http://ieeexplore.ieee.org/document/5478852/

Here you have all details you may need!

https://github.com/FransHBotes/NSLKDD-Dataset

Hi, as with the dramatic opening-up of network, network security becomes a severe social problem with the rapid development of network technology. Intrusion Detection System (IDS) is an innovative and proactive network security technology, which becomes a hot topic in both industry and academia in recent years. There are four main characteristics of intrusion data that affect the performance of IDS including multicomponent, data imbalance, time-varying and unknown attacks. We propose a novel IDS framework called HMLD to address these issues, which is an exquisite designed framework based on Hybrid Multi-Level Data Mining. In this paper, we use KDDCUP99 dataset to evaluate the performance of HMLD. The experimental results show that HMLD can reach 96.70% accuracy which is nearly 1% higher than the recent proposed optimal algorithm SVM+ELM+Modified K-Means. In details, HMLD greatly increased the detection accuracy of DoS attacks and R2L attacks.

okay... thanks for the comments.. but what is the process used to extract these features from a network packet file.

Was there any script or any tool used ?

https://peerj.com/preprints/1954.pdf

Conference Paper The significant features of the UNSW-NB15 and the KDD99 Data...

https://ieeexplore.ieee.org/document/7809531/

http://www.iaeng.org/publication/WCECS2010/WCECS2010_pp162-168.pdf

https://www.ee.ryerson.ca/~bagheri/papers/cisda.pdf

http://jestec.taylors.edu.my/Vol%208%20Issue%201%20February%2013/Vol_8_1_107-119_LAHEEB%20M.%20IBRAHIM.pdf

https://arxiv.org/ftp/arxiv/papers/1707/1707.05505.pdf

Thank you Hamit Can. I will go through them.

Personally, I am using NetLogo, ProVerif, AVESPA for different tasks related to network security

Hi Saeed, I wanted to extract the features from packet captured files, so that they could be used for training my model.

Then you can use NetLogo for such a task

Thanks Saeed. I will check out how NetLogo works.