From: Improving anomaly detection in SCADA network communication with attribute extension
Attribute | Description |
---|---|
Destination | Destination Ethernet address |
Source | Source Ethernet address |
dirFrame | Transmission direction of frame |
deltaTime | Time difference between 2 consecutive frames |
Length | Ethernet frame length |
ipTtl | Time to live |
tcpHdrLen | TCP header length |
tcpWinSize | TCP window size |
tcpPduSize | TCP frame size |
ipFlag | Indicates don’t fragment bit |
Type | Format type of frame—U, S, I |
TypeID | Type Identification number of format-I telegram |
CauseTx | Cause of the Transmission of format-I telegram |