www.pudn.com > bayes.rar > b.nbc
/*----------------------------------------------------------------------
domains
----------------------------------------------------------------------*/
dom(1) = ZZ [0, 57715];
dom(2) = { udp, tcp, icmp };
dom(3) = { private, domain_u, http, smtp, ftp_data, ftp, eco_i, other, auth, ecr_i, IRC, X11, finger, time, domain, telnet, pop_3, ldap, login, name, ntp_u, http_443, sunrpc, printer, systat, tim_i, netstat, remote_job, link, urp_i, sql_net, bgp, pop_2, tftp_u, uucp, imap4, pm_dump, nnsp, courier, daytime, iso_tsap, echo, discard, ssh, whois, mtp, gopher, rje, ctf, supdup, hostnames, csnet_ns, uucp_path, nntp, netbios_ns, netbios_dgm, netbios_ssn, vmnet, Z39_50, exec, shell, efs, klogin, kshell, icmp };
dom(4) = { SF, RSTR, S1, REJ, S3, RSTO, S0, S2, RSTOS0, SH, OTH };
dom(5) = ZZ [0, 62825648];
dom(6) = ZZ [0, 5203179];
dom(7) = ZZ [0, 1];
dom(8) = ZZ [0, 3];
dom(9) = ZZ [0, 3];
dom(10) = ZZ [0, 101];
dom(11) = ZZ [0, 4];
dom(12) = ZZ [0, 1];
dom(13) = ZZ [0, 796];
dom(14) = ZZ [0, 1];
dom(15) = ZZ [0, 2];
dom(16) = ZZ [0, 878];
dom(17) = ZZ [0, 100];
dom(18) = ZZ [0, 5];
dom(19) = ZZ [0, 4];
dom(20) = ZZ [0, 0];
dom(21) = ZZ [0, 1];
dom(22) = ZZ [0, 1];
dom(23) = ZZ [0, 511];
dom(24) = ZZ [0, 511];
dom(25) = IR [0, 1];
dom(26) = IR [0, 1];
dom(27) = IR [0, 1];
dom(28) = IR [0, 1];
dom(29) = IR [0, 1];
dom(30) = IR [0, 1];
dom(31) = IR [0, 1];
dom(32) = ZZ [0, 255];
dom(33) = ZZ [0, 255];
dom(34) = IR [0, 1];
dom(35) = IR [0, 1];
dom(36) = IR [0, 1];
dom(37) = IR [0, 1];
dom(38) = IR [0, 1];
dom(39) = IR [0, 1];
dom(40) = IR [0, 1];
dom(41) = IR [0, 1];
dom(intrusion_type) = { normal., snmpgetattack., named., xlock., smurf., ipsweep., multihop., xsnoop., sendmail., guess_passwd., saint., buffer_overflow., portsweep., pod., apache2., phf., udpstorm., warezmaster., perl., satan., xterm., mscan., processtable., ps., nmap., rootkit., neptune., loadmodule., imap., back., httptunnel., worm., mailbomb., ftp_write., teardrop., land., sqlattack., snmpguess. };
/*----------------------------------------------------------------------
naive Bayes classifier
----------------------------------------------------------------------*/
nbc(intrusion_type) = {
prob(intrusion_type) = {
normal. : 60593,
snmpgetattack. : 7741,
named. : 17,
xlock. : 9,
smurf. : 164091,
ipsweep. : 306,
multihop. : 18,
xsnoop. : 4,
sendmail. : 17,
guess_passwd. : 4367,
saint. : 736,
buffer_overflow.: 22,
portsweep. : 354,
pod. : 87,
apache2. : 794,
phf. : 2,
udpstorm. : 2,
warezmaster. : 1602,
perl. : 2,
satan. : 1633,
xterm. : 13,
mscan. : 1053,
processtable. : 759,
ps. : 16,
nmap. : 84,
rootkit. : 13,
neptune. : 58001,
loadmodule. : 2,
imap. : 1,
back. : 1098,
httptunnel. : 158,
worm. : 2,
mailbomb. : 5000,
ftp_write. : 3,
teardrop. : 12,
land. : 9,
sqlattack. : 2,
snmpguess. : 2406 };
prob(1|intrusion_type) = {
normal. : N(10.6658, 289440) [60593],
snmpgetattack. : N(1.56311, 4610.13) [7741],
named. : N(3610.06, 1.94511e+008) [17],
xlock. : N(214, 13372.8) [9],
smurf. : N(0, 0) [164091],
ipsweep. : N(0, 0) [306],
multihop. : N(110.722, 173250) [18],
xsnoop. : N(172.5, 44225.7) [4],
sendmail. : N(2.41176, 12.0074) [17],
guess_passwd. : N(3.48546, 5.88109) [4367],
saint. : N(0.0747283, 0.515497) [736],
buffer_overflow.: N(300.636, 363105) [22],
portsweep. : N(0, 0) [354],
pod. : N(0, 0) [87],
apache2. : N(785.141, 529215) [794],
phf. : N(0, 0) [2],
udpstorm. : N(0, 0) [2],
warezmaster. : N(186.487, 17616.5) [1602],
perl. : N(41.5, 4.5) [2],
satan. : N(0.0140845, 0.10213) [1633],
xterm. : N(104.769, 13038.9) [13],
mscan. : N(0.603039, 1.90501) [1053],
processtable. : N(5121.26, 1.31302e+007) [759],
ps. : N(21.3125, 1216.63) [16],
nmap. : N(0, 0) [84],
rootkit. : N(152.769, 110582) [13],
neptune. : N(8.62054e-005, 0.000431027) [58001],
loadmodule. : N(79.5, 40.5) [2],
imap. : N(91, 0) [1],
back. : N(0.057377, 0.32943) [1098],
httptunnel. : N(18.7405, 15500.1) [158],
worm. : N(9, 0) [2],
mailbomb. : N(1.0036, 0.0263923) [5000],
ftp_write. : N(15.3333, 185.333) [3],
teardrop. : N(0, 0) [12],
land. : N(0, 0) [9],
sqlattack. : N(2, 0) [2],
snmpguess. : N(0, 0) [2406] };
prob(2|intrusion_type) = {
normal. :{ udp: 16097, tcp: 44118, icmp: 378 },
snmpgetattack. :{ udp: 7741, tcp: 0, icmp: 0 },
named. :{ udp: 0, tcp: 17, icmp: 0 },
xlock. :{ udp: 0, tcp: 9, icmp: 0 },
smurf. :{ udp: 0, tcp: 0, icmp: 164091 },
ipsweep. :{ udp: 0, tcp: 0, icmp: 306 },
multihop. :{ udp: 8, tcp: 9, icmp: 1 },
xsnoop. :{ udp: 0, tcp: 4, icmp: 0 },
sendmail. :{ udp: 0, tcp: 17, icmp: 0 },
guess_passwd. :{ udp: 0, tcp: 4367, icmp: 0 },
saint. :{ udp: 27, tcp: 607, icmp: 102 },
buffer_overflow.:{ udp: 0, tcp: 22, icmp: 0 },
portsweep. :{ udp: 0, tcp: 354, icmp: 0 },
pod. :{ udp: 0, tcp: 0, icmp: 87 },
apache2. :{ udp: 0, tcp: 794, icmp: 0 },
phf. :{ udp: 0, tcp: 2, icmp: 0 },
udpstorm. :{ udp: 2, tcp: 0, icmp: 0 },
warezmaster. :{ udp: 0, tcp: 1602, icmp: 0 },
perl. :{ udp: 0, tcp: 2, icmp: 0 },
satan. :{ udp: 413, tcp: 1219, icmp: 1 },
xterm. :{ udp: 0, tcp: 13, icmp: 0 },
mscan. :{ udp: 0, tcp: 1053, icmp: 0 },
processtable. :{ udp: 0, tcp: 759, icmp: 0 },
ps. :{ udp: 0, tcp: 16, icmp: 0 },
nmap. :{ udp: 0, tcp: 84, icmp: 0 },
rootkit. :{ udp: 0, tcp: 13, icmp: 0 },
neptune. :{ udp: 0, tcp: 58001, icmp: 0 },
loadmodule. :{ udp: 0, tcp: 2, icmp: 0 },
imap. :{ udp: 0, tcp: 1, icmp: 0 },
back. :{ udp: 0, tcp: 1098, icmp: 0 },
httptunnel. :{ udp: 0, tcp: 158, icmp: 0 },
worm. :{ udp: 0, tcp: 2, icmp: 0 },
mailbomb. :{ udp: 0, tcp: 5000, icmp: 0 },
ftp_write. :{ udp: 0, tcp: 3, icmp: 0 },
teardrop. :{ udp: 12, tcp: 0, icmp: 0 },
land. :{ udp: 0, tcp: 9, icmp: 0 },
sqlattack. :{ udp: 0, tcp: 2, icmp: 0 },
snmpguess. :{ udp: 2403, tcp: 0, icmp: 3 }};
prob(3|intrusion_type) = {
normal. :{ private: 12808, domain_u: 3158, http: 39247, smtp: 3207, ftp_data: 1047, ftp: 122, eco_i: 146, other: 122, auth: 89, ecr_i: 173, IRC: 21, X11: 4, finger: 174, time: 28, domain: 0, telnet: 88, pop_3: 15, ldap: 0, login: 0, name: 0, ntp_u: 80, http_443: 0, sunrpc: 0, printer: 0, systat: 0, tim_i: 1, netstat: 0, remote_job: 1, link: 1, urp_i: 58, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 1, uucp: 0, imap4: 0, pm_dump: 0, nnsp: 0, courier: 0, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 0, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 2 },
snmpgetattack. :{ private: 7733, domain_u: 0, http: 0, smtp: 0, ftp_data: 0, ftp: 0, eco_i: 0, other: 8, auth: 0, ecr_i: 0, IRC: 0, X11: 0, finger: 0, time: 0, domain: 0, telnet: 0, pop_3: 0, ldap: 0, login: 0, name: 0, ntp_u: 0, http_443: 0, sunrpc: 0, printer: 0, systat: 0, tim_i: 0, netstat: 0, remote_job: 0, link: 0, urp_i: 0, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 0, uucp: 0, imap4: 0, pm_dump: 0, nnsp: 0, courier: 0, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 0, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 0 },
named. :{ private: 0, domain_u: 0, http: 0, smtp: 0, ftp_data: 4, ftp: 2, eco_i: 0, other: 2, auth: 0, ecr_i: 0, IRC: 0, X11: 3, finger: 0, time: 0, domain: 6, telnet: 0, pop_3: 0, ldap: 0, login: 0, name: 0, ntp_u: 0, http_443: 0, sunrpc: 0, printer: 0, systat: 0, tim_i: 0, netstat: 0, remote_job: 0, link: 0, urp_i: 0, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 0, uucp: 0, imap4: 0, pm_dump: 0, nnsp: 0, courier: 0, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 0, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 0 },
xlock. :{ private: 0, domain_u: 0, http: 0, smtp: 0, ftp_data: 0, ftp: 0, eco_i: 0, other: 0, auth: 0, ecr_i: 0, IRC: 1, X11: 5, finger: 0, time: 0, domain: 0, telnet: 3, pop_3: 0, ldap: 0, login: 0, name: 0, ntp_u: 0, http_443: 0, sunrpc: 0, printer: 0, systat: 0, tim_i: 0, netstat: 0, remote_job: 0, link: 0, urp_i: 0, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 0, uucp: 0, imap4: 0, pm_dump: 0, nnsp: 0, courier: 0, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 0, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 0 },
smurf. :{ private: 0, domain_u: 0, http: 0, smtp: 0, ftp_data: 0, ftp: 0, eco_i: 0, other: 0, auth: 0, ecr_i: 164091, IRC: 0, X11: 0, finger: 0, time: 0, domain: 0, telnet: 0, pop_3: 0, ldap: 0, login: 0, name: 0, ntp_u: 0, http_443: 0, sunrpc: 0, printer: 0, systat: 0, tim_i: 0, netstat: 0, remote_job: 0, link: 0, urp_i: 0, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 0, uucp: 0, imap4: 0, pm_dump: 0, nnsp: 0, courier: 0, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 0, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 0 },
ipsweep. :{ private: 0, domain_u: 0, http: 0, smtp: 0, ftp_data: 0, ftp: 0, eco_i: 300, other: 0, auth: 0, ecr_i: 6, IRC: 0, X11: 0, finger: 0, time: 0, domain: 0, telnet: 0, pop_3: 0, ldap: 0, login: 0, name: 0, ntp_u: 0, http_443: 0, sunrpc: 0, printer: 0, systat: 0, tim_i: 0, netstat: 0, remote_job: 0, link: 0, urp_i: 0, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 0, uucp: 0, imap4: 0, pm_dump: 0, nnsp: 0, courier: 0, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 0, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 0 },
multihop. :{ private: 0, domain_u: 0, http: 0, smtp: 0, ftp_data: 2, ftp: 3, eco_i: 0, other: 8, auth: 0, ecr_i: 0, IRC: 0, X11: 0, finger: 0, time: 0, domain: 0, telnet: 4, pop_3: 0, ldap: 0, login: 0, name: 0, ntp_u: 0, http_443: 0, sunrpc: 0, printer: 0, systat: 0, tim_i: 0, netstat: 0, remote_job: 0, link: 0, urp_i: 1, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 0, uucp: 0, imap4: 0, pm_dump: 0, nnsp: 0, courier: 0, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 0, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 0 },
xsnoop. :{ private: 0, domain_u: 0, http: 0, smtp: 0, ftp_data: 0, ftp: 0, eco_i: 0, other: 0, auth: 0, ecr_i: 0, IRC: 0, X11: 2, finger: 0, time: 0, domain: 0, telnet: 2, pop_3: 0, ldap: 0, login: 0, name: 0, ntp_u: 0, http_443: 0, sunrpc: 0, printer: 0, systat: 0, tim_i: 0, netstat: 0, remote_job: 0, link: 0, urp_i: 0, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 0, uucp: 0, imap4: 0, pm_dump: 0, nnsp: 0, courier: 0, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 0, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 0 },
sendmail. :{ private: 0, domain_u: 0, http: 0, smtp: 6, ftp_data: 0, ftp: 0, eco_i: 0, other: 0, auth: 6, ecr_i: 0, IRC: 0, X11: 0, finger: 0, time: 0, domain: 0, telnet: 5, pop_3: 0, ldap: 0, login: 0, name: 0, ntp_u: 0, http_443: 0, sunrpc: 0, printer: 0, systat: 0, tim_i: 0, netstat: 0, remote_job: 0, link: 0, urp_i: 0, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 0, uucp: 0, imap4: 0, pm_dump: 0, nnsp: 0, courier: 0, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 0, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 0 },
guess_passwd. :{ private: 0, domain_u: 0, http: 0, smtp: 0, ftp_data: 0, ftp: 100, eco_i: 0, other: 0, auth: 0, ecr_i: 0, IRC: 0, X11: 0, finger: 0, time: 0, domain: 0, telnet: 625, pop_3: 3642, ldap: 0, login: 0, name: 0, ntp_u: 0, http_443: 0, sunrpc: 0, printer: 0, systat: 0, tim_i: 0, netstat: 0, remote_job: 0, link: 0, urp_i: 0, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 0, uucp: 0, imap4: 0, pm_dump: 0, nnsp: 0, courier: 0, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 0, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 0 },
saint. :{ private: 91, domain_u: 1, http: 1, smtp: 1, ftp_data: 0, ftp: 1, eco_i: 101, other: 526, auth: 0, ecr_i: 1, IRC: 1, X11: 1, finger: 5, time: 0, domain: 0, telnet: 1, pop_3: 0, ldap: 1, login: 1, name: 1, ntp_u: 0, http_443: 0, sunrpc: 0, printer: 0, systat: 0, tim_i: 0, netstat: 0, remote_job: 0, link: 0, urp_i: 0, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 0, uucp: 1, imap4: 0, pm_dump: 0, nnsp: 0, courier: 0, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 1, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 0 },
buffer_overflow.:{ private: 0, domain_u: 0, http: 0, smtp: 0, ftp_data: 4, ftp: 1, eco_i: 0, other: 0, auth: 0, ecr_i: 0, IRC: 0, X11: 0, finger: 0, time: 0, domain: 0, telnet: 17, pop_3: 0, ldap: 0, login: 0, name: 0, ntp_u: 0, http_443: 0, sunrpc: 0, printer: 0, systat: 0, tim_i: 0, netstat: 0, remote_job: 0, link: 0, urp_i: 0, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 0, uucp: 0, imap4: 0, pm_dump: 0, nnsp: 0, courier: 0, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 0, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 0 },
portsweep. :{ private: 306, domain_u: 0, http: 2, smtp: 1, ftp_data: 0, ftp: 1, eco_i: 0, other: 29, auth: 0, ecr_i: 0, IRC: 0, X11: 0, finger: 0, time: 1, domain: 0, telnet: 1, pop_3: 0, ldap: 0, login: 0, name: 0, ntp_u: 0, http_443: 1, sunrpc: 1, printer: 1, systat: 2, tim_i: 0, netstat: 1, remote_job: 0, link: 1, urp_i: 0, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 0, uucp: 0, imap4: 0, pm_dump: 0, nnsp: 1, courier: 0, daytime: 1, iso_tsap: 1, echo: 1, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 1, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 0, netbios_ns: 0, netbios_dgm: 1, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 0 },
pod. :{ private: 0, domain_u: 0, http: 0, smtp: 0, ftp_data: 0, ftp: 0, eco_i: 0, other: 0, auth: 0, ecr_i: 81, IRC: 0, X11: 0, finger: 0, time: 0, domain: 0, telnet: 0, pop_3: 0, ldap: 0, login: 0, name: 0, ntp_u: 0, http_443: 0, sunrpc: 0, printer: 0, systat: 0, tim_i: 6, netstat: 0, remote_job: 0, link: 0, urp_i: 0, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 0, uucp: 0, imap4: 0, pm_dump: 0, nnsp: 0, courier: 0, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 0, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 0 },
apache2. :{ private: 0, domain_u: 0, http: 794, smtp: 0, ftp_data: 0, ftp: 0, eco_i: 0, other: 0, auth: 0, ecr_i: 0, IRC: 0, X11: 0, finger: 0, time: 0, domain: 0, telnet: 0, pop_3: 0, ldap: 0, login: 0, name: 0, ntp_u: 0, http_443: 0, sunrpc: 0, printer: 0, systat: 0, tim_i: 0, netstat: 0, remote_job: 0, link: 0, urp_i: 0, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 0, uucp: 0, imap4: 0, pm_dump: 0, nnsp: 0, courier: 0, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 0, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 0 },
phf. :{ private: 0, domain_u: 0, http: 2, smtp: 0, ftp_data: 0, ftp: 0, eco_i: 0, other: 0, auth: 0, ecr_i: 0, IRC: 0, X11: 0, finger: 0, time: 0, domain: 0, telnet: 0, pop_3: 0, ldap: 0, login: 0, name: 0, ntp_u: 0, http_443: 0, sunrpc: 0, printer: 0, systat: 0, tim_i: 0, netstat: 0, remote_job: 0, link: 0, urp_i: 0, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 0, uucp: 0, imap4: 0, pm_dump: 0, nnsp: 0, courier: 0, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 0, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 0 },
udpstorm. :{ private: 2, domain_u: 0, http: 0, smtp: 0, ftp_data: 0, ftp: 0, eco_i: 0, other: 0, auth: 0, ecr_i: 0, IRC: 0, X11: 0, finger: 0, time: 0, domain: 0, telnet: 0, pop_3: 0, ldap: 0, login: 0, name: 0, ntp_u: 0, http_443: 0, sunrpc: 0, printer: 0, systat: 0, tim_i: 0, netstat: 0, remote_job: 0, link: 0, urp_i: 0, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 0, uucp: 0, imap4: 0, pm_dump: 0, nnsp: 0, courier: 0, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 0, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 0 },
warezmaster. :{ private: 0, domain_u: 0, http: 0, smtp: 0, ftp_data: 1067, ftp: 535, eco_i: 0, other: 0, auth: 0, ecr_i: 0, IRC: 0, X11: 0, finger: 0, time: 0, domain: 0, telnet: 0, pop_3: 0, ldap: 0, login: 0, name: 0, ntp_u: 0, http_443: 0, sunrpc: 0, printer: 0, systat: 0, tim_i: 0, netstat: 0, remote_job: 0, link: 0, urp_i: 0, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 0, uucp: 0, imap4: 0, pm_dump: 0, nnsp: 0, courier: 0, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 0, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 0 },
perl. :{ private: 0, domain_u: 0, http: 0, smtp: 0, ftp_data: 0, ftp: 0, eco_i: 0, other: 0, auth: 0, ecr_i: 0, IRC: 0, X11: 0, finger: 0, time: 0, domain: 0, telnet: 2, pop_3: 0, ldap: 0, login: 0, name: 0, ntp_u: 0, http_443: 0, sunrpc: 0, printer: 0, systat: 0, tim_i: 0, netstat: 0, remote_job: 0, link: 0, urp_i: 0, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 0, uucp: 0, imap4: 0, pm_dump: 0, nnsp: 0, courier: 0, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 0, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 0 },
satan. :{ private: 336, domain_u: 1, http: 0, smtp: 0, ftp_data: 1, ftp: 0, eco_i: 0, other: 1284, auth: 0, ecr_i: 0, IRC: 1, X11: 0, finger: 0, time: 0, domain: 0, telnet: 0, pop_3: 0, ldap: 0, login: 1, name: 0, ntp_u: 0, http_443: 0, sunrpc: 0, printer: 0, systat: 0, tim_i: 0, netstat: 0, remote_job: 1, link: 1, urp_i: 1, sql_net: 1, bgp: 1, pop_2: 1, tftp_u: 0, uucp: 1, imap4: 0, pm_dump: 0, nnsp: 0, courier: 0, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 1, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 1, efs: 0, klogin: 0, kshell: 0, icmp: 0 },
xterm. :{ private: 0, domain_u: 0, http: 0, smtp: 0, ftp_data: 3, ftp: 2, eco_i: 0, other: 0, auth: 0, ecr_i: 0, IRC: 0, X11: 0, finger: 0, time: 0, domain: 0, telnet: 8, pop_3: 0, ldap: 0, login: 0, name: 0, ntp_u: 0, http_443: 0, sunrpc: 0, printer: 0, systat: 0, tim_i: 0, netstat: 0, remote_job: 0, link: 0, urp_i: 0, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 0, uucp: 0, imap4: 0, pm_dump: 0, nnsp: 0, courier: 0, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 0, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 0 },
mscan. :{ private: 0, domain_u: 0, http: 0, smtp: 0, ftp_data: 0, ftp: 0, eco_i: 0, other: 0, auth: 0, ecr_i: 0, IRC: 0, X11: 0, finger: 0, time: 0, domain: 0, telnet: 343, pop_3: 269, ldap: 0, login: 0, name: 0, ntp_u: 0, http_443: 0, sunrpc: 142, printer: 0, systat: 0, tim_i: 0, netstat: 0, remote_job: 0, link: 0, urp_i: 0, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 0, uucp: 0, imap4: 283, pm_dump: 16, nnsp: 0, courier: 0, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 0, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 0 },
processtable. :{ private: 0, domain_u: 0, http: 0, smtp: 0, ftp_data: 0, ftp: 0, eco_i: 0, other: 0, auth: 0, ecr_i: 0, IRC: 0, X11: 0, finger: 0, time: 0, domain: 0, telnet: 759, pop_3: 0, ldap: 0, login: 0, name: 0, ntp_u: 0, http_443: 0, sunrpc: 0, printer: 0, systat: 0, tim_i: 0, netstat: 0, remote_job: 0, link: 0, urp_i: 0, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 0, uucp: 0, imap4: 0, pm_dump: 0, nnsp: 0, courier: 0, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 0, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 0 },
ps. :{ private: 0, domain_u: 0, http: 0, smtp: 0, ftp_data: 4, ftp: 6, eco_i: 0, other: 0, auth: 0, ecr_i: 0, IRC: 0, X11: 0, finger: 0, time: 0, domain: 0, telnet: 6, pop_3: 0, ldap: 0, login: 0, name: 0, ntp_u: 0, http_443: 0, sunrpc: 0, printer: 0, systat: 0, tim_i: 0, netstat: 0, remote_job: 0, link: 0, urp_i: 0, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 0, uucp: 0, imap4: 0, pm_dump: 0, nnsp: 0, courier: 0, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 0, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 0 },
nmap. :{ private: 80, domain_u: 0, http: 0, smtp: 0, ftp_data: 0, ftp: 0, eco_i: 0, other: 0, auth: 0, ecr_i: 0, IRC: 0, X11: 0, finger: 0, time: 0, domain: 1, telnet: 0, pop_3: 0, ldap: 0, login: 0, name: 0, ntp_u: 0, http_443: 0, sunrpc: 0, printer: 0, systat: 0, tim_i: 0, netstat: 0, remote_job: 0, link: 0, urp_i: 0, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 0, uucp: 1, imap4: 0, pm_dump: 0, nnsp: 1, courier: 1, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 0, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 0 },
rootkit. :{ private: 0, domain_u: 0, http: 0, smtp: 0, ftp_data: 6, ftp: 5, eco_i: 0, other: 0, auth: 0, ecr_i: 0, IRC: 0, X11: 0, finger: 0, time: 0, domain: 0, telnet: 2, pop_3: 0, ldap: 0, login: 0, name: 0, ntp_u: 0, http_443: 0, sunrpc: 0, printer: 0, systat: 0, tim_i: 0, netstat: 0, remote_job: 0, link: 0, urp_i: 0, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 0, uucp: 0, imap4: 0, pm_dump: 0, nnsp: 0, courier: 0, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 0, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 0 },
neptune. :{ private: 54739, domain_u: 0, http: 93, smtp: 53, ftp_data: 83, ftp: 57, eco_i: 0, other: 51, auth: 55, ecr_i: 0, IRC: 0, X11: 0, finger: 104, time: 53, domain: 61, telnet: 203, pop_3: 46, ldap: 58, login: 58, name: 59, ntp_u: 0, http_443: 59, sunrpc: 52, printer: 57, systat: 55, tim_i: 0, netstat: 64, remote_job: 63, link: 63, urp_i: 0, sql_net: 53, bgp: 65, pop_2: 60, tftp_u: 0, uucp: 59, imap4: 49, pm_dump: 0, nnsp: 57, courier: 57, daytime: 52, iso_tsap: 61, echo: 68, discard: 60, ssh: 56, whois: 52, mtp: 56, gopher: 64, rje: 58, ctf: 63, supdup: 50, hostnames: 48, csnet_ns: 50, uucp_path: 56, nntp: 60, netbios_ns: 64, netbios_dgm: 58, netbios_ssn: 53, vmnet: 53, Z39_50: 55, exec: 61, shell: 52, efs: 55, klogin: 50, kshell: 60, icmp: 0 },
loadmodule. :{ private: 0, domain_u: 0, http: 0, smtp: 0, ftp_data: 0, ftp: 0, eco_i: 0, other: 0, auth: 0, ecr_i: 0, IRC: 0, X11: 0, finger: 0, time: 0, domain: 0, telnet: 2, pop_3: 0, ldap: 0, login: 0, name: 0, ntp_u: 0, http_443: 0, sunrpc: 0, printer: 0, systat: 0, tim_i: 0, netstat: 0, remote_job: 0, link: 0, urp_i: 0, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 0, uucp: 0, imap4: 0, pm_dump: 0, nnsp: 0, courier: 0, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 0, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 0 },
imap. :{ private: 0, domain_u: 0, http: 0, smtp: 0, ftp_data: 0, ftp: 0, eco_i: 0, other: 0, auth: 0, ecr_i: 0, IRC: 0, X11: 0, finger: 0, time: 0, domain: 0, telnet: 0, pop_3: 0, ldap: 0, login: 0, name: 0, ntp_u: 0, http_443: 0, sunrpc: 0, printer: 0, systat: 0, tim_i: 0, netstat: 0, remote_job: 0, link: 0, urp_i: 0, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 0, uucp: 0, imap4: 1, pm_dump: 0, nnsp: 0, courier: 0, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 0, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 0 },
back. :{ private: 0, domain_u: 0, http: 1098, smtp: 0, ftp_data: 0, ftp: 0, eco_i: 0, other: 0, auth: 0, ecr_i: 0, IRC: 0, X11: 0, finger: 0, time: 0, domain: 0, telnet: 0, pop_3: 0, ldap: 0, login: 0, name: 0, ntp_u: 0, http_443: 0, sunrpc: 0, printer: 0, systat: 0, tim_i: 0, netstat: 0, remote_job: 0, link: 0, urp_i: 0, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 0, uucp: 0, imap4: 0, pm_dump: 0, nnsp: 0, courier: 0, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 0, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 0 },
httptunnel. :{ private: 0, domain_u: 0, http: 0, smtp: 0, ftp_data: 1, ftp: 1, eco_i: 0, other: 155, auth: 0, ecr_i: 0, IRC: 0, X11: 0, finger: 0, time: 0, domain: 0, telnet: 1, pop_3: 0, ldap: 0, login: 0, name: 0, ntp_u: 0, http_443: 0, sunrpc: 0, printer: 0, systat: 0, tim_i: 0, netstat: 0, remote_job: 0, link: 0, urp_i: 0, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 0, uucp: 0, imap4: 0, pm_dump: 0, nnsp: 0, courier: 0, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 0, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 0 },
worm. :{ private: 0, domain_u: 0, http: 0, smtp: 0, ftp_data: 0, ftp: 0, eco_i: 0, other: 0, auth: 0, ecr_i: 0, IRC: 0, X11: 0, finger: 0, time: 0, domain: 0, telnet: 2, pop_3: 0, ldap: 0, login: 0, name: 0, ntp_u: 0, http_443: 0, sunrpc: 0, printer: 0, systat: 0, tim_i: 0, netstat: 0, remote_job: 0, link: 0, urp_i: 0, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 0, uucp: 0, imap4: 0, pm_dump: 0, nnsp: 0, courier: 0, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 0, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 0 },
mailbomb. :{ private: 0, domain_u: 0, http: 0, smtp: 5000, ftp_data: 0, ftp: 0, eco_i: 0, other: 0, auth: 0, ecr_i: 0, IRC: 0, X11: 0, finger: 0, time: 0, domain: 0, telnet: 0, pop_3: 0, ldap: 0, login: 0, name: 0, ntp_u: 0, http_443: 0, sunrpc: 0, printer: 0, systat: 0, tim_i: 0, netstat: 0, remote_job: 0, link: 0, urp_i: 0, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 0, uucp: 0, imap4: 0, pm_dump: 0, nnsp: 0, courier: 0, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 0, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 0 },
ftp_write. :{ private: 0, domain_u: 0, http: 0, smtp: 0, ftp_data: 1, ftp: 1, eco_i: 0, other: 0, auth: 0, ecr_i: 0, IRC: 0, X11: 0, finger: 0, time: 0, domain: 0, telnet: 0, pop_3: 0, ldap: 0, login: 1, name: 0, ntp_u: 0, http_443: 0, sunrpc: 0, printer: 0, systat: 0, tim_i: 0, netstat: 0, remote_job: 0, link: 0, urp_i: 0, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 0, uucp: 0, imap4: 0, pm_dump: 0, nnsp: 0, courier: 0, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 0, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 0 },
teardrop. :{ private: 12, domain_u: 0, http: 0, smtp: 0, ftp_data: 0, ftp: 0, eco_i: 0, other: 0, auth: 0, ecr_i: 0, IRC: 0, X11: 0, finger: 0, time: 0, domain: 0, telnet: 0, pop_3: 0, ldap: 0, login: 0, name: 0, ntp_u: 0, http_443: 0, sunrpc: 0, printer: 0, systat: 0, tim_i: 0, netstat: 0, remote_job: 0, link: 0, urp_i: 0, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 0, uucp: 0, imap4: 0, pm_dump: 0, nnsp: 0, courier: 0, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 0, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 0 },
land. :{ private: 0, domain_u: 0, http: 0, smtp: 0, ftp_data: 0, ftp: 0, eco_i: 0, other: 0, auth: 0, ecr_i: 0, IRC: 0, X11: 0, finger: 8, time: 0, domain: 0, telnet: 1, pop_3: 0, ldap: 0, login: 0, name: 0, ntp_u: 0, http_443: 0, sunrpc: 0, printer: 0, systat: 0, tim_i: 0, netstat: 0, remote_job: 0, link: 0, urp_i: 0, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 0, uucp: 0, imap4: 0, pm_dump: 0, nnsp: 0, courier: 0, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 0, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 0 },
sqlattack. :{ private: 0, domain_u: 0, http: 0, smtp: 0, ftp_data: 0, ftp: 0, eco_i: 0, other: 0, auth: 0, ecr_i: 0, IRC: 0, X11: 0, finger: 0, time: 0, domain: 0, telnet: 2, pop_3: 0, ldap: 0, login: 0, name: 0, ntp_u: 0, http_443: 0, sunrpc: 0, printer: 0, systat: 0, tim_i: 0, netstat: 0, remote_job: 0, link: 0, urp_i: 0, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 0, uucp: 0, imap4: 0, pm_dump: 0, nnsp: 0, courier: 0, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 0, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 0 },
snmpguess. :{ private: 2403, domain_u: 0, http: 0, smtp: 0, ftp_data: 0, ftp: 0, eco_i: 0, other: 0, auth: 0, ecr_i: 0, IRC: 0, X11: 0, finger: 0, time: 0, domain: 0, telnet: 0, pop_3: 0, ldap: 0, login: 0, name: 0, ntp_u: 0, http_443: 0, sunrpc: 0, printer: 0, systat: 0, tim_i: 0, netstat: 0, remote_job: 0, link: 0, urp_i: 3, sql_net: 0, bgp: 0, pop_2: 0, tftp_u: 0, uucp: 0, imap4: 0, pm_dump: 0, nnsp: 0, courier: 0, daytime: 0, iso_tsap: 0, echo: 0, discard: 0, ssh: 0, whois: 0, mtp: 0, gopher: 0, rje: 0, ctf: 0, supdup: 0, hostnames: 0, csnet_ns: 0, uucp_path: 0, nntp: 0, netbios_ns: 0, netbios_dgm: 0, netbios_ssn: 0, vmnet: 0, Z39_50: 0, exec: 0, shell: 0, efs: 0, klogin: 0, kshell: 0, icmp: 0 }};
prob(4|intrusion_type) = {
normal. :{ SF: 60434, RSTR: 74, S1: 17, REJ: 48, S3: 4, RSTO: 2, S0: 0, S2: 13, RSTOS0: 1, SH: 0, OTH: 0 },
snmpgetattack. :{ SF: 7741, RSTR: 0, S1: 0, REJ: 0, S3: 0, RSTO: 0, S0: 0, S2: 0, RSTOS0: 0, SH: 0, OTH: 0 },
named. :{ SF: 13, RSTR: 0, S1: 0, REJ: 2, S3: 0, RSTO: 2, S0: 0, S2: 0, RSTOS0: 0, SH: 0, OTH: 0 },
xlock. :{ SF: 9, RSTR: 0, S1: 0, REJ: 0, S3: 0, RSTO: 0, S0: 0, S2: 0, RSTOS0: 0, SH: 0, OTH: 0 },
smurf. :{ SF: 164091, RSTR: 0, S1: 0, REJ: 0, S3: 0, RSTO: 0, S0: 0, S2: 0, RSTOS0: 0, SH: 0, OTH: 0 },
ipsweep. :{ SF: 306, RSTR: 0, S1: 0, REJ: 0, S3: 0, RSTO: 0, S0: 0, S2: 0, RSTOS0: 0, SH: 0, OTH: 0 },
multihop. :{ SF: 18, RSTR: 0, S1: 0, REJ: 0, S3: 0, RSTO: 0, S0: 0, S2: 0, RSTOS0: 0, SH: 0, OTH: 0 },
xsnoop. :{ SF: 3, RSTR: 0, S1: 1, REJ: 0, S3: 0, RSTO: 0, S0: 0, S2: 0, RSTOS0: 0, SH: 0, OTH: 0 },
sendmail. :{ SF: 17, RSTR: 0, S1: 0, REJ: 0, S3: 0, RSTO: 0, S0: 0, S2: 0, RSTOS0: 0, SH: 0, OTH: 0 },
guess_passwd. :{ SF: 4333, RSTR: 2, S1: 0, REJ: 0, S3: 4, RSTO: 28, S0: 0, S2: 0, RSTOS0: 0, SH: 0, OTH: 0 },
saint. :{ SF: 137, RSTR: 0, S1: 0, REJ: 564, S3: 0, RSTO: 0, S0: 34, S2: 1, RSTOS0: 0, SH: 0, OTH: 0 },
buffer_overflow.:{ SF: 22, RSTR: 0, S1: 0, REJ: 0, S3: 0, RSTO: 0, S0: 0, S2: 0, RSTOS0: 0, SH: 0, OTH: 0 },
portsweep. :{ SF: 0, RSTR: 226, S1: 0, REJ: 117, S3: 0, RSTO: 7, S0: 0, S2: 0, RSTOS0: 0, SH: 0, OTH: 4 },
pod. :{ SF: 87, RSTR: 0, S1: 0, REJ: 0, S3: 0, RSTO: 0, S0: 0, S2: 0, RSTOS0: 0, SH: 0, OTH: 0 },
apache2. :{ SF: 4, RSTR: 510, S1: 0, REJ: 0, S3: 6, RSTO: 0, S0: 274, S2: 0, RSTOS0: 0, SH: 0, OTH: 0 },
phf. :{ SF: 1, RSTR: 0, S1: 0, REJ: 1, S3: 0, RSTO: 0, S0: 0, S2: 0, RSTOS0: 0, SH: 0, OTH: 0 },
udpstorm. :{ SF: 2, RSTR: 0, S1: 0, REJ: 0, S3: 0, RSTO: 0, S0: 0, S2: 0, RSTOS0: 0, SH: 0, OTH: 0 },
warezmaster. :{ SF: 1598, RSTR: 0, S1: 4, REJ: 0, S3: 0, RSTO: 0, S0: 0, S2: 0, RSTOS0: 0, SH: 0, OTH: 0 },
perl. :{ SF: 2, RSTR: 0, S1: 0, REJ: 0, S3: 0, RSTO: 0, S0: 0, S2: 0, RSTOS0: 0, SH: 0, OTH: 0 },
satan. :{ SF: 419, RSTR: 0, S1: 0, REJ: 1134, S3: 0, RSTO: 0, S0: 79, S2: 0, RSTOS0: 1, SH: 0, OTH: 0 },
xterm. :{ SF: 13, RSTR: 0, S1: 0, REJ: 0, S3: 0, RSTO: 0, S0: 0, S2: 0, RSTOS0: 0, SH: 0, OTH: 0 },
mscan. :{ SF: 135, RSTR: 0, S1: 4, REJ: 354, S3: 0, RSTO: 379, S0: 181, S2: 0, RSTOS0: 0, SH: 0, OTH: 0 },
processtable. :{ SF: 475, RSTR: 3, S1: 0, REJ: 0, S3: 275, RSTO: 0, S0: 0, S2: 6, RSTOS0: 0, SH: 0, OTH: 0 },
ps. :{ SF: 16, RSTR: 0, S1: 0, REJ: 0, S3: 0, RSTO: 0, S0: 0, S2: 0, RSTOS0: 0, SH: 0, OTH: 0 },
nmap. :{ SF: 0, RSTR: 0, S1: 0, REJ: 0, S3: 0, RSTO: 0, S0: 0, S2: 0, RSTOS0: 0, SH: 84, OTH: 0 },
rootkit. :{ SF: 13, RSTR: 0, S1: 0, REJ: 0, S3: 0, RSTO: 0, S0: 0, S2: 0, RSTOS0: 0, SH: 0, OTH: 0 },
neptune. :{ SF: 0, RSTR: 0, S1: 0, REJ: 39592, S3: 0, RSTO: 974, S0: 17435, S2: 0, RSTOS0: 0, SH: 0, OTH: 0 },
loadmodule. :{ SF: 2, RSTR: 0, S1: 0, REJ: 0, S3: 0, RSTO: 0, S0: 0, S2: 0, RSTOS0: 0, SH: 0, OTH: 0 },
imap. :{ SF: 0, RSTR: 0, S1: 0, REJ: 0, S3: 0, RSTO: 1, S0: 0, S2: 0, RSTOS0: 0, SH: 0, OTH: 0 },
back. :{ SF: 1040, RSTR: 55, S1: 1, REJ: 0, S3: 0, RSTO: 0, S0: 0, S2: 2, RSTOS0: 0, SH: 0, OTH: 0 },
httptunnel. :{ SF: 23, RSTR: 2, S1: 0, REJ: 133, S3: 0, RSTO: 0, S0: 0, S2: 0, RSTOS0: 0, SH: 0, OTH: 0 },
worm. :{ SF: 2, RSTR: 0, S1: 0, REJ: 0, S3: 0, RSTO: 0, S0: 0, S2: 0, RSTOS0: 0, SH: 0, OTH: 0 },
mailbomb. :{ SF: 5000, RSTR: 0, S1: 0, REJ: 0, S3: 0, RSTO: 0, S0: 0, S2: 0, RSTOS0: 0, SH: 0, OTH: 0 },
ftp_write. :{ SF: 3, RSTR: 0, S1: 0, REJ: 0, S3: 0, RSTO: 0, S0: 0, S2: 0, RSTOS0: 0, SH: 0, OTH: 0 },
teardrop. :{ SF: 12, RSTR: 0, S1: 0, REJ: 0, S3: 0, RSTO: 0, S0: 0, S2: 0, RSTOS0: 0, SH: 0, OTH: 0 },
land. :{ SF: 0, RSTR: 0, S1: 0, REJ: 0, S3: 0, RSTO: 0, S0: 9, S2: 0, RSTOS0: 0, SH: 0, OTH: 0 },
sqlattack. :{ SF: 2, RSTR: 0, S1: 0, REJ: 0, S3: 0, RSTO: 0, S0: 0, S2: 0, RSTOS0: 0, SH: 0, OTH: 0 },
snmpguess. :{ SF: 2406, RSTR: 0, S1: 0, REJ: 0, S3: 0, RSTO: 0, S0: 0, S2: 0, RSTOS0: 0, SH: 0, OTH: 0 }};
prob(5|intrusion_type) = {
normal. : N(742.334, 1.17184e+009) [60593],
snmpgetattack. : N(105.042, 1.73621) [7741],
named. : N(18707.4, 1.38941e+009) [17],
xlock. : N(1.06637e+007, 4.90838e+014) [9],
smurf. : N(860.302, 58625.7) [164091],
ipsweep. : N(26.3072, 10060.6) [306],
multihop. : N(1283.22, 1.43879e+007) [18],
xsnoop. : N(775.75, 379727) [4],
sendmail. : N(1637.59, 4.69759e+006) [17],
guess_passwd. : N(42.9187, 1079.5) [4367],
saint. : N(3.06522, 57.1223) [736],
buffer_overflow.: N(1788.32, 1.69096e+006) [22],
portsweep. : N(0, 0) [354],
pod. : N(1416.83, 54501.6) [87],
apache2. : N(39031, 1.05421e+009) [794],
phf. : N(25.5, 1300.5) [2],
udpstorm. : N(0, 0) [2],
warezmaster. : N(94225.3, 1.78178e+010) [1602],
perl. : N(259, 2) [2],
satan. : N(0.295162, 1.12238) [1633],
xterm. : N(2953.38, 7.37616e+006) [13],
mscan. : N(2.22982, 60.5878) [1053],
processtable. : N(0.030303, 0.0294235) [759],
ps. : N(323.5, 658252) [16],
nmap. : N(0, 0) [84],
rootkit. : N(42101.4, 1.02458e+010) [13],
neptune. : N(0, 0) [58001],
loadmodule. : N(277, 0) [2],
imap. : N(1352, 0) [1],
back. : N(53941.4, 1.19074e+007) [1098],
httptunnel. : N(420.665, 1.43751e+007) [158],
worm. : N(4209, 0) [2],
mailbomb. : N(2599, 0) [5000],
ftp_write. : N(54.6667, 2305.33) [3],
teardrop. : N(28, 0) [12],
land. : N(0, 0) [9],
sqlattack. : N(398, 0) [2],
snmpguess. : N(44.9539, 5.60743) [2406] };
prob(6|intrusion_type) = {
normal. : N(3594.38, 1.31449e+009) [60593],
snmpgetattack. : N(143.511, 127.859) [7741],
named. : N(34414.5, 1.52701e+010) [17],
xlock. : N(63320.6, 5.41017e+009) [9],
smurf. : N(0, 0) [164091],
ipsweep. : N(0, 0) [306],
multihop. : N(4057.78, 1.6535e+008) [18],
xsnoop. : N(8417, 5.88539e+007) [4],
sendmail. : N(2387.06, 1.91754e+007) [17],
guess_passwd. : N(112.826, 14388.5) [4367],
saint. : N(3.64946, 3724.08) [736],
buffer_overflow.: N(19085.4, 2.16305e+009) [22],
portsweep. : N(0, 0) [354],
pod. : N(0, 0) [87],
apache2. : N(1.03778, 244.992) [794],
phf. : N(4185.5, 3.50368e+007) [2],
udpstorm. : N(0, 0) [2],
warezmaster. : N(376.092, 5.02203e+007) [1602],
perl. : N(2618, 98) [2],
satan. : N(0.234538, 0.17964) [1633],
xterm. : N(13247.9, 2.5046e+008) [13],
mscan. : N(42.0171, 17290.7) [1053],
processtable. : N(38.7273, 125.272) [759],
ps. : N(1622.63, 2.5099e+006) [16],
nmap. : N(0, 0) [84],
rootkit. : N(5463.85, 1.64546e+008) [13],
neptune. : N(0, 0) [58001],
loadmodule. : N(1088, 2) [2],
imap. : N(291, 0) [1],
back. : N(8209.14, 435531) [1098],
httptunnel. : N(340.329, 1.3758e+007) [158],
worm. : N(7895.5, 1104.5) [2],
mailbomb. : N(292.808, 6.10836) [5000],
ftp_write. : N(1108.67, 2.70451e+006) [3],
teardrop. : N(0, 0) [12],
land. : N(0, 0) [9],
sqlattack. : N(3881, 0) [2],
snmpguess. : N(1.76766, 77.1107) [2406] };
prob(7|intrusion_type) = {
normal. : N(0, 0) [60593],
snmpgetattack. : N(0, 0) [7741],
named. : N(0, 0) [17],
xlock. : N(0, 0) [9],
smurf. : N(0, 0) [164091],
ipsweep. : N(0, 0) [306],
multihop. : N(0, 0) [18],
xsnoop. : N(0, 0) [4],
sendmail. : N(0, 0) [17],
guess_passwd. : N(0, 0) [4367],
saint. : N(0, 0) [736],
buffer_overflow.: N(0, 0) [22],
portsweep. : N(0, 0) [354],
pod. : N(0, 0) [87],
apache2. : N(0, 0) [794],
phf. : N(0, 0) [2],
udpstorm. : N(0, 0) [2],
warezmaster. : N(0, 0) [1602],
perl. : N(0, 0) [2],
satan. : N(0, 0) [1633],
xterm. : N(0, 0) [13],
mscan. : N(0, 0) [1053],
processtable. : N(0, 0) [759],
ps. : N(0, 0) [16],
nmap. : N(0, 0) [84],
rootkit. : N(0, 0) [13],
neptune. : N(0, 0) [58001],
loadmodule. : N(0, 0) [2],
imap. : N(0, 0) [1],
back. : N(0, 0) [1098],
httptunnel. : N(0, 0) [158],
worm. : N(0, 0) [2],
mailbomb. : N(0, 0) [5000],
ftp_write. : N(0, 0) [3],
teardrop. : N(0, 0) [12],
land. : N(1, 0) [9],
sqlattack. : N(0, 0) [2],
snmpguess. : N(0, 0) [2406] };
prob(8|intrusion_type) = {
normal. : N(0.00211246, 0.00577188) [60593],
snmpgetattack. : N(0, 0) [7741],
named. : N(0, 0) [17],
xlock. : N(0, 0) [9],
smurf. : N(0, 0) [164091],
ipsweep. : N(0, 0) [306],
multihop. : N(0, 0) [18],
xsnoop. : N(0, 0) [4],
sendmail. : N(0, 0) [17],
guess_passwd. : N(0, 0) [4367],
saint. : N(0, 0) [736],
buffer_overflow.: N(0, 0) [22],
portsweep. : N(0, 0) [354],
pod. : N(0.931034, 0.0649559) [87],
apache2. : N(0, 0) [794],
phf. : N(0, 0) [2],
udpstorm. : N(0, 0) [2],
warezmaster. : N(0, 0) [1602],
perl. : N(0, 0) [2],
satan. : N(0, 0) [1633],
xterm. : N(0, 0) [13],
mscan. : N(0, 0) [1053],
processtable. : N(0, 0) [759],
ps. : N(0, 0) [16],
nmap. : N(0, 0) [84],
rootkit. : N(0, 0) [13],
neptune. : N(0, 0) [58001],
loadmodule. : N(0, 0) [2],
imap. : N(0, 0) [1],
back. : N(0, 0) [1098],
httptunnel. : N(0, 0) [158],
worm. : N(0, 0) [2],
mailbomb. : N(0, 0) [5000],
ftp_write. : N(0, 0) [3],
teardrop. : N(2.33333, 0.969697) [12],
land. : N(0, 0) [9],
sqlattack. : N(0, 0) [2],
snmpguess. : N(0, 0) [2406] };
prob(9|intrusion_type) = {
normal. : N(0, 0) [60593],
snmpgetattack. : N(0, 0) [7741],
named. : N(0, 0) [17],
xlock. : N(0, 0) [9],
smurf. : N(0, 0) [164091],
ipsweep. : N(0, 0) [306],
multihop. : N(0, 0) [18],
xsnoop. : N(0, 0) [4],
sendmail. : N(0, 0) [17],
guess_passwd. : N(0, 0) [4367],
saint. : N(0, 0) [736],
buffer_overflow.: N(0, 0) [22],
portsweep. : N(0, 0) [354],
pod. : N(0, 0) [87],
apache2. : N(0, 0) [794],
phf. : N(0, 0) [2],
udpstorm. : N(0, 0) [2],
warezmaster. : N(0, 0) [1602],
perl. : N(0, 0) [2],
satan. : N(0, 0) [1633],
xterm. : N(0.769231, 0.858974) [13],
mscan. : N(0, 0) [1053],
processtable. : N(0, 0) [759],
ps. : N(0, 0) [16],
nmap. : N(0, 0) [84],
rootkit. : N(0.230769, 0.692308) [13],
neptune. : N(0, 0) [58001],
loadmodule. : N(0, 0) [2],
imap. : N(0, 0) [1],
back. : N(0, 0) [1098],
httptunnel. : N(0, 0) [158],
worm. : N(0, 0) [2],
mailbomb. : N(0, 0) [5000],
ftp_write. : N(0.333333, 0.333333) [3],
teardrop. : N(0, 0) [12],
land. : N(0, 0) [9],
sqlattack. : N(1, 0) [2],
snmpguess. : N(0, 0) [2406] };
prob(10|intrusion_type) = {
normal. : N(0.018484, 0.378454) [60593],
snmpgetattack. : N(0, 0) [7741],
named. : N(0.235294, 0.441176) [17],
xlock. : N(0, 0) [9],
smurf. : N(0, 0) [164091],
ipsweep. : N(0, 0) [306],
multihop. : N(1.22222, 12.5359) [18],
xsnoop. : N(0.5, 0.333333) [4],
sendmail. : N(0, 0) [17],
guess_passwd. : N(0, 0) [4367],
saint. : N(0, 0) [736],
buffer_overflow.: N(3.31818, 10.3225) [22],
portsweep. : N(0, 0) [354],
pod. : N(0, 0) [87],
apache2. : N(0, 0) [794],
phf. : N(1, 2) [2],
udpstorm. : N(0, 0) [2],
warezmaster. : N(0.710362, 0.905439) [1602],
perl. : N(0, 0) [2],
satan. : N(0, 0) [1633],
xterm. : N(1.53846, 2.60256) [13],
mscan. : N(0, 0) [1053],
processtable. : N(0, 0) [759],
ps. : N(0.875, 1.05) [16],
nmap. : N(0, 0) [84],
rootkit. : N(1.46154, 4.60256) [13],
neptune. : N(0, 0) [58001],
loadmodule. : N(2, 0) [2],
imap. : N(0, 0) [1],
back. : N(1.949, 0.06303) [1098],
httptunnel. : N(0.0253165, 0.0630493) [158],
worm. : N(0, 0) [2],
mailbomb. : N(0, 0) [5000],
ftp_write. : N(0.333333, 0.333333) [3],
teardrop. : N(0, 0) [12],
land. : N(0, 0) [9],
sqlattack. : N(1, 0) [2],
snmpguess. : N(0, 0) [2406] };
prob(11|intrusion_type) = {
normal. : N(0.000181539, 0.000478578) [60593],
snmpgetattack. : N(0, 0) [7741],
named. : N(0, 0) [17],
xlock. : N(0.222222, 0.444444) [9],
smurf. : N(0, 0) [164091],
ipsweep. : N(0, 0) [306],
multihop. : N(0.0555556, 0.0555556) [18],
xsnoop. : N(0, 0) [4],
sendmail. : N(0.470588, 1.76471) [17],
guess_passwd. : N(0.162583, 0.136181) [4367],
saint. : N(0, 0) [736],
buffer_overflow.: N(0.0909091, 0.0865801) [22],
portsweep. : N(0, 0) [354],
pod. : N(0, 0) [87],
apache2. : N(0, 0) [794],
phf. : N(0, 0) [2],
udpstorm. : N(0, 0) [2],
warezmaster. : N(0, 0) [1602],
perl. : N(0, 0) [2],
satan. : N(0, 0) [1633],
xterm. : N(0, 0) [13],
mscan. : N(0, 0) [1053],
processtable. : N(0, 0) [759],
ps. : N(0.0625, 0.0625) [16],
nmap. : N(0, 0) [84],
rootkit. : N(0, 0) [13],
neptune. : N(0, 0) [58001],
loadmodule. : N(0, 0) [2],
imap. : N(0, 0) [1],
back. : N(0, 0) [1098],
httptunnel. : N(0, 0) [158],
worm. : N(0, 0) [2],
mailbomb. : N(0, 0) [5000],
ftp_write. : N(0, 0) [3],
teardrop. : N(0, 0) [12],
land. : N(0, 0) [9],
sqlattack. : N(0, 0) [2],
snmpguess. : N(0, 0) [2406] };
prob(12|intrusion_type) = {
normal. : N(0.703283, 0.20868) [60593],
snmpgetattack. : N(0, 0) [7741],
named. : N(0.117647, 0.110294) [17],
xlock. : N(0.222222, 0.194444) [9],
smurf. : N(0, 0) [164091],
ipsweep. : N(0, 0) [306],
multihop. : N(0.333333, 0.235294) [18],
xsnoop. : N(0.5, 0.333333) [4],
sendmail. : N(0.529412, 0.264706) [17],
guess_passwd. : N(0.836501, 0.136798) [4367],
saint. : N(0.0013587, 0.0013587) [736],
buffer_overflow.: N(0.818182, 0.155844) [22],
portsweep. : N(0.00282486, 0.00282486) [354],
pod. : N(0, 0) [87],
apache2. : N(0.654912, 0.226287) [794],
phf. : N(0.5, 0.5) [2],
udpstorm. : N(0, 0) [2],
warezmaster. : N(0.335206, 0.222982) [1602],
perl. : N(1, 0) [2],
satan. : N(0.00122474, 0.00122399) [1633],
xterm. : N(0.769231, 0.192308) [13],
mscan. : N(0.131054, 0.113987) [1053],
processtable. : N(0, 0) [759],
ps. : N(0.75, 0.2) [16],
nmap. : N(0, 0) [84],
rootkit. : N(0.538462, 0.269231) [13],
neptune. : N(0, 0) [58001],
loadmodule. : N(1, 0) [2],
imap. : N(0, 0) [1],
back. : N(1, 0) [1098],
httptunnel. : N(0.0126582, 0.0125776) [158],
worm. : N(1, 0) [2],
mailbomb. : N(1, 0) [5000],
ftp_write. : N(0.666667, 0.333333) [3],
teardrop. : N(0, 0) [12],
land. : N(0, 0) [9],
sqlattack. : N(1, 0) [2],
snmpguess. : N(0, 0) [2406] };
prob(13|intrusion_type) = {
normal. : N(0.0313403, 19.0241) [60593],
snmpgetattack. : N(0, 0) [7741],
named. : N(0, 0) [17],
xlock. : N(1.22222, 10.9444) [9],
smurf. : N(0, 0) [164091],
ipsweep. : N(0, 0) [306],
multihop. : N(0.944444, 11.1144) [18],
xsnoop. : N(0, 0) [4],
sendmail. : N(0, 0) [17],
guess_passwd. : N(0, 0) [4367],
saint. : N(0, 0) [736],
buffer_overflow.: N(6.86364, 151.076) [22],
portsweep. : N(0, 0) [354],
pod. : N(0, 0) [87],
apache2. : N(0, 0) [794],
phf. : N(0, 0) [2],
udpstorm. : N(0, 0) [2],
warezmaster. : N(0, 0) [1602],
perl. : N(0, 0) [2],
satan. : N(0, 0) [1633],
xterm. : N(18.6923, 2014.23) [13],
mscan. : N(0, 0) [1053],
processtable. : N(0, 0) [759],
ps. : N(0.6875, 3.9625) [16],
nmap. : N(0, 0) [84],
rootkit. : N(8.15385, 398.808) [13],
neptune. : N(0, 0) [58001],
loadmodule. : N(1, 0) [2],
imap. : N(0, 0) [1],
back. : N(0.954463, 0.0435033) [1098],
httptunnel. : N(0.056962, 0.512658) [158],
worm. : N(0, 0) [2],
mailbomb. : N(0, 0) [5000],
ftp_write. : N(0, 0) [3],
teardrop. : N(0, 0) [12],
land. : N(0, 0) [9],
sqlattack. : N(0, 0) [2],
snmpguess. : N(0, 0) [2406] };
prob(14|intrusion_type) = {
normal. : N(0.000412589, 0.000412425) [60593],
snmpgetattack. : N(0, 0) [7741],
named. : N(0, 0) [17],
xlock. : N(0, 0) [9],
smurf. : N(0, 0) [164091],
ipsweep. : N(0, 0) [306],
multihop. : N(0.0555556, 0.0555556) [18],
xsnoop. : N(0.5, 0.333333) [4],
sendmail. : N(0.235294, 0.191176) [17],
guess_passwd. : N(0, 0) [4367],
saint. : N(0, 0) [736],
buffer_overflow.: N(0.590909, 0.253247) [22],
portsweep. : N(0, 0) [354],
pod. : N(0, 0) [87],
apache2. : N(0, 0) [794],
phf. : N(0.5, 0.5) [2],
udpstorm. : N(0, 0) [2],
warezmaster. : N(0, 0) [1602],
perl. : N(0.5, 0.5) [2],
satan. : N(0, 0) [1633],
xterm. : N(0.538462, 0.269231) [13],
mscan. : N(0, 0) [1053],
processtable. : N(0, 0) [759],
ps. : N(0.0625, 0.0625) [16],
nmap. : N(0, 0) [84],
rootkit. : N(0.153846, 0.141026) [13],
neptune. : N(0, 0) [58001],
loadmodule. : N(1, 0) [2],
imap. : N(0, 0) [1],
back. : N(0, 0) [1098],
httptunnel. : N(0.00632911, 0.00632911) [158],
worm. : N(0, 0) [2],
mailbomb. : N(0, 0) [5000],
ftp_write. : N(0, 0) [3],
teardrop. : N(0, 0) [12],
land. : N(0, 0) [9],
sqlattack. : N(1, 0) [2],
snmpguess. : N(0, 0) [2406] };
prob(15|intrusion_type) = {
normal. : N(9.90213e-005, 0.000165028) [60593],
snmpgetattack. : N(0, 0) [7741],
named. : N(0, 0) [17],
xlock. : N(0, 0) [9],
smurf. : N(0, 0) [164091],
ipsweep. : N(0, 0) [306],
multihop. : N(0, 0) [18],
xsnoop. : N(0, 0) [4],
sendmail. : N(0, 0) [17],
guess_passwd. : N(0, 0) [4367],
saint. : N(0, 0) [736],
buffer_overflow.: N(0, 0) [22],
portsweep. : N(0, 0) [354],
pod. : N(0, 0) [87],
apache2. : N(0, 0) [794],
phf. : N(0, 0) [2],
udpstorm. : N(0, 0) [2],
warezmaster. : N(0, 0) [1602],
perl. : N(0, 0) [2],
satan. : N(0, 0) [1633],
xterm. : N(0, 0) [13],
mscan. : N(0, 0) [1053],
processtable. : N(0, 0) [759],
ps. : N(0, 0) [16],
nmap. : N(0, 0) [84],
rootkit. : N(0, 0) [13],
neptune. : N(0, 0) [58001],
loadmodule. : N(0, 0) [2],
imap. : N(0, 0) [1],
back. : N(0, 0) [1098],
httptunnel. : N(0.00632911, 0.00632911) [158],
worm. : N(0, 0) [2],
mailbomb. : N(0, 0) [5000],
ftp_write. : N(0, 0) [3],
teardrop. : N(0, 0) [12],
land. : N(0, 0) [9],
sqlattack. : N(0, 0) [2],
snmpguess. : N(0, 0) [2406] };
prob(16|intrusion_type) = {
normal. : N(0.0329246, 23.0992) [60593],
snmpgetattack. : N(0, 0) [7741],
named. : N(0, 0) [17],
xlock. : N(1, 7) [9],
smurf. : N(0, 0) [164091],
ipsweep. : N(0, 0) [306],
multihop. : N(1.66667, 37.7647) [18],
xsnoop. : N(2, 6) [4],
sendmail. : N(0.941176, 1.30882) [17],
guess_passwd. : N(0, 0) [4367],
saint. : N(0, 0) [736],
buffer_overflow.: N(4.27273, 125.732) [22],
portsweep. : N(0, 0) [354],
pod. : N(0, 0) [87],
apache2. : N(0, 0) [794],
phf. : N(0, 0) [2],
udpstorm. : N(0, 0) [2],
warezmaster. : N(0.00124844, 0.00124766) [1602],
perl. : N(1, 2) [2],
satan. : N(0, 0) [1633],
xterm. : N(17.1538, 2249.14) [13],
mscan. : N(0, 0) [1053],
processtable. : N(0, 0) [759],
ps. : N(0.625, 3.05) [16],
nmap. : N(0, 0) [84],
rootkit. : N(15.0769, 1722.58) [13],
neptune. : N(0, 0) [58001],
loadmodule. : N(0, 0) [2],
imap. : N(0, 0) [1],
back. : N(0, 0) [1098],
httptunnel. : N(0.0443038, 0.310127) [158],
worm. : N(0, 0) [2],
mailbomb. : N(0, 0) [5000],
ftp_write. : N(0, 0) [3],
teardrop. : N(0, 0) [12],
land. : N(0, 0) [9],
sqlattack. : N(4, 0) [2],
snmpguess. : N(0, 0) [2406] };
prob(17|intrusion_type) = {
normal. : N(0.00339973, 0.186119) [60593],
snmpgetattack. : N(0, 0) [7741],
named. : N(0, 0) [17],
xlock. : N(0, 0) [9],
smurf. : N(0, 0) [164091],
ipsweep. : N(0, 0) [306],
multihop. : N(0.5, 1.79412) [18],
xsnoop. : N(0.25, 0.25) [4],
sendmail. : N(0, 0) [17],
guess_passwd. : N(0, 0) [4367],
saint. : N(0, 0) [736],
buffer_overflow.: N(1.31818, 3.75108) [22],
portsweep. : N(0, 0) [354],
pod. : N(0, 0) [87],
apache2. : N(0, 0) [794],
phf. : N(0, 0) [2],
udpstorm. : N(0, 0) [2],
warezmaster. : N(0.00187266, 0.00561798) [1602],
perl. : N(2, 0) [2],
satan. : N(0, 0) [1633],
xterm. : N(0.692308, 1.73077) [13],
mscan. : N(0, 0) [1053],
processtable. : N(0, 0) [759],
ps. : N(0.875, 0.783333) [16],
nmap. : N(0, 0) [84],
rootkit. : N(0.615385, 3.75641) [13],
neptune. : N(0, 0) [58001],
loadmodule. : N(4, 0) [2],
imap. : N(0, 0) [1],
back. : N(0, 0) [1098],
httptunnel. : N(0, 0) [158],
worm. : N(0, 0) [2],
mailbomb. : N(0, 0) [5000],
ftp_write. : N(0.333333, 0.333333) [3],
teardrop. : N(0, 0) [12],
land. : N(0, 0) [9],
sqlattack. : N(3, 0) [2],
snmpguess. : N(0, 0) [2406] };
prob(18|intrusion_type) = {
normal. : N(0, 0) [60593],
snmpgetattack. : N(0, 0) [7741],
named. : N(0, 0) [17],
xlock. : N(0, 0) [9],
smurf. : N(0, 0) [164091],
ipsweep. : N(0, 0) [306],
multihop. : N(0.111111, 0.222222) [18],
xsnoop. : N(0.25, 0.25) [4],
sendmail. : N(0, 0) [17],
guess_passwd. : N(0, 0) [4367],
saint. : N(0, 0) [736],
buffer_overflow.: N(0.0909091, 0.0865801) [22],
portsweep. : N(0, 0) [354],
pod. : N(0, 0) [87],
apache2. : N(0, 0) [794],
phf. : N(0, 0) [2],
udpstorm. : N(0, 0) [2],
warezmaster. : N(0, 0) [1602],
perl. : N(1, 0) [2],
satan. : N(0, 0) [1633],
xterm. : N(0.230769, 0.192308) [13],
mscan. : N(0, 0) [1053],
processtable. : N(0, 0) [759],
ps. : N(0.25, 0.2) [16],
nmap. : N(0, 0) [84],
rootkit. : N(0.384615, 1.92308) [13],
neptune. : N(0, 0) [58001],
loadmodule. : N(2, 0) [2],
imap. : N(0, 0) [1],
back. : N(0, 0) [1098],
httptunnel. : N(0.00632911, 0.00632911) [158],
worm. : N(0, 0) [2],
mailbomb. : N(0, 0) [5000],
ftp_write. : N(0, 0) [3],
teardrop. : N(0, 0) [12],
land. : N(0, 0) [9],
sqlattack. : N(1, 0) [2],
snmpguess. : N(0, 0) [2406] };
prob(19|intrusion_type) = {
normal. : N(0.00354826, 0.00376679) [60593],
snmpgetattack. : N(0, 0) [7741],
named. : N(0, 0) [17],
xlock. : N(0.111111, 0.111111) [9],
smurf. : N(0, 0) [164091],
ipsweep. : N(0, 0) [306],
multihop. : N(0.222222, 0.888889) [18],
xsnoop. : N(0.25, 0.25) [4],
sendmail. : N(0.352941, 0.242647) [17],
guess_passwd. : N(0, 0) [4367],
saint. : N(0, 0) [736],
buffer_overflow.: N(0.181818, 0.251082) [22],
portsweep. : N(0, 0) [354],
pod. : N(0, 0) [87],
apache2. : N(0, 0) [794],
phf. : N(0.5, 0.5) [2],
udpstorm. : N(0, 0) [2],
warezmaster. : N(0, 0) [1602],
perl. : N(0, 0) [2],
satan. : N(0, 0) [1633],
xterm. : N(0.307692, 0.397436) [13],
mscan. : N(0, 0) [1053],
processtable. : N(0, 0) [759],
ps. : N(0.0625, 0.0625) [16],
nmap. : N(0, 0) [84],
rootkit. : N(0, 0) [13],
neptune. : N(0, 0) [58001],
loadmodule. : N(0, 0) [2],
imap. : N(0, 0) [1],
back. : N(0, 0) [1098],
httptunnel. : N(0, 0) [158],
worm. : N(0, 0) [2],
mailbomb. : N(0, 0) [5000],
ftp_write. : N(0.333333, 0.333333) [3],
teardrop. : N(0, 0) [12],
land. : N(0, 0) [9],
sqlattack. : N(1, 0) [2],
snmpguess. : N(0, 0) [2406] };
prob(20|intrusion_type) = {
normal. : N(0, 0) [60593],
snmpgetattack. : N(0, 0) [7741],
named. : N(0, 0) [17],
xlock. : N(0, 0) [9],
smurf. : N(0, 0) [164091],
ipsweep. : N(0, 0) [306],
multihop. : N(0, 0) [18],
xsnoop. : N(0, 0) [4],
sendmail. : N(0, 0) [17],
guess_passwd. : N(0, 0) [4367],
saint. : N(0, 0) [736],
buffer_overflow.: N(0, 0) [22],
portsweep. : N(0, 0) [354],
pod. : N(0, 0) [87],
apache2. : N(0, 0) [794],
phf. : N(0, 0) [2],
udpstorm. : N(0, 0) [2],
warezmaster. : N(0, 0) [1602],
perl. : N(0, 0) [2],
satan. : N(0, 0) [1633],
xterm. : N(0, 0) [13],
mscan. : N(0, 0) [1053],
processtable. : N(0, 0) [759],
ps. : N(0, 0) [16],
nmap. : N(0, 0) [84],
rootkit. : N(0, 0) [13],
neptune. : N(0, 0) [58001],
loadmodule. : N(0, 0) [2],
imap. : N(0, 0) [1],
back. : N(0, 0) [1098],
httptunnel. : N(0, 0) [158],
worm. : N(0, 0) [2],
mailbomb. : N(0, 0) [5000],
ftp_write. : N(0, 0) [3],
teardrop. : N(0, 0) [12],
land. : N(0, 0) [9],
sqlattack. : N(0, 0) [2],
snmpguess. : N(0, 0) [2406] };
prob(21|intrusion_type) = {
normal. : N(1.65036e-005, 1.65036e-005) [60593],
snmpgetattack. : N(0, 0) [7741],
named. : N(0.117647, 0.110294) [17],
xlock. : N(0, 0) [9],
smurf. : N(0, 0) [164091],
ipsweep. : N(0, 0) [306],
multihop. : N(0.111111, 0.104575) [18],
xsnoop. : N(0.5, 0.333333) [4],
sendmail. : N(0, 0) [17],
guess_passwd. : N(0, 0) [4367],
saint. : N(0, 0) [736],
buffer_overflow.: N(0, 0) [22],
portsweep. : N(0, 0) [354],
pod. : N(0, 0) [87],
apache2. : N(0, 0) [794],
phf. : N(0, 0) [2],
udpstorm. : N(0, 0) [2],
warezmaster. : N(0.00062422, 0.00062422) [1602],
perl. : N(0, 0) [2],
satan. : N(0, 0) [1633],
xterm. : N(0.153846, 0.141026) [13],
mscan. : N(0, 0) [1053],
processtable. : N(0, 0) [759],
ps. : N(0.0625, 0.0625) [16],
nmap. : N(0, 0) [84],
rootkit. : N(0.0769231, 0.0769231) [13],
neptune. : N(0, 0) [58001],
loadmodule. : N(0, 0) [2],
imap. : N(0, 0) [1],
back. : N(0, 0) [1098],
httptunnel. : N(0, 0) [158],
worm. : N(0, 0) [2],
mailbomb. : N(0, 0) [5000],
ftp_write. : N(0, 0) [3],
teardrop. : N(0, 0) [12],
land. : N(0, 0) [9],
sqlattack. : N(0, 0) [2],
snmpguess. : N(0, 0) [2406] };
prob(22|intrusion_type) = {
normal. : N(0.00191441, 0.00191078) [60593],
snmpgetattack. : N(0, 0) [7741],
named. : N(0, 0) [17],
xlock. : N(0, 0) [9],
smurf. : N(0, 0) [164091],
ipsweep. : N(0, 0) [306],
multihop. : N(0.166667, 0.147059) [18],
xsnoop. : N(0, 0) [4],
sendmail. : N(0, 0) [17],
guess_passwd. : N(0.022899, 0.0223798) [4367],
saint. : N(0, 0) [736],
buffer_overflow.: N(0, 0) [22],
portsweep. : N(0, 0) [354],
pod. : N(0, 0) [87],
apache2. : N(0, 0) [794],
phf. : N(0, 0) [2],
udpstorm. : N(0, 0) [2],
warezmaster. : N(0.333333, 0.222361) [1602],
perl. : N(0, 0) [2],
satan. : N(0, 0) [1633],
xterm. : N(0, 0) [13],
mscan. : N(0, 0) [1053],
processtable. : N(0, 0) [759],
ps. : N(0, 0) [16],
nmap. : N(0, 0) [84],
rootkit. : N(0, 0) [13],
neptune. : N(0, 0) [58001],
loadmodule. : N(0, 0) [2],
imap. : N(0, 0) [1],
back. : N(0, 0) [1098],
httptunnel. : N(0, 0) [158],
worm. : N(0, 0) [2],
mailbomb. : N(0, 0) [5000],
ftp_write. : N(0.333333, 0.333333) [3],
teardrop. : N(0, 0) [12],
land. : N(0, 0) [9],
sqlattack. : N(0, 0) [2],
snmpguess. : N(0, 0) [2406] };
prob(23|intrusion_type) = {
normal. : N(14.2437, 2918.12) [60593],
snmpgetattack. : N(1.4471, 0.309249) [7741],
named. : N(1.05882, 0.0588235) [17],
xlock. : N(1, 0) [9],
smurf. : N(435.974, 22368.5) [164091],
ipsweep. : N(6.00327, 2533.25) [306],
multihop. : N(3.55556, 32.4967) [18],
xsnoop. : N(1, 0) [4],
sendmail. : N(1.05882, 0.0588235) [17],
guess_passwd. : N(1.03389, 0.0597765) [4367],
saint. : N(380.105, 37848.7) [736],
buffer_overflow.: N(1.22727, 0.374459) [22],
portsweep. : N(4.53107, 292.544) [354],
pod. : N(1.03448, 0.0569366) [87],
apache2. : N(43.1083, 962.389) [794],
phf. : N(1, 0) [2],
udpstorm. : N(1, 0) [2],
warezmaster. : N(1.35518, 0.249158) [1602],
perl. : N(1, 0) [2],
satan. : N(400.743, 26954.5) [1633],
xterm. : N(1, 0) [13],
mscan. : N(2.22317, 1.55376) [1053],
processtable. : N(1.02767, 0.0665158) [759],
ps. : N(1, 0) [16],
nmap. : N(1.0119, 0.0119048) [84],
rootkit. : N(1, 0) [13],
neptune. : N(177.961, 4297.84) [58001],
loadmodule. : N(1, 0) [2],
imap. : N(1, 0) [1],
back. : N(3.72678, 0.698298) [1098],
httptunnel. : N(1.24051, 0.285737) [158],
worm. : N(1, 0) [2],
mailbomb. : N(2.5612, 0.329921) [5000],
ftp_write. : N(1, 0) [3],
teardrop. : N(29.75, 1019.48) [12],
land. : N(1, 0) [9],
sqlattack. : N(1, 0) [2],
snmpguess. : N(3.57855, 59.873) [2406] };
prob(24|intrusion_type) = {
normal. : N(16.8389, 3018.34) [60593],
snmpgetattack. : N(1.44167, 0.301927) [7741],
named. : N(1.05882, 0.0588235) [17],
xlock. : N(1, 0) [9],
smurf. : N(435.975, 22368.7) [164091],
ipsweep. : N(9.93791, 2607.7) [306],
multihop. : N(3.44444, 32.6144) [18],
xsnoop. : N(1, 0) [4],
sendmail. : N(1.11765, 0.235294) [17],
guess_passwd. : N(1.02198, 0.0224209) [4367],
saint. : N(9.17799, 440.359) [736],
buffer_overflow.: N(1.22727, 0.374459) [22],
portsweep. : N(1, 0) [354],
pod. : N(2.70115, 0.491045) [87],
apache2. : N(43.1285, 961.012) [794],
phf. : N(1, 0) [2],
udpstorm. : N(1, 0) [2],
warezmaster. : N(1.34332, 0.243082) [1602],
perl. : N(1, 0) [2],
satan. : N(1.03001, 0.25829) [1633],
xterm. : N(1.07692, 0.0769231) [13],
mscan. : N(6.44634, 32.9869) [1053],
processtable. : N(1.18445, 2.88414) [759],
ps. : N(1, 0) [16],
nmap. : N(1, 0) [84],
rootkit. : N(1, 0) [13],
neptune. : N(10.5608, 54.1055) [58001],
loadmodule. : N(1, 0) [2],
imap. : N(1, 0) [1],
back. : N(5.52459, 28.6234) [1098],
httptunnel. : N(1.07595, 0.0706281) [158],
worm. : N(1, 0) [2],
mailbomb. : N(2.4904, 0.253559) [5000],
ftp_write. : N(1, 0) [3],
teardrop. : N(29.75, 1019.48) [12],
land. : N(1.88889, 0.361111) [9],
sqlattack. : N(1, 0) [2],
snmpguess. : N(3.57648, 59.8717) [2406] };
prob(25|intrusion_type) = {
normal. : N(0.000813955, 0.000383147) [60593],
snmpgetattack. : N(0, 0) [7741],
named. : N(0, 0) [17],
xlock. : N(0, 0) [9],
smurf. : N(0, 0) [164091],
ipsweep. : N(0, 0) [306],
multihop. : N(0, 0) [18],
xsnoop. : N(0.25, 0.25) [4],
sendmail. : N(0, 0) [17],
guess_passwd. : N(0.000915961, 0.000915331) [4367],
saint. : N(0.0453804, 0.000856998) [736],
buffer_overflow.: N(0, 0) [22],
portsweep. : N(0.00175141, 0.000713638) [354],
pod. : N(0, 0) [87],
apache2. : N(0.317267, 0.184998) [794],
phf. : N(0, 0) [2],
udpstorm. : N(0, 0) [2],
warezmaster. : N(0.00218477, 0.0017129) [1602],
perl. : N(0, 0) [2],
satan. : N(0.0482119, 0.0032332) [1633],
xterm. : N(0, 0) [13],
mscan. : N(0.174492, 0.142422) [1053],
processtable. : N(0.366271, 0.230444) [759],
ps. : N(0, 0) [16],
nmap. : N(1, 0) [84],
rootkit. : N(0, 0) [13],
neptune. : N(0.300642, 0.207568) [58001],
loadmodule. : N(0, 0) [2],
imap. : N(0, 0) [1],
back. : N(0.00265027, 0.00081822) [1098],
httptunnel. : N(0, 0) [158],
worm. : N(0, 0) [2],
mailbomb. : N(0, 0) [5000],
ftp_write. : N(0, 0) [3],
teardrop. : N(0, 0) [12],
land. : N(1, 0) [9],
sqlattack. : N(0, 0) [2],
snmpguess. : N(0, 0) [2406] };
prob(26|intrusion_type) = {
normal. : N(0.000894493, 0.000346945) [60593],
snmpgetattack. : N(0, 0) [7741],
named. : N(0, 0) [17],
xlock. : N(0, 0) [9],
smurf. : N(0, 0) [164091],
ipsweep. : N(0, 0) [306],
multihop. : N(0, 0) [18],
xsnoop. : N(0.25, 0.25) [4],
sendmail. : N(0, 0) [17],
guess_passwd. : N(0.000915961, 0.000915331) [4367],
saint. : N(0.0475543, 0.0453546) [736],
buffer_overflow.: N(0, 0) [22],
portsweep. : N(0, 0) [354],
pod. : N(0, 0) [87],
apache2. : N(0.317267, 0.184998) [794],
phf. : N(0, 0) [2],
udpstorm. : N(0, 0) [2],
warezmaster. : N(0.00187266, 0.00155802) [1602],
perl. : N(0, 0) [2],
satan. : N(0.0483772, 0.0460651) [1633],
xterm. : N(0, 0) [13],
mscan. : N(0.166933, 0.108697) [1053],
processtable. : N(0.371568, 0.231665) [759],
ps. : N(0, 0) [16],
nmap. : N(1, 0) [84],
rootkit. : N(0, 0) [13],
neptune. : N(0.300498, 0.208881) [58001],
loadmodule. : N(0, 0) [2],
imap. : N(0, 0) [1],
back. : N(0.00246812, 0.000750785) [1098],
httptunnel. : N(0, 0) [158],
worm. : N(0, 0) [2],
mailbomb. : N(0, 0) [5000],
ftp_write. : N(0, 0) [3],
teardrop. : N(0, 0) [12],
land. : N(1, 0) [9],
sqlattack. : N(0, 0) [2],
snmpguess. : N(0, 0) [2406] };
prob(27|intrusion_type) = {
normal. : N(0.00207681, 0.00204576) [60593],
snmpgetattack. : N(0, 0) [7741],
named. : N(0.235294, 0.191176) [17],
xlock. : N(0, 0) [9],
smurf. : N(0, 0) [164091],
ipsweep. : N(0, 0) [306],
multihop. : N(0, 0) [18],
xsnoop. : N(0, 0) [4],
sendmail. : N(0, 0) [17],
guess_passwd. : N(0.00809022, 0.00728884) [4367],
saint. : N(0.768424, 0.132258) [736],
buffer_overflow.: N(0, 0) [22],
portsweep. : N(0.945424, 0.0348266) [354],
pod. : N(0, 0) [87],
apache2. : N(0.674018, 0.184784) [794],
phf. : N(0.5, 0.5) [2],
udpstorm. : N(0, 0) [2],
warezmaster. : N(0.00124844, 0.00062305) [1602],
perl. : N(0, 0) [2],
satan. : N(0.694764, 0.167407) [1633],
xterm. : N(0, 0) [13],
mscan. : N(0.717056, 0.154791) [1053],
processtable. : N(0.011726, 0.0081077) [759],
ps. : N(0, 0) [16],
nmap. : N(0, 0) [84],
rootkit. : N(0, 0) [13],
neptune. : N(0.699353, 0.207566) [58001],
loadmodule. : N(0, 0) [2],
imap. : N(1, 0) [1],
back. : N(0.0531512, 0.0305875) [1098],
httptunnel. : N(0.798481, 0.129231) [158],
worm. : N(0, 0) [2],
mailbomb. : N(0.019474, 0.00527504) [5000],
ftp_write. : N(0, 0) [3],
teardrop. : N(0, 0) [12],
land. : N(0, 0) [9],
sqlattack. : N(0, 0) [2],
snmpguess. : N(0, 0) [2406] };
prob(28|intrusion_type) = {
normal. : N(0.00232354, 0.0020704) [60593],
snmpgetattack. : N(0, 0) [7741],
named. : N(0.235294, 0.191176) [17],
xlock. : N(0, 0) [9],
smurf. : N(0, 0) [164091],
ipsweep. : N(0, 0) [306],
multihop. : N(0, 0) [18],
xsnoop. : N(0, 0) [4],
sendmail. : N(0, 0) [17],
guess_passwd. : N(0.00705977, 0.00678911) [4367],
saint. : N(0.766304, 0.179326) [736],
buffer_overflow.: N(0, 0) [22],
portsweep. : N(0.988701, 0.0112034) [354],
pod. : N(0, 0) [87],
apache2. : N(0.674018, 0.184784) [794],
phf. : N(0.5, 0.5) [2],
udpstorm. : N(0, 0) [2],
warezmaster. : N(0, 0) [1602],
perl. : N(0, 0) [2],
satan. : N(0.69504, 0.212089) [1633],
xterm. : N(0, 0) [13],
mscan. : N(0.678091, 0.136564) [1053],
processtable. : N(0.0130567, 0.00914025) [759],
ps. : N(0, 0) [16],
nmap. : N(0, 0) [84],
rootkit. : N(0, 0) [13],
neptune. : N(0.699447, 0.208892) [58001],
loadmodule. : N(0, 0) [2],
imap. : N(1, 0) [1],
back. : N(0.0480692, 0.0259706) [1098],
httptunnel. : N(0.860759, 0.117431) [158],
worm. : N(0, 0) [2],
mailbomb. : N(0, 0) [5000],
ftp_write. : N(0, 0) [3],
teardrop. : N(0, 0) [12],
land. : N(0, 0) [9],
sqlattack. : N(0, 0) [2],
snmpguess. : N(0, 0) [2406] };
prob(29|intrusion_type) = {
normal. : N(0.99437, 0.00351498) [60593],
snmpgetattack. : N(0.997885, 0.000958409) [7741],
named. : N(1, 0) [17],
xlock. : N(1, 0) [9],
smurf. : N(1, 0) [164091],
ipsweep. : N(1, 0) [306],
multihop. : N(0.958333, 0.03125) [18],
xsnoop. : N(1, 0) [4],
sendmail. : N(0.970588, 0.0147059) [17],
guess_passwd. : N(0.994248, 0.00306777) [4367],
saint. : N(0.154321, 0.125316) [736],
buffer_overflow.: N(1, 0) [22],
portsweep. : N(0.779294, 0.0907018) [354],
pod. : N(0.996207, 0.00125172) [87],
apache2. : N(1, 0) [794],
phf. : N(1, 0) [2],
udpstorm. : N(1, 0) [2],
warezmaster. : N(0.991149, 0.00497719) [1602],
perl. : N(1, 0) [2],
satan. : N(0.00610533, 0.00179365) [1633],
xterm. : N(1, 0) [13],
mscan. : N(0.644112, 0.0983029) [1053],
processtable. : N(0.992029, 0.00373915) [759],
ps. : N(1, 0) [16],
nmap. : N(0.994048, 0.00297619) [84],
rootkit. : N(1, 0) [13],
neptune. : N(0.0669409, 0.00377997) [58001],
loadmodule. : N(1, 0) [2],
imap. : N(1, 0) [1],
back. : N(1, 0) [1098],
httptunnel. : N(0.930316, 0.0327216) [158],
worm. : N(1, 0) [2],
mailbomb. : N(0.97941, 0.00558147) [5000],
ftp_write. : N(1, 0) [3],
teardrop. : N(1, 0) [12],
land. : N(1, 0) [9],
sqlattack. : N(1, 0) [2],
snmpguess. : N(0.999364, 0.000165458) [2406] };
prob(30|intrusion_type) = {
normal. : N(0.00782533, 0.00651984) [60593],
snmpgetattack. : N(0.00394781, 0.00332165) [7741],
named. : N(0, 0) [17],
xlock. : N(0, 0) [9],
smurf. : N(0, 0) [164091],
ipsweep. : N(0, 0) [306],
multihop. : N(0.0277778, 0.0138889) [18],
xsnoop. : N(0, 0) [4],
sendmail. : N(0.0588235, 0.0588235) [17],
guess_passwd. : N(0.010648, 0.0104512) [4367],
saint. : N(0.835584, 0.130455) [736],
buffer_overflow.: N(0, 0) [22],
portsweep. : N(0.346554, 0.208763) [354],
pod. : N(0.00770115, 0.00515977) [87],
apache2. : N(0, 0) [794],
phf. : N(0, 0) [2],
udpstorm. : N(0, 0) [2],
warezmaster. : N(0.0135456, 0.0116771) [1602],
perl. : N(0, 0) [2],
satan. : N(0.966503, 0.0135391) [1633],
xterm. : N(0, 0) [13],
mscan. : N(0.548348, 0.221864) [1053],
processtable. : N(0.015415, 0.0142344) [759],
ps. : N(0, 0) [16],
nmap. : N(0.0119048, 0.0119048) [84],
rootkit. : N(0, 0) [13],
neptune. : N(0.067123, 0.000372876) [58001],
loadmodule. : N(0, 0) [2],
imap. : N(0, 0) [1],
back. : N(0, 0) [1098],
httptunnel. : N(0.119304, 0.0971059) [158],
worm. : N(0, 0) [2],
mailbomb. : N(0.04146, 0.0226724) [5000],
ftp_write. : N(0, 0) [3],
teardrop. : N(0, 0) [12],
land. : N(0, 0) [9],
sqlattack. : N(0, 0) [2],
snmpguess. : N(0.00127598, 0.000667353) [2406] };
prob(31|intrusion_type) = {
normal. : N(0.111355, 0.0545723) [60593],
snmpgetattack. : N(0, 0) [7741],
named. : N(0, 0) [17],
xlock. : N(0, 0) [9],
smurf. : N(2.43767e-006, 4.38724e-008) [164091],
ipsweep. : N(0.156863, 0.13269) [306],
multihop. : N(0.0555556, 0.0555556) [18],
xsnoop. : N(0, 0) [4],
sendmail. : N(0.0588235, 0.0588235) [17],
guess_passwd. : N(0.00297687, 0.00296869) [4367],
saint. : N(0.139497, 0.1199) [736],
buffer_overflow.: N(0, 0) [22],
portsweep. : N(0, 0) [354],
pod. : N(0.562184, 0.0613173) [87],
apache2. : N(0.000151133, 1.8136e-005) [794],
phf. : N(0, 0) [2],
udpstorm. : N(0, 0) [2],
warezmaster. : N(0.00677278, 0.00557215) [1602],
perl. : N(0, 0) [2],
satan. : N(0.00061237, 0.00061237) [1633],
xterm. : N(0.0769231, 0.0769231) [13],
mscan. : N(0.778348, 0.120968) [1053],
processtable. : N(0.0171146, 0.0141095) [759],
ps. : N(0, 0) [16],
nmap. : N(0, 0) [84],
rootkit. : N(0, 0) [13],
neptune. : N(2.74133e-005, 5.15959e-006) [58001],
loadmodule. : N(0, 0) [2],
imap. : N(0, 0) [1],
back. : N(0.0567486, 0.0176883) [1098],
httptunnel. : N(0, 0) [158],
worm. : N(0, 0) [2],
mailbomb. : N(0.000902, 0.00061865) [5000],
ftp_write. : N(0, 0) [3],
teardrop. : N(0, 0) [12],
land. : N(0.777778, 0.194444) [9],
sqlattack. : N(0, 0) [2],
snmpguess. : N(0.000415628, 0.000415628) [2406] };
prob(32|intrusion_type) = {
normal. : N(164.314, 10479.8) [60593],
snmpgetattack. : N(253.572, 253.386) [7741],
named. : N(19.7647, 3684.57) [17],
xlock. : N(199.111, 5772.36) [9],
smurf. : N(254.939, 9.70385) [164091],
ipsweep. : N(5.62092, 1041.66) [306],
multihop. : N(146.556, 15597.6) [18],
xsnoop. : N(255, 0) [4],
sendmail. : N(158.059, 14468.4) [17],
guess_passwd. : N(244.557, 1694.77) [4367],
saint. : N(216.836, 8066.5) [736],
buffer_overflow.: N(171.864, 11673.4) [22],
portsweep. : N(239.85, 2591.09) [354],
pod. : N(13.2414, 2603.23) [87],
apache2. : N(254.558, 7.624) [794],
phf. : N(136, 28322) [2],
udpstorm. : N(67, 7938) [2],
warezmaster. : N(78.7591, 11970.8) [1602],
perl. : N(141.5, 25764.5) [2],
satan. : N(253.158, 311.955) [1633],
xterm. : N(11.8462, 644.141) [13],
mscan. : N(159.142, 7585.71) [1053],
processtable. : N(255, 0) [759],
ps. : N(128.875, 13129.6) [16],
nmap. : N(100.512, 3595.39) [84],
rootkit. : N(167, 11669.7) [13],
neptune. : N(254.772, 37.9107) [58001],
loadmodule. : N(196, 6962) [2],
imap. : N(255, 0) [1],
back. : N(255, 0) [1098],
httptunnel. : N(217.171, 5089.57) [158],
worm. : N(92, 882) [2],
mailbomb. : N(255, 0) [5000],
ftp_write. : N(203.333, 8008.33) [3],
teardrop. : N(155.5, 11381.5) [12],
land. : N(66.2222, 11755.9) [9],
sqlattack. : N(204, 5202) [2],
snmpguess. : N(254.7, 72.1785) [2406] };
prob(33|intrusion_type) = {
normal. : N(231.767, 3560.67) [60593],
snmpgetattack. : N(252.202, 264.252) [7741],
named. : N(2.82353, 16.5294) [17],
xlock. : N(5.44444, 65.2778) [9],
smurf. : N(254.86, 23.2548) [164091],
ipsweep. : N(107.925, 8629.45) [306],
multihop. : N(4.72222, 45.8595) [18],
xsnoop. : N(5.75, 78.25) [4],
sendmail. : N(11.6471, 1296.74) [17],
guess_passwd. : N(219.691, 3712.98) [4367],
saint. : N(16.837, 2249.99) [736],
buffer_overflow.: N(28.8182, 2079.49) [22],
portsweep. : N(1.01412, 0.0366271) [354],
pod. : N(31.0575, 4066.26) [87],
apache2. : N(250.418, 50.5387) [794],
phf. : N(122, 22050) [2],
udpstorm. : N(1, 0) [2],
warezmaster. : N(22.5281, 819.099) [1602],
perl. : N(7.5, 60.5) [2],
satan. : N(1.06369, 0.808442) [1633],
xterm. : N(16.4615, 1157.94) [13],
mscan. : N(58.5328, 895.108) [1053],
processtable. : N(143.291, 4231.63) [759],
ps. : N(37.5625, 2687.6) [16],
nmap. : N(1.02381, 0.047619) [84],
rootkit. : N(29.6923, 976.731) [13],
neptune. : N(10.86, 125.122) [58001],
loadmodule. : N(51, 5000) [2],
imap. : N(1, 0) [1],
back. : N(251.893, 38.508) [1098],
httptunnel. : N(17.7595, 204.515) [158],
worm. : N(1.5, 0.5) [2],
mailbomb. : N(240.018, 939.456) [5000],
ftp_write. : N(9.66667, 137.333) [3],
teardrop. : N(29.75, 1019.48) [12],
land. : N(3.22222, 6.69444) [9],
sqlattack. : N(20.5, 4.5) [2],
snmpguess. : N(254.217, 72.2357) [2406] };
prob(34|intrusion_type) = {
normal. : N(0.946477, 0.0321852) [60593],
snmpgetattack. : N(0.996149, 0.000603993) [7741],
named. : N(0.427647, 0.124607) [17],
xlock. : N(0.0688889, 0.0213611) [9],
smurf. : N(0.999661, 0.000210975) [164091],
ipsweep. : N(0.990359, 0.00941856) [306],
multihop. : N(0.333333, 0.190612) [18],
xsnoop. : N(0.02, 0.00113333) [4],
sendmail. : N(0.261176, 0.180624) [17],
guess_passwd. : N(0.891285, 0.0378359) [4367],
saint. : N(0.13716, 0.117298) [736],
buffer_overflow.: N(0.319545, 0.144395) [22],
portsweep. : N(0.00240113, 0.000153142) [354],
pod. : N(0.871494, 0.0832663) [87],
apache2. : N(0.98369, 0.000665432) [794],
phf. : N(0.945, 0.00605) [2],
udpstorm. : N(0.13, 0.0288) [2],
warezmaster. : N(0.706429, 0.143554) [1602],
perl. : N(0.045, 5e-005) [2],
satan. : N(0.00112676, 0.000282676) [1633],
xterm. : N(0.582308, 0.0824359) [13],
mscan. : N(0.24284, 0.0150339) [1053],
processtable. : N(0.561818, 0.0650355) [759],
ps. : N(0.394375, 0.119) [16],
nmap. : N(0.0259524, 0.00238583) [84],
rootkit. : N(0.264615, 0.0778269) [13],
neptune. : N(0.0427029, 0.00210487) [58001],
loadmodule. : N(0.37, 0.2738) [2],
imap. : N(0, 0) [1],
back. : N(0.988752, 0.000605096) [1098],
httptunnel. : N(0.0861392, 0.00431303) [158],
worm. : N(0.015, 5e-005) [2],
mailbomb. : N(0.93923, 0.0143616) [5000],
ftp_write. : N(0.0466667, 0.00203333) [3],
teardrop. : N(0.263333, 0.0892061) [12],
land. : N(0.562222, 0.269569) [9],
sqlattack. : N(0.105, 0.00045) [2],
snmpguess. : N(0.99953, 4.47786e-006) [2406] };
prob(35|intrusion_type) = {
normal. : N(0.0114762, 0.00338194) [60593],
snmpgetattack. : N(0.00981914, 9.27063e-005) [7741],
named. : N(0.321765, 0.0779529) [17],
xlock. : N(0.105556, 0.0516278) [9],
smurf. : N(0.000116338, 5.59954e-005) [164091],
ipsweep. : N(0.000326797, 1.10404e-005) [306],
multihop. : N(0.0983333, 0.0312735) [18],
xsnoop. : N(0.025, 3.33333e-005) [4],
sendmail. : N(0.0305882, 0.00165588) [17],
guess_passwd. : N(0.0158049, 0.000365906) [4367],
saint. : N(0.813573, 0.136784) [736],
buffer_overflow.: N(0.153182, 0.0680227) [22],
portsweep. : N(0.777684, 0.0885969) [354],
pod. : N(0.14046, 0.114763) [87],
apache2. : N(0.00562972, 3.54794e-005) [794],
phf. : N(0.01, 0.0002) [2],
udpstorm. : N(0.265, 0.11045) [2],
warezmaster. : N(0.0898002, 0.0472844) [1602],
perl. : N(0.115, 0.01805) [2],
satan. : N(0.921212, 0.0253896) [1633],
xterm. : N(0.355385, 0.0970936) [13],
mscan. : N(0.0745394, 0.016045) [1053],
processtable. : N(0.167325, 0.0595655) [759],
ps. : N(0.085625, 0.0259729) [16],
nmap. : N(0.99881, 1.06139e-005) [84],
rootkit. : N(0.0592308, 0.00340769) [13],
neptune. : N(0.0656132, 0.000481876) [58001],
loadmodule. : N(0.055, 0.00045) [2],
imap. : N(0.02, 0) [1],
back. : N(0.00550091, 2.47716e-005) [1098],
httptunnel. : N(0.0275316, 0.000546098) [158],
worm. : N(0.055, 0.00045) [2],
mailbomb. : N(0.045092, 0.000464644) [5000],
ftp_write. : N(0.0333333, 0.000233333) [3],
teardrop. : N(0.0541667, 0.00248106) [12],
land. : N(0.0266667, 0.001925) [9],
sqlattack. : N(0.06, 0.0032) [2],
snmpguess. : N(0.00435162, 2.45898e-005) [2406] };
prob(36|intrusion_type) = {
normal. : N(0.0666693, 0.0355974) [60593],
snmpgetattack. : N(0.00225811, 0.00106521) [7741],
named. : N(0.364706, 0.113564) [17],
xlock. : N(0.00666667, 0.0001) [9],
smurf. : N(0.999662, 0.000210304) [164091],
ipsweep. : N(0.990359, 0.00941856) [306],
multihop. : N(0.235, 0.146603) [18],
xsnoop. : N(0, 0) [4],
sendmail. : N(0.238824, 0.189474) [17],
guess_passwd. : N(0.00188001, 0.000389342) [4367],
saint. : N(0.162799, 0.133695) [736],
buffer_overflow.: N(0.188636, 0.153708) [22],
portsweep. : N(0.764237, 0.101151) [354],
pod. : N(0.879195, 0.0799889) [87],
apache2. : N(0, 0) [794],
phf. : N(0.03, 0.0018) [2],
udpstorm. : N(0.13, 0.0288) [2],
warezmaster. : N(0.616436, 0.21787) [1602],
perl. : N(0.02, 0.0008) [2],
satan. : N(0.242958, 0.178315) [1633],
xterm. : N(0.343077, 0.0695731) [13],
mscan. : N(0.0169041, 0.00245752) [1053],
processtable. : N(1.31752e-005, 1.31752e-007) [759],
ps. : N(0.17, 0.112253) [16],
nmap. : N(0.998095, 2.04245e-005) [84],
rootkit. : N(0.218462, 0.0841974) [13],
neptune. : N(5.25853e-005, 2.45068e-006) [58001],
loadmodule. : N(0.005, 5e-005) [2],
imap. : N(0, 0) [1],
back. : N(0, 0) [1098],
httptunnel. : N(0.00639241, 0.00186015) [158],
worm. : N(0.01, 0) [2],
mailbomb. : N(8e-006, 3.2e-007) [5000],
ftp_write. : N(0.0166667, 0.000833333) [3],
teardrop. : N(0.263333, 0.0892061) [12],
land. : N(0.561111, 0.270961) [9],
sqlattack. : N(0.005, 5e-005) [2],
snmpguess. : N(0.00848296, 0.0016498) [2406] };
prob(37|intrusion_type) = {
normal. : N(0.015297, 0.00088903) [60593],
snmpgetattack. : N(0, 0) [7741],
named. : N(0.0258824, 0.00535074) [17],
xlock. : N(0, 0) [9],
smurf. : N(6.88642e-006, 1.49608e-006) [164091],
ipsweep. : N(0.894183, 0.0556874) [306],
multihop. : N(0.0555556, 0.0555556) [18],
xsnoop. : N(0, 0) [4],
sendmail. : N(0.000588235, 5.88235e-006) [17],
guess_passwd. : N(0.00213877, 0.000507518) [4367],
saint. : N(0.0403668, 0.012139) [736],
buffer_overflow.: N(0.0463636, 0.00910996) [22],
portsweep. : N(0.00189266, 0.00126808) [354],
pod. : N(0.444253, 0.0613178) [87],
apache2. : N(0, 0) [794],
phf. : N(0, 0) [2],
udpstorm. : N(0, 0) [2],
warezmaster. : N(0.0657179, 0.0136429) [1602],
perl. : N(0.5, 0.5) [2],
satan. : N(0, 0) [1633],
xterm. : N(0.142308, 0.114836) [13],
mscan. : N(0.0230009, 0.00136912) [1053],
processtable. : N(0, 0) [759],
ps. : N(0.023125, 0.00495625) [16],
nmap. : N(0.00797619, 0.00534405) [84],
rootkit. : N(0.00923077, 0.000507692) [13],
neptune. : N(0, 0) [58001],
loadmodule. : N(0, 0) [2],
imap. : N(0, 0) [1],
back. : N(0, 0) [1098],
httptunnel. : N(0.000126582, 2.53165e-006) [158],
worm. : N(0, 0) [2],
mailbomb. : N(0, 0) [5000],
ftp_write. : N(0, 0) [3],
teardrop. : N(0, 0) [12],
land. : N(0.468889, 0.258711) [9],
sqlattack. : N(0, 0) [2],
snmpguess. : N(0, 0) [2406] };
prob(38|intrusion_type) = {
normal. : N(0.00115459, 0.000457322) [60593],
snmpgetattack. : N(0, 0) [7741],
named. : N(0, 0) [17],
xlock. : N(0.00333333, 0.0001) [9],
smurf. : N(1.52964e-005, 1.79086e-006) [164091],
ipsweep. : N(0, 0) [306],
multihop. : N(0, 0) [18],
xsnoop. : N(0, 0) [4],
sendmail. : N(0.00117647, 1.10294e-005) [17],
guess_passwd. : N(0.000737348, 1.04502e-005) [4367],
saint. : N(0.0429891, 0.000729556) [736],
buffer_overflow.: N(0.0722727, 0.0587232) [22],
portsweep. : N(0.00887006, 0.00214716) [354],
pod. : N(0.0401149, 0.0243035) [87],
apache2. : N(0.128615, 0.0502952) [794],
phf. : N(0, 0) [2],
udpstorm. : N(0.385, 0.29645) [2],
warezmaster. : N(0.0228402, 0.0111786) [1602],
perl. : N(0, 0) [2],
satan. : N(0.0445622, 0.00342188) [1633],
xterm. : N(0, 0) [13],
mscan. : N(0.178509, 0.141177) [1053],
processtable. : N(0.339249, 0.0376674) [759],
ps. : N(0.139375, 0.0619262) [16],
nmap. : N(0.998095, 2.04245e-005) [84],
rootkit. : N(0.11, 0.02185) [13],
neptune. : N(0.300111, 0.20662) [58001],
loadmodule. : N(0.435, 0.17405) [2],
imap. : N(0, 0) [1],
back. : N(0.00156648, 1.3223e-005) [1098],
httptunnel. : N(6.32911e-005, 6.32911e-007) [158],
worm. : N(0, 0) [2],
mailbomb. : N(0, 0) [5000],
ftp_write. : N(0.346667, 0.0902333) [3],
teardrop. : N(0.0508333, 0.00848106) [12],
land. : N(0.621111, 0.224011) [9],
sqlattack. : N(0, 0) [2],
snmpguess. : N(0, 0) [2406] };
prob(39|intrusion_type) = {
normal. : N(0.000567557, 0.000216573) [60593],
snmpgetattack. : N(0, 0) [7741],
named. : N(0, 0) [17],
xlock. : N(0.00666667, 0.0004) [9],
smurf. : N(0, 0) [164091],
ipsweep. : N(0, 0) [306],
multihop. : N(0, 0) [18],
xsnoop. : N(0.25, 0.25) [4],
sendmail. : N(0.00823529, 0.00115294) [17],
guess_passwd. : N(0.000904511, 4.02032e-005) [4367],
saint. : N(0.046644, 0.044228) [736],
buffer_overflow.: N(0.0436364, 0.0375195) [22],
portsweep. : N(0, 0) [354],
pod. : N(0, 0) [87],
apache2. : N(0.128917, 0.0503035) [794],
phf. : N(0, 0) [2],
udpstorm. : N(0, 0) [2],
warezmaster. : N(0.00155431, 9.97063e-005) [1602],
perl. : N(0, 0) [2],
satan. : N(0.0483772, 0.0460651) [1633],
xterm. : N(0.000769231, 7.69231e-006) [13],
mscan. : N(0.160978, 0.123177) [1053],
processtable. : N(0.44249, 0.0452963) [759],
ps. : N(0.114375, 0.0943196) [16],
nmap. : N(1, 0) [84],
rootkit. : N(0.0592308, 0.0456077) [13],
neptune. : N(0.300425, 0.208783) [58001],
loadmodule. : N(0.495, 0.49005) [2],
imap. : N(0, 0) [1],
back. : N(0.00156648, 1.3223e-005) [1098],
httptunnel. : N(0, 0) [158],
worm. : N(0, 0) [2],
mailbomb. : N(0, 0) [5000],
ftp_write. : N(0, 0) [3],
teardrop. : N(0, 0) [12],
land. : N(0.826667, 0.121325) [9],
sqlattack. : N(0, 0) [2],
snmpguess. : N(0, 0) [2406] };
prob(40|intrusion_type) = {
normal. : N(0.00404271, 0.00245464) [60593],
snmpgetattack. : N(0, 0) [7741],
named. : N(0.274706, 0.114964) [17],
xlock. : N(0.113333, 0.058675) [9],
smurf. : N(0.000131269, 7.29988e-005) [164091],
ipsweep. : N(0, 0) [306],
multihop. : N(0.00333333, 9.41176e-005) [18],
xsnoop. : N(0, 0) [4],
sendmail. : N(0.00117647, 1.10294e-005) [17],
guess_passwd. : N(0.0182345, 0.00169869) [4367],
saint. : N(0.756549, 0.135175) [736],
buffer_overflow.: N(0.163182, 0.102594) [22],
portsweep. : N(0.814237, 0.0781576) [354],
pod. : N(0.0135632, 0.0100023) [87],
apache2. : N(0.401725, 0.044177) [794],
phf. : N(0.03, 0.0018) [2],
udpstorm. : N(0, 0) [2],
warezmaster. : N(0.0726217, 0.0469037) [1602],
perl. : N(0.05, 0.0008) [2],
satan. : N(0.694262, 0.161529) [1633],
xterm. : N(0.0130769, 0.00222308) [13],
mscan. : N(0.530769, 0.130152) [1053],
processtable. : N(0.185547, 0.052782) [759],
ps. : N(0.005, 8e-005) [16],
nmap. : N(0, 0) [84],
rootkit. : N(0.02, 0.00045) [13],
neptune. : N(0.699239, 0.207077) [58001],
loadmodule. : N(0.43, 0.3698) [2],
imap. : N(0, 0) [1],
back. : N(0.0451913, 0.000342944) [1098],
httptunnel. : N(0.0691772, 0.00196811) [158],
worm. : N(0, 0) [2],
mailbomb. : N(0.0561, 0.0138144) [5000],
ftp_write. : N(0.0133333, 0.000133333) [3],
teardrop. : N(0.1075, 0.0398568) [12],
land. : N(0.00222222, 4.44444e-005) [9],
sqlattack. : N(0.01, 0.0002) [2],
snmpguess. : N(0, 0) [2406] };
prob(41|intrusion_type) = {
normal. : N(0.00238493, 0.00185957) [60593],
snmpgetattack. : N(0, 0) [7741],
named. : N(0.186471, 0.131737) [17],
xlock. : N(0.0844444, 0.0641778) [9],
smurf. : N(0, 0) [164091],
ipsweep. : N(0, 0) [306],
multihop. : N(0.0183333, 0.00605) [18],
xsnoop. : N(0, 0) [4],
sendmail. : N(0.0252941, 0.0108765) [17],
guess_passwd. : N(0.00756354, 0.00189159) [4367],
saint. : N(0.766304, 0.179326) [736],
buffer_overflow.: N(0.0886364, 0.0542409) [22],
portsweep. : N(0.984689, 0.0139615) [354],
pod. : N(0, 0) [87],
apache2. : N(0.407003, 0.0445733) [794],
phf. : N(0.03, 0.0018) [2],
udpstorm. : N(0, 0) [2],
warezmaster. : N(0.000930087, 0.000136361) [1602],
perl. : N(0.31, 0.1922) [2],
satan. : N(0.69504, 0.212089) [1633],
xterm. : N(0.0876923, 0.0462359) [13],
mscan. : N(0.691273, 0.133552) [1053],
processtable. : N(0.0422266, 0.00380308) [759],
ps. : N(0.000625, 6.25e-006) [16],
nmap. : N(0, 0) [84],
rootkit. : N(0.02, 0.00478333) [13],
neptune. : N(0.699461, 0.208885) [58001],
loadmodule. : N(0, 0) [2],
imap. : N(1, 0) [1],
back. : N(0.0450638, 0.000355921) [1098],
httptunnel. : N(0.837658, 0.0430002) [158],
worm. : N(0, 0) [2],
mailbomb. : N(0, 0) [5000],
ftp_write. : N(0, 0) [3],
teardrop. : N(0, 0) [12],
land. : N(0, 0) [9],
sqlattack. : N(0, 0) [2],
snmpguess. : N(0, 0) [2406] };
};
/*----------------------------------------------------------------------
number of attributes: 42
number of tuples : 311029
----------------------------------------------------------------------*/