## 4 Data Collection and Engineering
### Features Engineering
\begin{table}
\begin{tabular}{c l l} \hline \hline
**Features** & **Description** & **Type** \\ \hline Src\_Port & Source port number & INT \\ Dst\_Port & Destination port number & INT \\ Protocol & Protocol type assigned number & INT \\ Flow\_Duration & Flow duration in seconds & INT \\ Tot\_Fwd\_Pkts & Total number of forwarding packets & INT \\ Tot\_Bwd\_Pkts & Total number of backward packets & INT \\ TotLen\_Fwd\_Pkts & The total length of forwarding packets & INT \\ TotLen\_Bwd\_Pkts & The total length of backward packets & INT \\ Fwd\_Pkt\_Len\_Max & Max length of forwarding packets & INT \\ Fwd\_Pkt\_Len\_Min & Min length of forwarding packets & INT \\ Fwd\_Pkt\_Len\_Mean & Mean length of forwarding packets & DOB \\ Fwd\_Pkt\_Len\_Std & Stander deviation length of forwarding packets & DOB \\ Bwd\_Pkt\_Len\_Max & Max length of backward packets & INT \\ Bwd\_Pkt\_Len\_Min & Min length of backward packets & INT \\ Bwd\_Pkt\_Len\_Mean & Mean length of backward packets & DOB \\ Bwd\_Pkt\_Len\_Std & Stander deviation length of backward packets & DOB \\ Flow\_Bys/s & Flow bytes in seconds & INT \\ Flow\_Pkts/s & Flow packets in seconds & INT \\ Flow\_LAT\_Mean & Mean of the flow inter-arrival time (IAT) & DOB \\ Flow\_LAT\_Std & Stander deviation of the flow IAT & DOB \\ Flow\_LAT\_Max & Max of the flow IAT & INT \\ Fwd\_LAT\_Tot & Total of the forwarding IAT & INT \\ Fwd\_LAT\_Mean & Mean of the forwarding IAT & DOB \\ Fwd\_LAT\_Std & Stander deviation of the forwarding IAT & DOB \\ Fwd\_LAT\_Max & Max of the forwarding IAT & INT \\ Fwd\_LAT\_Max & Max of the forwarding IAT & INT \\ Fwd\_LAT\_Min & Min of the forwarding IAT & INT \\ Bwd\_LAT\_Tot & Total of the backward IAT & INT \\ Bwd\_LAT\_Mean & Mean of the backward IAT & DOB \\ Bwd\_LAT\_Std & Stander deviation of the backward IAT & DOB \\ Bwd\_LAT\_Total & Max of the backward IAT & INT \\ Bwd\_LAT\_Mean & Max of the backward IAT & INT \\ Bwd\_LAT\_Total & Max of the backward IAT & INT \\ Bwd\_LAT\_Total & Max of the forwarding header & INT \\ Bwd\_Pkts/s & Graph of the backward header & INT \\ Fwd\_Pkts/s & Forward packet in seconds & INT \\ Bwd\_Pkts/s & Backward packet in seconds & INT \\ Pkt\_Len\_Min & Min of packet length & INT \\ Pkt\_Len\_Max & Max of packet length & INT \\ Pkt\_Len\_Mean & Mean of packet length & DOB \\ Pkt\_Len\_Std & Stander deviation of packet length & DOB \\ Pkt\_Len\_Var & The variance in packet length & DOB \\ ACK\_Flag\_Cnt & Acknowledgment flag Cnt & INT \\ Down/Up\_Ratio & Down or up ratio & INT \\ Pkt\_Size\_Avg & Average packet size & DOB \\ Fwd\_Seg\_Size\_Avg & Average forward segment size & DOB \\ Bwd\_Seg\_Size\_Avg & Average backward segment size & DOB \\ Subflow\_Fwd\_Pkts & Subflow forward packet & INT \\ Subflow\_Fwd\_Byts & Subflow forward bytes & INT \\ Subflow\_Bwd\_Pkts & Subflow backward packet & INT \\ Subflow\_Bwd\_Byts & Subflow backward bytes & INT \\ Init\_Bwd\_Win\_Byts & Initial backward window bytes & INT \\ Fwd\_Act\_Data\_Pkts & Forward acknowledgment data packets & INT \\ Active\_Mean & Mean active time & DOB \\ Active\_Std & Stander deviation active time & DOB \\ Active\_Max & Max active time & INT \\ Active\_Min & Min active time & INT \\ Idle\_Mean & Mean idle time & DOB \\ Idle\_Std & Stander deviation idle time & DOB \\ \hline \hline \end{tabular}
\end{table} 
Table 3: Dataset feature description. Figure 10: Network traffic in the morning and evening.