Number | Full features | Flow/MQTT features | TCP features | Top features (flow/MQTT and TCP) |
---|---|---|---|---|
1 | sport | dur | sport | dur |
2 | dsport | Stime | dsport | dmeansz |
3 | dur | Ltime | dbytes | Dload |
4 | dbytes | Dload | sloss | Ltime |
5 | dttl | dmeansz | dloss | Stime |
6 | sloss | is_sm_ips_ports | Spkts | Dpkts |
7 | dloss | ct_srv_src | Dpkts | dbytes |
8 | Dload | ct_srv_dst | swin | Sintpkt |
9 | Spkts | ct_dst_ltm | dwin | Dintpkt |
10 | Dpkts | ct_src_ltm | stcpb | sport |
11 | swin | ct_src_dport_ltm | dtcpb | dsport |
12 | dwin | ct_dst_sport_ltm | Sjit | Â |
13 | stcpb | ct_dst_src_ltm | Djit | Â |
14 | dtcpb | Â | Sintpkt | Â |
15 | dmeansz | Â | Dintpkt | Â |
16 | trans_depth | Â | tcprtt | Â |
17 | res_bdy_len | Â | synack | Â |
18 | Sjit | Â | ackdat | Â |
19 | Djit | Â | Â | Â |
20 | Stime | Â | Â | Â |
21 | Ltime | Â | Â | Â |
22 | Sintpkt | Â | Â | Â |
23 | Dintpkt | Â | Â | Â |
24 | tcprtt | Â | Â | Â |
25 | synack | Â | Â | Â |
26 | ackdat | Â | Â | Â |
27 | is_sm_ips_ports | Â | Â | Â |
28 | ct_flw_http_mthd | Â | Â | Â |
29 | is_ftp_login | Â | Â | Â |
30 | ct_ftp_cmd | Â | Â | Â |
31 | ct_srv_src | Â | Â | Â |
32 | ct_srv_dst | Â | Â | Â |
33 | ct_dst_ltm | Â | Â | Â |
34 | ct_src_ltm | Â | Â | Â |
35 | ct_src_dport_ltm | Â | Â | Â |
36 | ct_dst_sport_ltm | Â | Â | Â |
37 | ct_dst_src_ltm | Â | Â | Â |