added ddos info to flow schema etc