Table 6 Selected features by utilizing EGWO Algorithm.

F₀

protocol

Nominal

F₁₂

dst_to_src_avg_throughput

Float

F₁

proto

Nominal

F₁₃

num_pkts_up_to_128_bytes

Integer

F₂

in_pkts

Integer

F₁₄

num_pkts_128_to_256_bytes

Integer

F₃

out_pkts

Integer

F₁₅

num_pkts_256_to_512_bytes

Integer

F₄

server_tcp_flags

Integer

F₁₆

num_pkts_512_to_1024_bytes

Integer

F₅

flow_duration_milliseconds

Integer

F₁₇

num_pkts_1024_to_1514_bytes

Integer

F₆

duration_out

Integer

F₁₈

tcp_win_max_out

Integer

F₇

min_ttl

Integer

F₁₉

icmp_ipv4_type

Integer

F₈

max_ttl

Integer

F₂₀

dns_query_id

Integer

F₉

max_ip_pkt_len

Integer

F₂₁

dns_query_type

Integer

F₁₀

retransmitted_in_bytes

Integer

F₂₂

ftp_command_ret_code

Integer

F₁₁

src_to_dst_avg_throughput

Float