search

AI-IDS / kdd99_feature_extractor

Utility for extraction of subset of KDD '99 features from realtime network traffic or .pcap file
MIT License
119 stars 50 forks source link

The number of traffic entries decreases after feature extraction #21

Closed ysyszheng closed 1 year ago

ysyszheng commented 1 year ago

I used the command kdd99extractor traffic.pcap > extractor.txt to extract KDD99 features from the traffic.pcap file, but the resulting number of traffic entries after extraction is significantly smaller than the original number of entries in traffic.pcap. The attached kdd99.zip contains the traffic.pcap and extractor.txt files. The pcap file contains 2959 traffic entries, but only 194 traffic entries were extracted with KDD99 features as shown in the extractor.txt file. I do not know why.. Any suggestions or ideas are welcome :) kdd99.zip