Skip to main content

Table 7 Extracted feature from Wireshark

From: Comparison of approaches for intrusion detection in substations using the IEC 60870-5-104 protocol

Field

Description

Wireshark

x_ws_expert _severity

Expert information value from Wireshark. The application keeps track of problems like malformed packets.