search

slgobinath / pcap-processor

Read and process pcap files using this nifty tool
GNU General Public License v3.0
42 stars 22 forks source link

additional features #4

Open Mohamed-ElhajAbdou opened 3 years ago

Mohamed-ElhajAbdou commented 3 years ago

Hello, i want to extract additional features included in the NSL-KDD dataset from pcap file here is the features as follows:-

Duration length : (number of seconds) of the connection.

protocol-type : type of the protocol such as (tcp, udp, icmp)

src-bytes : number of data bytes from source to destination

srv-count : number of connections to the same service as the current connection in the past two seconds.

dst-host-same-src-port-rate : percentage of connections from the port ser- vices to the destination host. so how can i extract those features from pcap file thanks in advance

manwu1994 commented 2 years ago

Hello, did you extract the features from the pcap file similar to the NSL-KDD dataset? If you solve it, could you share your solution? Thank you so much in advance.