Classification Features

TIE pre-processes traffic sources (live traffic from network interface, or traffic trace from file) then extracts some data to be provided to classifiers as classification features1).

At the moment, features available to classifiers are:

Always available
number of packets upstream/downstream
payload bytes upstream/downstrem
source/destination port
transport layer protocol
Available on demand
Feature option
Inter Packet Time between the first n packets -I
Packet Size of the first n packets -p
First n bytes of first packet
(in both directions in biflow mode)
-P
Session payload stream of n bytes -S
1)
see the User Manual and the Developer Manual for the details
sections/documentation/features.txt · Last modified: 2015/04/23 14:37 (external edit)
CC Attribution-Noncommercial-Share Alike 4.0 International
Recent changes RSS feed Copyright 2008-2012 COMICS Research Group, Computer Science Department, University of Naples "Federico II"