Skip to content

Commit d8e4048

Browse files
committed
NetTiSA: Add NetTiSA into README.md
1 parent 5d4cb5d commit d8e4048

File tree

1 file changed

+19
-0
lines changed

1 file changed

+19
-0
lines changed

README.md

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -239,6 +239,25 @@ Fields without `_REV` suffix are fields from source flow. Fields with `_REV` are
239239
| TCP_MSS_REV | uint32 | TCP maximum segment size |
240240
| TCP_SYN_SIZE | uint16 | TCP SYN packet size |
241241

242+
### NetTiSA
243+
List of unirec fields exported together with NetTiSA flow fields on interface by nettisa plugin.
244+
245+
| Output field | Type | Description |
246+
|:------------:|:------:|:---------------------------:|
247+
| NTS_MEAN | float | The mean of the payload lengths of packets |
248+
| NTS_MIN | uint16 | Minimal value from all packet payload lengths |
249+
| NTS_MAX | uint16 | Maximum value from all packet payload lengths |
250+
| NTS_STDEV | float | Represents a switching ratio between different values of the sequence of observation. |
251+
| NTS_KURTOSIS | float | The standard deviation is measure of the variation of data from the mean. |
252+
| NTS_ROOT_MEAN_SQUARE | float | The measure of the magnitude of payload lengths of packets. |
253+
| NTS_AVERAGE_DISPERSION | float | The average absolute difference between each payload length of packet and the mean value. |
254+
| NTS_MEAN_SCALED_TIME | float | The kurtosis is the measure describing the extent to which the tails of a distribution differ from the tails of a normal distribution. |
255+
| NTS_MEAN_DIFFTIMES | float | The scaled times is defined as sequence $\{st\} = \{ t_1 - t_1, t_2 - t_1, \dots, t_n - t_1 \}$. We compute the mean of the value with same method as for feature \textit{Mean}. |
256+
| NTS_MIN_DIFFTIMES | float | The time differences is defined as sequence $ \{dt\} = \{ t_j - t_i \| j = i + 1, i \in \{1, 2, \dots, n - 1\}\}$. We compute the mean of the value with same method as for feature \textit{Mean}. |
257+
| NTS_MAX_DIFFTIMES | float | Minimal value from all time differences, i.e., min space between packets. |
258+
| NTS_TIME_DISTRIBUTION | float | Maximum value from all time differences, i.e., max space between packets. |
259+
| NTS_SWITCHING_RATIO | float | Describes the distribution of time differences between individual packets. |
260+
242261
### HTTP
243262
List of unirec fields exported together with basic flow fields on interface by HTTP plugin.
244263

0 commit comments

Comments
 (0)