm
| | | |
|
36
|
ct_dst_sport_ltm
| | | |
|
37
|
ct_dst_src_ltm
| | | |
