variable codigo tipo desc (%) miss gini total

duration length (number of seconds) of the

var1 continuous connection 0 7.16%

protocol_type type of the protocol, e.g. tcp, udp,

var2 string etc. 0

service network service on the destination,

var3 string e.g., http, telnet, etc. 0

flag normal or error status of the

var4 string connection 0

src_bytes number of data bytes from source to

var5 continuous destination 0 0.00%

dst_bytes number of data bytes from

var6 continuous destination to source 0 13.43%

land 1 if connection is from/to the same

var7 discreta host/port; 0 otherwise 0 0.00%
wrong_fragment var8 continuous number of ``wrong'' fragments 0 0.03%
urgent var9 continuous number of urgent packets 0 0.00%
hot var10 continuous number of ``hot'' indicators 0 0.51%
num_failed_logins var11 continuous number of failed login attempts 0 0.01%

logged_in 1 if successfully logged in; 0

var12 discreta otherwise 0 71.84%

num_compromised number of ``compromised''

var13 continuous conditions 0 0.02%

root_shell 1 if root shell is obtained; 0

var14 continuous otherwise 0 0.03%

su_attempted 1 if ``su root'' command attempted; 0

var15 continuous otherwise 0 0.01%
num_root var16 continuous number of ``root'' accesses 0 0.58%

num_file_creations
var17 continuous number of file creation operations 0 0.24%
num_shells var18 continuous number of shell prompts 0 0.04%

num_access_files number of operations on access

var19 continuous control files 0 0.48%

num_outbound_cmds number of outbound commands in

var20 continuous an ftp session 0

is_host_login 1 if the login belongs to the "host'';

var21 discreta otherwise 0 0 0.00%

is_guest_login 1 if the login is a ``guest''login; 0

var22 discreta otherwise 0 0.38%

count number of connections to the same

host as the current connection in the
var23 continuous past two seconds 0 98.36%
srv_count number of connections to the same
service as the current connection in
var24 continuous the past two seconds 0 79.71%

serror_rate % of connections that have ``SYN''

var25 continuous errors 0 21.89%

srv_serror_rate % of connections that have ``SYN''

var26 continuous errors 0 21.21%

rerror_rate % of connections that have ``REJ''

var27 continuous errors 0 0.21%

srv_rerror_rate % of connections that have ``REJ''

var28 continuous errors 0 0.00%

same_srv_rate % of connections to the same

var29 continuous service 0 25.63%

diff_srv_rate % of connections to different

var30 continuous services 0 24.12%

srv_diff_host_rate
var31 continuous % of connections to different hosts 0 33.46%

dst_host_count count of connections having the

var32 continuous same destination hosts 0 58.33%

count of connections having the

dst_host_srv_count same destination host and using the
var33 continuous same service 0 -3.39%

percentage of connections having the

dst_host_same_srv_rate same destination host and using the
var34 continuous same service 0 -0.83%

dst_host_diff_srv_rate percentage of different services on

var35 continuous the current host 0 3.81%

dst_host_same_src_port_rate percentage of connections to the

var36 continuous current host having the same src port 0 49.52%

dst_host_srv_diff_host_rate percentage of connections to

var37 continuous different hosts 0 50.80%

dst_host_serror_rate percentage of connections to the

var38 continuous current host that have an S0 error 0 18.65%

percentage of connections to the

dst_host_srv_serror_rate current host and specified service
var39 continuous that have an S0 error 0 17.87%

dst_host_rerror_rate percentage of connections to the

var40 continuous current host that have an RST error 0

percentage of connections to the

dst_host_srv_rerror_rate current host and specified service
var41 continuous that have an RST error 0 -0.31%
(%) cero total gini muestra (%) cero muestra Criterio 1 Criterio 2

97 8.73% 97 1 0

0 1

0 1

0 1

23 0.35% 23 0 1

82 81.26% 82 1 1

99 0.00% 99 0 0
99 0.31% 99 0 0
99 0.00% 99 0 0
99 -0.11% 99 0 0
99 0.00% 99 0 0

85 71.06% 85 1 1

99 -0.47% 99 0 0

99 0.02% 99 0 0

99 0.01% 99 0 0
99 0.58% 99 0 0

99 0.23% 99 0 0
99 0.04% 99 0 0

99 0.45% 99 0 0

99 99 0 0

99 99 0 0

99 0.30% 99 0 0

0 97.38% 0 1 1
 0 78.78% 0 1 1

81 21.69% 81 1 1

81 20.97% 82 1 1

94 0.21% 94 0 1

94 0.14% 93 0 1

0 25.41% 0 1 1

77 23.93% 77 1 1

93 33.45% 92 1 1

0 57.83% 0 1 1

0 -5.59% 0 0 1

2 -0.57% 2 0 1

70 3.80% 70 0 1

28 49.64% 28 1 1

89 50.57% 89 1 1

80 18.63% 80 1 1

81 17.74% 81 1 1

93 0.40% 92 0 1

93 -0.28% 93 0 1
 eature name
duration
protocol_type
service
src_bytes
dst_bytes
flag
land
wrong_fragment
urgent
hot
num_failed_logins
logged_in
num_compromised
root_shell
su_attempted
num_root
num_file_creations
num_shells
num_access_files
num_outbound_cmds
is_hot_login
is_guest_login
count
serror_rate
rerror_rate
same_srv_rate
diff_srv_rate
srv_count
srv_serror_rate
srv_rerror_rate
srv_diff_host_rate
 description type
length (number of seconds) of the connection continuous
type of the protocol, e.g. tcp, udp, etc. discrete
network service on the destination, e.g., http, telnet, etc. discrete
number of data bytes from source to destination continuous
number of data bytes from destination to source continuous
normal or error status of the connection discrete
1 if connection is from/to the same host/port; 0 otherwise discrete
number of ``wrong'' fragments continuous
number of urgent packets continuous
number of ``hot'' indicators continuous
number of failed login attempts continuous
1 if successfully logged in; 0 otherwise discrete
number of ``compromised'' conditions continuous
1 if root shell is obtained; 0 otherwise discrete
1 if ``su root'' command attempted; 0 otherwise discrete
number of ``root'' accesses continuous
number of file creation operations continuous
number of shell prompts continuous
number of operations on access control files continuous
number of outbound commands in an ftp session continuous
1 if the login belongs to the ``hot'' list; 0 otherwise discrete
1 if the login is a ``guest''login; 0 otherwise discrete
number of connections to the same host as the current connection in the past two seconds continuous
% of connections that have ``SYN'' errors continuous
% of connections that have ``REJ'' errors continuous
% of connections to the same service continuous
% of connections to different services continuous
number of connections to the same service as the current connection in the past two seconds continuous
% of connections that have ``SYN'' errors continuous
% of connections that have ``REJ'' errors continuous
% of connections to different hosts continuous
 type of attacks clase n n(%)
normal normal 97278 20% normal 97278 20%
back dos 2203 0% dos 391458 79%
buffer_overflow u2r 30 0% u2r 52 0%
ftp_write r2l 8 0% r2l 1126 0%
guess_passwd r2l 53 0% probe 4107 1%
imap r2l 12 0%
ipsweep probe 1247 0%
land dos 21 0%
loadmodule u2r 9 0%
multihop r2l 7 0%
neptune dos 107201 22%
nmap probe 231 0%
perl u2r 3 0%
phf r2l 4 0%
pod dos 264 0%
portsweep probe 1040 0%
rootkit u2r 10 0%
satan probe 1589 0%
smurf dos 280790 57%
spy r2l 2 0%
teardrop dos 979 0%
warezclient r2l 1020 0%
warezmaster r2l 20 0%
data$var0f[data$var0=='SF']<-
data$var0f[data$var0=='normal']<-'normal'
data$var0f[data$var0=='back']<-'dos'
data$var0f[data$var0=='buffer_overflow']<-'u2r'
data$var0f[data$var0=='ftp_write']<-'r2l'
data$var0f[data$var0=='guess_passwd']<-'r2l'
data$var0f[data$var0=='imap']<-'r2l'
data$var0f[data$var0=='ipsweep']<-'probe'
data$var0f[data$var0=='land']<-'dos'
data$var0f[data$var0=='loadmodule']<-'u2r'
data$var0f[data$var0=='multihop']<-'r2l'
data$var0f[data$var0=='neptune']<-'dos'
data$var0f[data$var0=='nmap']<-'probe'
data$var0f[data$var0=='perl']<-'u2r'
data$var0f[data$var0=='phf']<-'r2l'
data$var0f[data$var0=='pod']<-'dos'
data$var0f[data$var0=='portsweep']<-'probe'
data$var0f[data$var0=='rootkit']<-'u2r'
data$var0f[data$var0=='satan']<-'probe'
data$var0f[data$var0=='smurf']<-'dos'
data$var0f[data$var0=='spy']<-'r2l'
data$var0f[data$var0=='teardrop']<-'dos'
data$var0f[data$var0=='warezclient']<-'r2l'
data$var0f[data$var0=='warezmaster']<-'r2l'
 var39 var20 var30 var38 var37 var6 var23
var39 1 NA 0.25345212 0.99815592 -0.0716567 -0.0112349 -0.3097093
var20 NA 1 NA NA NA NA NA
var30 0.25345212 NA 1 0.25327758 -0.0280083 -0.0057019 -0.1752998
var38 0.99815592 NA 0.25327758 1 -0.0711317 -0.0113337 -0.3111911
var37 -0.0716567 NA -0.0280083 -0.0711317 1 0.00870652 -0.2445728
var6 -0.0112349 NA -0.0057019 -0.0113337 0.00870652 1 -0.0403725
var23 -0.3097093 NA -0.1752998 -0.3111911 -0.2445728 -0.0403725 1
var3f -0.1772458 NA -0.0750028 -0.1770278 0.23723266 0.04234393 -0.624349
var12 -0.1917039 NA -0.0726921 -0.190955 0.14049295 0.04781426 -0.6346429
var32 0.15736847 NA 0.05680367 0.15672834 -0.4911619 -0.0488688 0.53263216
var4f -0.986089 NA -0.287222 -0.9850987 0.05272148 0.0128522 0.34321913
var29 -0.8575438 NA -0.426252 -0.8578346 0.08345436 0.01400182 0.35373463
var1 -0.0306124 NA 0.05180021 -0.0304002 -0.0069827 0.00543953 -0.1051534
var24 -0.5299805 NA -0.2957353 -0.5313419 -0.1832151 -0.0305443 0.94366707
var36 -0.5776181 NA -0.266495 -0.5788571 -0.0643961 -0.0201433 0.86057874

var39 var20 var30 var38 var37 var6 var23

var39 1 1 0 1 0 0 0
var20 1 1 1 1 1 1 1
var30 0 1 1 0 0 0 0
var38 1 1 0 1 0 0 0
var37 0 1 0 0 1 0 0
var6 0 1 0 0 0 1 0
var23 0 1 0 0 0 0 1
var3f 0 1 0 0 0 0 0
var12 0 1 0 0 0 0 0
var32 0 1 0 0 0 0 0
var4f 0 1 0 0 0 0 0
var29 0 1 0 0 0 0 0
var1 0 1 0 0 0 0 0
var24 0 1 0 0 0 0 1
var36 0 1 0 0 0 0 1

var39+ var39+var20+var39+var20+var39+var20+var39+var20+var39+var20+var39+var20+
var3f var12 var32 var4f var29 var1 var24 var36
-0.1772458 -0.1917039 0.15736847 -0.986089 -0.8575438 -0.0306124 -0.5299805 -0.5776181
NA NA NA NA NA NA NA NA
-0.0750028 -0.0726921 0.05680367 -0.287222 -0.426252 0.05180021 -0.2957353 -0.266495
-0.1770278 -0.190955 0.15672834 -0.9850987 -0.8578346 -0.0304002 -0.5313419 -0.5788571
0.23723266 0.14049295 -0.491162 0.05272148 0.08345436 -0.0069827 -0.1832151 -0.0643961
0.04234393 0.04781426 -0.0488688 0.0128522 0.01400182 0.00543953 -0.0305443 -0.0201434
-0.624349 -0.6346429 0.53263216 0.34321913 0.35373463 -0.1051534 0.94366707 0.86057874
1 0.85451 -0.6330242 0.17074071 0.2034994 -0.0065054 -0.475271 -0.4484498
0.85451 1 -0.6210291 0.20718261 0.21968481 -0.0172652 -0.4781218 -0.4615582
-0.6330242 -0.6210291 1 -0.1450873 -0.1810511 0.01007384 0.40153552 0.29074717
0.17074071 0.20718261 -0.1450873 1 0.90732223 0.02272301 0.57514242 0.61709181
0.2034994 0.21968481 -0.1810511 0.90732223 1 0.02177086 0.61556558 0.66074415
-0.0065054 -0.0172652 0.01007384 0.02272301 0.02177086 1 -0.08025 0.0426424
-0.475271 -0.4781218 0.40153552 0.57514242 0.61556558 -0.08025 1 0.94492637
-0.4484498 -0.4615582 0.29074717 0.61709181 0.66074415 0.0426424 0.94492637 1

var3f var12 var32 var4f var29 var1 var24 var36

0 0 0 0 0 0 0 0
1 1 1 1 1 1 1 1
0 0 0 0 0 0 0 0
0 0 0 0 0 0 0 0
0 0 0 0 0 0 0 0
0 0 0 0 0 0 0 0
0 0 0 0 0 0 1 1
1 1 0 0 0 0 0 0
1 1 0 0 0 0 0 0
0 0 1 0 0 0 0 0
0 0 0 1 1 0 0 1
0 0 0 1 1 0 1 1
0 0 0 0 0 1 0 0
0 0 0 0 1 0 1 1
0 0 0 1 1 0 1 1

var39+var20+var39+var20+var39+var20+var39+var20+var39+var20+var39+var20+var39+var20+var39+var20+var30+var38+var37+
ar39+var20+var30+var38+var37+var6+var23+var3f+var12+var32+var4f+var29+var1+var24+var36+
 var30 var37 var23 var3f var12 var32 var4f
var30 1 -0.0280083 -0.1752998 -0.0750028 -0.0726921 0.05680367 -0.287222
var37 -0.0280083 1 -0.2445728 0.23723266 0.14049295 -0.491162 0.05272148
var23 -0.1752998 -0.2445728 1 -0.624349 -0.6346429 0.53263216 0.34321913
var3f -0.0750028 0.23723266 -0.624349 1 0.85451 -0.6330242 0.17074071
var12 -0.0726921 0.14049295 -0.6346429 0.85451 1 -0.6210291 0.20718261
var32 0.05680367 -0.4911619 0.53263216 -0.6330242 -0.6210291 1 -0.1450873
var4f -0.287222 0.05272148 0.34321913 0.17074071 0.20718261 -0.1450873 1
var29 -0.426252 0.08345436 0.35373463 0.2034994 0.21968481 -0.1810511 0.90732223
var1 0.05180021 -0.0069827 -0.1051534 -0.0065054 -0.0172652 0.01007384 0.02272301
var24 -0.2957353 -0.1832151 0.94366707 -0.475271 -0.4781218 0.40153552 0.57514242
var36 -0.266495 -0.0643961 0.86057874 -0.4484498 -0.4615582 0.29074717 0.61709181

var30 var37 var23 var3f var12 var32 var4f

var30 1 0 0 0 0 0 0
var37 0 1 0 0 0 0 0
var23 0 0 1 0 0 0 0
var3f 0 0 0 1 1 0 0
var12 0 0 0 1 1 0 0
var32 0 0 0 0 0 1 0
var4f 0 0 0 0 0 0 1
var29 0 0 0 0 0 0 1
var1 0 0 0 0 0 0 0
var24 0 0 1 0 0 0 0
var36 0 0 1 0 0 0 1
var29 var1 var24 var36
-0.426252 0.05180021 -0.2957353 -0.266495 24 36
0.08345436 -0.0069827 -0.1832151 -0.0643961 24 23
0.35373463 -0.1051534 0.94366707 0.86057874
0.2034994 -0.0065054 -0.475271 -0.4484498 36 23
0.21968481 -0.0172652 -0.4781218 -0.4615582 4f 29
-0.1810511 0.01007384 0.40153552 0.29074717
0.90732223 0.02272301 0.57514242 0.61709181
1 0.02177086 0.61556558 0.66074415
0.02177086 1 -0.08025 0.0426424
0.61556558 -0.08025 1 0.94492637
0.66074415 0.0426424 0.94492637 1

var29 var1 var24 var36

0 0 0 0
0 0 0 0
0 0 1 1
0 0 0 0
0 0 0 0
0 0 0 0
1 0 0 1
1 0 1 1
0 1 0 0
1 0 1 1
1 0 1 1