1-Exploring_CIC-IDS-2018_Dataset.ipynb

{
 "cells": [
  {
   "cell_type": "markdown",
   "id": "c32d5ca6",
   "metadata": {},
   "source": [
    "# Exploring the CIC-IDS-2018 Dataset\n",
    "[official dataset link](https://www.unb.ca/cic/datasets/ids-2018.html)\n",
    "\n",
    "\n",
    "Based on the following exploration; The __\"Friday-02-03-2018_TrafficForML_CICFlowMeter.csv\"__ and __\"Friday-16-02-2018_TrafficForML_CICFlowMeter.csv\"__ (friday 1 and friday 2) csv files were chosen with the following labels:\n",
    "* __Benign__ (1,209,156 total instances)\n",
    "* __Bot__ (286,191 total instances)\n",
    "* __DoS attacks-SlowHTTPTest__ (139,890 total instances)\n",
    "* __DoS attacks-Hulk__ (461,912 total instances)\n",
    "* Label (one erroneous row, would need to be removed)\n",
    "\n",
    "__Reasoning__: The labels are better balanced than the rest of the files. For the purposes of a baseline experiment; it would be satisfactory.\n",
    "\n",
    "The __Bot__, __DoS attacks-SlowHTTPTest__, and __DoS attacks-Hulk__ labels would be combined into one __\"Malicious\"__ label for a total of 887,993 __\"Malicious\"__ instances\n",
    "\n",
    "The baseline experiment would be a binary classification experiment between __887,993 \"Malicious\"__ instances vs __1,209,156 \"Benign\"__ instances."
   ]
  },
  {
   "cell_type": "markdown",
   "id": "0a53658b",
   "metadata": {},
   "source": [
    "### 1- Friday logs"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 1,
   "id": "d0eaab6d",
   "metadata": {},
   "outputs": [],
   "source": [
    "import pandas as pd"
   ]
  },
  {
   "cell_type": "markdown",
   "id": "46bf21db",
   "metadata": {},
   "source": [
    "#### 1.1- Friday-02-03-2018_TrafficForML_CICFlowMeter.csv"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 2,
   "id": "925cee26",
   "metadata": {},
   "outputs": [],
   "source": [
    "df_friday1 = pd.read_csv(\"CIC-IDS-2018-Dataset/Friday-02-03-2018_TrafficForML_CICFlowMeter.csv\")"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 3,
   "id": "ee8c640d",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/html": [
       "<div>\n",
       "<style scoped>\n",
       "    .dataframe tbody tr th:only-of-type {\n",
       "        vertical-align: middle;\n",
       "    }\n",
       "\n",
       "    .dataframe tbody tr th {\n",
       "        vertical-align: top;\n",
       "    }\n",
       "\n",
       "    .dataframe thead th {\n",
       "        text-align: right;\n",
       "    }\n",
       "</style>\n",
       "<table border=\"1\" class=\"dataframe\">\n",
       "  <thead>\n",
       "    <tr style=\"text-align: right;\">\n",
       "      <th></th>\n",
       "      <th>Dst Port</th>\n",
       "      <th>Protocol</th>\n",
       "      <th>Timestamp</th>\n",
       "      <th>Flow Duration</th>\n",
       "      <th>Tot Fwd Pkts</th>\n",
       "      <th>Tot Bwd Pkts</th>\n",
       "      <th>TotLen Fwd Pkts</th>\n",
       "      <th>TotLen Bwd Pkts</th>\n",
       "      <th>Fwd Pkt Len Max</th>\n",
       "      <th>Fwd Pkt Len Min</th>\n",
       "      <th>...</th>\n",
       "      <th>Fwd Seg Size Min</th>\n",
       "      <th>Active Mean</th>\n",
       "      <th>Active Std</th>\n",
       "      <th>Active Max</th>\n",
       "      <th>Active Min</th>\n",
       "      <th>Idle Mean</th>\n",
       "      <th>Idle Std</th>\n",
       "      <th>Idle Max</th>\n",
       "      <th>Idle Min</th>\n",
       "      <th>Label</th>\n",
       "    </tr>\n",
       "  </thead>\n",
       "  <tbody>\n",
       "    <tr>\n",
       "      <th>0</th>\n",
       "      <td>443</td>\n",
       "      <td>6</td>\n",
       "      <td>02/03/2018 08:47:38</td>\n",
       "      <td>141385</td>\n",
       "      <td>9</td>\n",
       "      <td>7</td>\n",
       "      <td>553</td>\n",
       "      <td>3773.0</td>\n",
       "      <td>202</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1</th>\n",
       "      <td>49684</td>\n",
       "      <td>6</td>\n",
       "      <td>02/03/2018 08:47:38</td>\n",
       "      <td>281</td>\n",
       "      <td>2</td>\n",
       "      <td>1</td>\n",
       "      <td>38</td>\n",
       "      <td>0.0</td>\n",
       "      <td>38</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>2</th>\n",
       "      <td>443</td>\n",
       "      <td>6</td>\n",
       "      <td>02/03/2018 08:47:40</td>\n",
       "      <td>279824</td>\n",
       "      <td>11</td>\n",
       "      <td>15</td>\n",
       "      <td>1086</td>\n",
       "      <td>10527.0</td>\n",
       "      <td>385</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>3</th>\n",
       "      <td>443</td>\n",
       "      <td>6</td>\n",
       "      <td>02/03/2018 08:47:40</td>\n",
       "      <td>132</td>\n",
       "      <td>2</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>4</th>\n",
       "      <td>443</td>\n",
       "      <td>6</td>\n",
       "      <td>02/03/2018 08:47:41</td>\n",
       "      <td>274016</td>\n",
       "      <td>9</td>\n",
       "      <td>13</td>\n",
       "      <td>1285</td>\n",
       "      <td>6141.0</td>\n",
       "      <td>517</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>...</th>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1048570</th>\n",
       "      <td>3389</td>\n",
       "      <td>6</td>\n",
       "      <td>02/03/2018 02:08:18</td>\n",
       "      <td>3982183</td>\n",
       "      <td>14</td>\n",
       "      <td>8</td>\n",
       "      <td>1442</td>\n",
       "      <td>1731.0</td>\n",
       "      <td>725</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1048571</th>\n",
       "      <td>3389</td>\n",
       "      <td>6</td>\n",
       "      <td>02/03/2018 02:08:22</td>\n",
       "      <td>3802316</td>\n",
       "      <td>14</td>\n",
       "      <td>8</td>\n",
       "      <td>1440</td>\n",
       "      <td>1731.0</td>\n",
       "      <td>725</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1048572</th>\n",
       "      <td>3389</td>\n",
       "      <td>6</td>\n",
       "      <td>02/03/2018 02:08:25</td>\n",
       "      <td>4004239</td>\n",
       "      <td>14</td>\n",
       "      <td>8</td>\n",
       "      <td>1459</td>\n",
       "      <td>1731.0</td>\n",
       "      <td>741</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1048573</th>\n",
       "      <td>3389</td>\n",
       "      <td>6</td>\n",
       "      <td>02/03/2018 02:08:29</td>\n",
       "      <td>3998435</td>\n",
       "      <td>14</td>\n",
       "      <td>8</td>\n",
       "      <td>1459</td>\n",
       "      <td>1731.0</td>\n",
       "      <td>741</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1048574</th>\n",
       "      <td>3389</td>\n",
       "      <td>6</td>\n",
       "      <td>02/03/2018 02:08:33</td>\n",
       "      <td>3972651</td>\n",
       "      <td>14</td>\n",
       "      <td>8</td>\n",
       "      <td>1439</td>\n",
       "      <td>1731.0</td>\n",
       "      <td>725</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "  </tbody>\n",
       "</table>\n",
       "<p>1048575 rows × 80 columns</p>\n",
       "</div>"
      ],
      "text/plain": [
       "         Dst Port  Protocol            Timestamp  Flow Duration  Tot Fwd Pkts  \\\n",
       "0             443         6  02/03/2018 08:47:38         141385             9   \n",
       "1           49684         6  02/03/2018 08:47:38            281             2   \n",
       "2             443         6  02/03/2018 08:47:40         279824            11   \n",
       "3             443         6  02/03/2018 08:47:40            132             2   \n",
       "4             443         6  02/03/2018 08:47:41         274016             9   \n",
       "...           ...       ...                  ...            ...           ...   \n",
       "1048570      3389         6  02/03/2018 02:08:18        3982183            14   \n",
       "1048571      3389         6  02/03/2018 02:08:22        3802316            14   \n",
       "1048572      3389         6  02/03/2018 02:08:25        4004239            14   \n",
       "1048573      3389         6  02/03/2018 02:08:29        3998435            14   \n",
       "1048574      3389         6  02/03/2018 02:08:33        3972651            14   \n",
       "\n",
       "         Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max  \\\n",
       "0                   7              553           3773.0              202   \n",
       "1                   1               38              0.0               38   \n",
       "2                  15             1086          10527.0              385   \n",
       "3                   0                0              0.0                0   \n",
       "4                  13             1285           6141.0              517   \n",
       "...               ...              ...              ...              ...   \n",
       "1048570             8             1442           1731.0              725   \n",
       "1048571             8             1440           1731.0              725   \n",
       "1048572             8             1459           1731.0              741   \n",
       "1048573             8             1459           1731.0              741   \n",
       "1048574             8             1439           1731.0              725   \n",
       "\n",
       "         Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std  \\\n",
       "0                      0  ...                20          0.0         0.0   \n",
       "1                      0  ...                20          0.0         0.0   \n",
       "2                      0  ...                20          0.0         0.0   \n",
       "3                      0  ...                20          0.0         0.0   \n",
       "4                      0  ...                20          0.0         0.0   \n",
       "...                  ...  ...               ...          ...         ...   \n",
       "1048570                0  ...                20          0.0         0.0   \n",
       "1048571                0  ...                20          0.0         0.0   \n",
       "1048572                0  ...                20          0.0         0.0   \n",
       "1048573                0  ...                20          0.0         0.0   \n",
       "1048574                0  ...                20          0.0         0.0   \n",
       "\n",
       "         Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  \\\n",
       "0               0.0         0.0        0.0       0.0       0.0       0.0   \n",
       "1               0.0         0.0        0.0       0.0       0.0       0.0   \n",
       "2               0.0         0.0        0.0       0.0       0.0       0.0   \n",
       "3               0.0         0.0        0.0       0.0       0.0       0.0   \n",
       "4               0.0         0.0        0.0       0.0       0.0       0.0   \n",
       "...             ...         ...        ...       ...       ...       ...   \n",
       "1048570         0.0         0.0        0.0       0.0       0.0       0.0   \n",
       "1048571         0.0         0.0        0.0       0.0       0.0       0.0   \n",
       "1048572         0.0         0.0        0.0       0.0       0.0       0.0   \n",
       "1048573         0.0         0.0        0.0       0.0       0.0       0.0   \n",
       "1048574         0.0         0.0        0.0       0.0       0.0       0.0   \n",
       "\n",
       "          Label  \n",
       "0        Benign  \n",
       "1        Benign  \n",
       "2        Benign  \n",
       "3        Benign  \n",
       "4        Benign  \n",
       "...         ...  \n",
       "1048570  Benign  \n",
       "1048571  Benign  \n",
       "1048572  Benign  \n",
       "1048573  Benign  \n",
       "1048574  Benign  \n",
       "\n",
       "[1048575 rows x 80 columns]"
      ]
     },
     "execution_count": 3,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "df_friday1"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 4,
   "id": "e896f6a3",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/plain": [
       "Index(['Dst Port', 'Protocol', 'Timestamp', 'Flow Duration', 'Tot Fwd Pkts',\n",
       "       'Tot Bwd Pkts', 'TotLen Fwd Pkts', 'TotLen Bwd Pkts', 'Fwd Pkt Len Max',\n",
       "       'Fwd Pkt Len Min', 'Fwd Pkt Len Mean', 'Fwd Pkt Len Std',\n",
       "       'Bwd Pkt Len Max', 'Bwd Pkt Len Min', 'Bwd Pkt Len Mean',\n",
       "       'Bwd Pkt Len Std', 'Flow Byts/s', 'Flow Pkts/s', 'Flow IAT Mean',\n",
       "       'Flow IAT Std', 'Flow IAT Max', 'Flow IAT Min', 'Fwd IAT Tot',\n",
       "       'Fwd IAT Mean', 'Fwd IAT Std', 'Fwd IAT Max', 'Fwd IAT Min',\n",
       "       'Bwd IAT Tot', 'Bwd IAT Mean', 'Bwd IAT Std', 'Bwd IAT Max',\n",
       "       'Bwd IAT Min', 'Fwd PSH Flags', 'Bwd PSH Flags', 'Fwd URG Flags',\n",
       "       'Bwd URG Flags', 'Fwd Header Len', 'Bwd Header Len', 'Fwd Pkts/s',\n",
       "       'Bwd Pkts/s', 'Pkt Len Min', 'Pkt Len Max', 'Pkt Len Mean',\n",
       "       'Pkt Len Std', 'Pkt Len Var', 'FIN Flag Cnt', 'SYN Flag Cnt',\n",
       "       'RST Flag Cnt', 'PSH Flag Cnt', 'ACK Flag Cnt', 'URG Flag Cnt',\n",
       "       'CWE Flag Count', 'ECE Flag Cnt', 'Down/Up Ratio', 'Pkt Size Avg',\n",
       "       'Fwd Seg Size Avg', 'Bwd Seg Size Avg', 'Fwd Byts/b Avg',\n",
       "       'Fwd Pkts/b Avg', 'Fwd Blk Rate Avg', 'Bwd Byts/b Avg',\n",
       "       'Bwd Pkts/b Avg', 'Bwd Blk Rate Avg', 'Subflow Fwd Pkts',\n",
       "       'Subflow Fwd Byts', 'Subflow Bwd Pkts', 'Subflow Bwd Byts',\n",
       "       'Init Fwd Win Byts', 'Init Bwd Win Byts', 'Fwd Act Data Pkts',\n",
       "       'Fwd Seg Size Min', 'Active Mean', 'Active Std', 'Active Max',\n",
       "       'Active Min', 'Idle Mean', 'Idle Std', 'Idle Max', 'Idle Min', 'Label'],\n",
       "      dtype='object')"
      ]
     },
     "execution_count": 4,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "df_friday1.columns"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 5,
   "id": "1c602ae3",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/plain": [
       "array(['Benign', 'Bot'], dtype=object)"
      ]
     },
     "execution_count": 5,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "df_friday1[\"Label\"].unique()"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 6,
   "id": "6b3506b3",
   "metadata": {},
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "762384\n",
      "286191\n"
     ]
    }
   ],
   "source": [
    "print(df_friday1[\"Label\"].value_counts()[['Benign']].sum())\n",
    "print(df_friday1[\"Label\"].value_counts()[['Bot']].sum())"
   ]
  },
  {
   "cell_type": "markdown",
   "id": "4900a04b",
   "metadata": {},
   "source": [
    "#### 1.2- Friday-16-02-2018_TrafficForML_CICFlowMeter.csv"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 7,
   "id": "02ee6dba",
   "metadata": {},
   "outputs": [
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      "/home/tamer/anaconda3/envs/cic-ids-2018/lib/python3.7/site-packages/IPython/core/interactiveshell.py:3444: DtypeWarning: Columns (0,1,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78) have mixed types.Specify dtype option on import or set low_memory=False.\n",
      "  exec(code_obj, self.user_global_ns, self.user_ns)\n"
     ]
    }
   ],
   "source": [
    "df_friday2 = pd.read_csv(\"CIC-IDS-2018-Dataset/Friday-16-02-2018_TrafficForML_CICFlowMeter.csv\")"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 8,
   "id": "6abf3a06",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/html": [
       "<div>\n",
       "<style scoped>\n",
       "    .dataframe tbody tr th:only-of-type {\n",
       "        vertical-align: middle;\n",
       "    }\n",
       "\n",
       "    .dataframe tbody tr th {\n",
       "        vertical-align: top;\n",
       "    }\n",
       "\n",
       "    .dataframe thead th {\n",
       "        text-align: right;\n",
       "    }\n",
       "</style>\n",
       "<table border=\"1\" class=\"dataframe\">\n",
       "  <thead>\n",
       "    <tr style=\"text-align: right;\">\n",
       "      <th></th>\n",
       "      <th>Dst Port</th>\n",
       "      <th>Protocol</th>\n",
       "      <th>Timestamp</th>\n",
       "      <th>Flow Duration</th>\n",
       "      <th>Tot Fwd Pkts</th>\n",
       "      <th>Tot Bwd Pkts</th>\n",
       "      <th>TotLen Fwd Pkts</th>\n",
       "      <th>TotLen Bwd Pkts</th>\n",
       "      <th>Fwd Pkt Len Max</th>\n",
       "      <th>Fwd Pkt Len Min</th>\n",
       "      <th>...</th>\n",
       "      <th>Fwd Seg Size Min</th>\n",
       "      <th>Active Mean</th>\n",
       "      <th>Active Std</th>\n",
       "      <th>Active Max</th>\n",
       "      <th>Active Min</th>\n",
       "      <th>Idle Mean</th>\n",
       "      <th>Idle Std</th>\n",
       "      <th>Idle Max</th>\n",
       "      <th>Idle Min</th>\n",
       "      <th>Label</th>\n",
       "    </tr>\n",
       "  </thead>\n",
       "  <tbody>\n",
       "    <tr>\n",
       "      <th>0</th>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>16/02/2018 08:27:23</td>\n",
       "      <td>112640768</td>\n",
       "      <td>3</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>56300000.0</td>\n",
       "      <td>138.592929</td>\n",
       "      <td>56300000</td>\n",
       "      <td>56300000</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1</th>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>16/02/2018 08:30:12</td>\n",
       "      <td>112641773</td>\n",
       "      <td>3</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>56300000.0</td>\n",
       "      <td>263.750829</td>\n",
       "      <td>56300000</td>\n",
       "      <td>56300000</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>2</th>\n",
       "      <td>35605</td>\n",
       "      <td>6</td>\n",
       "      <td>16/02/2018 08:26:55</td>\n",
       "      <td>20784143</td>\n",
       "      <td>23</td>\n",
       "      <td>44</td>\n",
       "      <td>2416</td>\n",
       "      <td>1344</td>\n",
       "      <td>240</td>\n",
       "      <td>64</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>2624734</td>\n",
       "      <td>0.0</td>\n",
       "      <td>2624734</td>\n",
       "      <td>2624734</td>\n",
       "      <td>9058214.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>9058214</td>\n",
       "      <td>9058214</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>3</th>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>16/02/2018 08:33:01</td>\n",
       "      <td>112640836</td>\n",
       "      <td>3</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>56300000.0</td>\n",
       "      <td>82.024387</td>\n",
       "      <td>56300000</td>\n",
       "      <td>56300000</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>4</th>\n",
       "      <td>23</td>\n",
       "      <td>6</td>\n",
       "      <td>16/02/2018 08:27:59</td>\n",
       "      <td>20</td>\n",
       "      <td>1</td>\n",
       "      <td>1</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>...</th>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1048570</th>\n",
       "      <td>21</td>\n",
       "      <td>6</td>\n",
       "      <td>16/02/2018 10:36:33</td>\n",
       "      <td>3</td>\n",
       "      <td>1</td>\n",
       "      <td>1</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>40</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>DoS attacks-SlowHTTPTest</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1048571</th>\n",
       "      <td>21</td>\n",
       "      <td>6</td>\n",
       "      <td>16/02/2018 10:36:33</td>\n",
       "      <td>3</td>\n",
       "      <td>1</td>\n",
       "      <td>1</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>40</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>DoS attacks-SlowHTTPTest</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1048572</th>\n",
       "      <td>21</td>\n",
       "      <td>6</td>\n",
       "      <td>16/02/2018 10:36:33</td>\n",
       "      <td>3</td>\n",
       "      <td>1</td>\n",
       "      <td>1</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>40</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>DoS attacks-SlowHTTPTest</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1048573</th>\n",
       "      <td>21</td>\n",
       "      <td>6</td>\n",
       "      <td>16/02/2018 10:36:33</td>\n",
       "      <td>5</td>\n",
       "      <td>1</td>\n",
       "      <td>1</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>40</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>DoS attacks-SlowHTTPTest</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1048574</th>\n",
       "      <td>21</td>\n",
       "      <td>6</td>\n",
       "      <td>16/02/2018 10:36:33</td>\n",
       "      <td>2</td>\n",
       "      <td>1</td>\n",
       "      <td>1</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>40</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>DoS attacks-SlowHTTPTest</td>\n",
       "    </tr>\n",
       "  </tbody>\n",
       "</table>\n",
       "<p>1048575 rows × 80 columns</p>\n",
       "</div>"
      ],
      "text/plain": [
       "        Dst Port Protocol            Timestamp Flow Duration Tot Fwd Pkts  \\\n",
       "0              0        0  16/02/2018 08:27:23     112640768            3   \n",
       "1              0        0  16/02/2018 08:30:12     112641773            3   \n",
       "2          35605        6  16/02/2018 08:26:55      20784143           23   \n",
       "3              0        0  16/02/2018 08:33:01     112640836            3   \n",
       "4             23        6  16/02/2018 08:27:59            20            1   \n",
       "...          ...      ...                  ...           ...          ...   \n",
       "1048570       21        6  16/02/2018 10:36:33             3            1   \n",
       "1048571       21        6  16/02/2018 10:36:33             3            1   \n",
       "1048572       21        6  16/02/2018 10:36:33             3            1   \n",
       "1048573       21        6  16/02/2018 10:36:33             5            1   \n",
       "1048574       21        6  16/02/2018 10:36:33             2            1   \n",
       "\n",
       "        Tot Bwd Pkts TotLen Fwd Pkts TotLen Bwd Pkts Fwd Pkt Len Max  \\\n",
       "0                  0               0               0               0   \n",
       "1                  0               0               0               0   \n",
       "2                 44            2416            1344             240   \n",
       "3                  0               0               0               0   \n",
       "4                  1               0               0               0   \n",
       "...              ...             ...             ...             ...   \n",
       "1048570            1               0               0               0   \n",
       "1048571            1               0               0               0   \n",
       "1048572            1               0               0               0   \n",
       "1048573            1               0               0               0   \n",
       "1048574            1               0               0               0   \n",
       "\n",
       "        Fwd Pkt Len Min  ... Fwd Seg Size Min Active Mean Active Std  \\\n",
       "0                     0  ...                0           0        0.0   \n",
       "1                     0  ...                0           0        0.0   \n",
       "2                    64  ...               20     2624734        0.0   \n",
       "3                     0  ...                0           0        0.0   \n",
       "4                     0  ...               20           0        0.0   \n",
       "...                 ...  ...              ...         ...        ...   \n",
       "1048570               0  ...               40           0        0.0   \n",
       "1048571               0  ...               40           0        0.0   \n",
       "1048572               0  ...               40           0        0.0   \n",
       "1048573               0  ...               40           0        0.0   \n",
       "1048574               0  ...               40           0        0.0   \n",
       "\n",
       "        Active Max Active Min   Idle Mean    Idle Std  Idle Max  Idle Min  \\\n",
       "0                0          0  56300000.0  138.592929  56300000  56300000   \n",
       "1                0          0  56300000.0  263.750829  56300000  56300000   \n",
       "2          2624734    2624734   9058214.0         0.0   9058214   9058214   \n",
       "3                0          0  56300000.0   82.024387  56300000  56300000   \n",
       "4                0          0         0.0         0.0         0         0   \n",
       "...            ...        ...         ...         ...       ...       ...   \n",
       "1048570          0          0           0         0.0         0         0   \n",
       "1048571          0          0           0         0.0         0         0   \n",
       "1048572          0          0           0         0.0         0         0   \n",
       "1048573          0          0           0         0.0         0         0   \n",
       "1048574          0          0           0         0.0         0         0   \n",
       "\n",
       "                            Label  \n",
       "0                          Benign  \n",
       "1                          Benign  \n",
       "2                          Benign  \n",
       "3                          Benign  \n",
       "4                          Benign  \n",
       "...                           ...  \n",
       "1048570  DoS attacks-SlowHTTPTest  \n",
       "1048571  DoS attacks-SlowHTTPTest  \n",
       "1048572  DoS attacks-SlowHTTPTest  \n",
       "1048573  DoS attacks-SlowHTTPTest  \n",
       "1048574  DoS attacks-SlowHTTPTest  \n",
       "\n",
       "[1048575 rows x 80 columns]"
      ]
     },
     "execution_count": 8,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "df_friday2"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 9,
   "id": "62fed331",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/plain": [
       "Index(['Dst Port', 'Protocol', 'Timestamp', 'Flow Duration', 'Tot Fwd Pkts',\n",
       "       'Tot Bwd Pkts', 'TotLen Fwd Pkts', 'TotLen Bwd Pkts', 'Fwd Pkt Len Max',\n",
       "       'Fwd Pkt Len Min', 'Fwd Pkt Len Mean', 'Fwd Pkt Len Std',\n",
       "       'Bwd Pkt Len Max', 'Bwd Pkt Len Min', 'Bwd Pkt Len Mean',\n",
       "       'Bwd Pkt Len Std', 'Flow Byts/s', 'Flow Pkts/s', 'Flow IAT Mean',\n",
       "       'Flow IAT Std', 'Flow IAT Max', 'Flow IAT Min', 'Fwd IAT Tot',\n",
       "       'Fwd IAT Mean', 'Fwd IAT Std', 'Fwd IAT Max', 'Fwd IAT Min',\n",
       "       'Bwd IAT Tot', 'Bwd IAT Mean', 'Bwd IAT Std', 'Bwd IAT Max',\n",
       "       'Bwd IAT Min', 'Fwd PSH Flags', 'Bwd PSH Flags', 'Fwd URG Flags',\n",
       "       'Bwd URG Flags', 'Fwd Header Len', 'Bwd Header Len', 'Fwd Pkts/s',\n",
       "       'Bwd Pkts/s', 'Pkt Len Min', 'Pkt Len Max', 'Pkt Len Mean',\n",
       "       'Pkt Len Std', 'Pkt Len Var', 'FIN Flag Cnt', 'SYN Flag Cnt',\n",
       "       'RST Flag Cnt', 'PSH Flag Cnt', 'ACK Flag Cnt', 'URG Flag Cnt',\n",
       "       'CWE Flag Count', 'ECE Flag Cnt', 'Down/Up Ratio', 'Pkt Size Avg',\n",
       "       'Fwd Seg Size Avg', 'Bwd Seg Size Avg', 'Fwd Byts/b Avg',\n",
       "       'Fwd Pkts/b Avg', 'Fwd Blk Rate Avg', 'Bwd Byts/b Avg',\n",
       "       'Bwd Pkts/b Avg', 'Bwd Blk Rate Avg', 'Subflow Fwd Pkts',\n",
       "       'Subflow Fwd Byts', 'Subflow Bwd Pkts', 'Subflow Bwd Byts',\n",
       "       'Init Fwd Win Byts', 'Init Bwd Win Byts', 'Fwd Act Data Pkts',\n",
       "       'Fwd Seg Size Min', 'Active Mean', 'Active Std', 'Active Max',\n",
       "       'Active Min', 'Idle Mean', 'Idle Std', 'Idle Max', 'Idle Min', 'Label'],\n",
       "      dtype='object')"
      ]
     },
     "execution_count": 9,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "df_friday2.columns"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 10,
   "id": "cc2364e9",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/plain": [
       "array(['Benign', 'DoS attacks-SlowHTTPTest', 'DoS attacks-Hulk', 'Label'],\n",
       "      dtype=object)"
      ]
     },
     "execution_count": 10,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "df_friday2[\"Label\"].unique()"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 11,
   "id": "1b37604b",
   "metadata": {},
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "446772\n",
      "139890\n",
      "461912\n",
      "1\n"
     ]
    }
   ],
   "source": [
    "print(df_friday2[\"Label\"].value_counts()[['Benign']].sum())\n",
    "print(df_friday2[\"Label\"].value_counts()[['DoS attacks-SlowHTTPTest']].sum())\n",
    "print(df_friday2[\"Label\"].value_counts()[['DoS attacks-Hulk']].sum())\n",
    "print(df_friday2[\"Label\"].value_counts()[['Label']].sum())"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 12,
   "id": "df1600da",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/html": [
       "<div>\n",
       "<style scoped>\n",
       "    .dataframe tbody tr th:only-of-type {\n",
       "        vertical-align: middle;\n",
       "    }\n",
       "\n",
       "    .dataframe tbody tr th {\n",
       "        vertical-align: top;\n",
       "    }\n",
       "\n",
       "    .dataframe thead th {\n",
       "        text-align: right;\n",
       "    }\n",
       "</style>\n",
       "<table border=\"1\" class=\"dataframe\">\n",
       "  <thead>\n",
       "    <tr style=\"text-align: right;\">\n",
       "      <th></th>\n",
       "      <th>Dst Port</th>\n",
       "      <th>Protocol</th>\n",
       "      <th>Timestamp</th>\n",
       "      <th>Flow Duration</th>\n",
       "      <th>Tot Fwd Pkts</th>\n",
       "      <th>Tot Bwd Pkts</th>\n",
       "      <th>TotLen Fwd Pkts</th>\n",
       "      <th>TotLen Bwd Pkts</th>\n",
       "      <th>Fwd Pkt Len Max</th>\n",
       "      <th>Fwd Pkt Len Min</th>\n",
       "      <th>...</th>\n",
       "      <th>Fwd Seg Size Min</th>\n",
       "      <th>Active Mean</th>\n",
       "      <th>Active Std</th>\n",
       "      <th>Active Max</th>\n",
       "      <th>Active Min</th>\n",
       "      <th>Idle Mean</th>\n",
       "      <th>Idle Std</th>\n",
       "      <th>Idle Max</th>\n",
       "      <th>Idle Min</th>\n",
       "      <th>Label</th>\n",
       "    </tr>\n",
       "  </thead>\n",
       "  <tbody>\n",
       "    <tr>\n",
       "      <th>999999</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "  </tbody>\n",
       "</table>\n",
       "<p>1 rows × 80 columns</p>\n",
       "</div>"
      ],
      "text/plain": [
       "        Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts  \\\n",
       "999999  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "\n",
       "        Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max  \\\n",
       "999999  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "\n",
       "        Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std  \\\n",
       "999999  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "\n",
       "        Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "999999  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "\n",
       "[1 rows x 80 columns]"
      ]
     },
     "execution_count": 12,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "df_friday2.loc[df_friday2[\"Label\"] == \"Label\"]"
   ]
  },
  {
   "cell_type": "markdown",
   "id": "ea4ad649",
   "metadata": {},
   "source": [
    "#### 1.3 Friday-23-02-2018_TrafficForML_CICFlowMeter.csv"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 13,
   "id": "c59d419a",
   "metadata": {},
   "outputs": [],
   "source": [
    "df_friday3 = pd.read_csv(\"CIC-IDS-2018-Dataset/Friday-23-02-2018_TrafficForML_CICFlowMeter.csv\")"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 14,
   "id": "bcc7e714",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/html": [
       "<div>\n",
       "<style scoped>\n",
       "    .dataframe tbody tr th:only-of-type {\n",
       "        vertical-align: middle;\n",
       "    }\n",
       "\n",
       "    .dataframe tbody tr th {\n",
       "        vertical-align: top;\n",
       "    }\n",
       "\n",
       "    .dataframe thead th {\n",
       "        text-align: right;\n",
       "    }\n",
       "</style>\n",
       "<table border=\"1\" class=\"dataframe\">\n",
       "  <thead>\n",
       "    <tr style=\"text-align: right;\">\n",
       "      <th></th>\n",
       "      <th>Dst Port</th>\n",
       "      <th>Protocol</th>\n",
       "      <th>Timestamp</th>\n",
       "      <th>Flow Duration</th>\n",
       "      <th>Tot Fwd Pkts</th>\n",
       "      <th>Tot Bwd Pkts</th>\n",
       "      <th>TotLen Fwd Pkts</th>\n",
       "      <th>TotLen Bwd Pkts</th>\n",
       "      <th>Fwd Pkt Len Max</th>\n",
       "      <th>Fwd Pkt Len Min</th>\n",
       "      <th>...</th>\n",
       "      <th>Fwd Seg Size Min</th>\n",
       "      <th>Active Mean</th>\n",
       "      <th>Active Std</th>\n",
       "      <th>Active Max</th>\n",
       "      <th>Active Min</th>\n",
       "      <th>Idle Mean</th>\n",
       "      <th>Idle Std</th>\n",
       "      <th>Idle Max</th>\n",
       "      <th>Idle Min</th>\n",
       "      <th>Label</th>\n",
       "    </tr>\n",
       "  </thead>\n",
       "  <tbody>\n",
       "    <tr>\n",
       "      <th>0</th>\n",
       "      <td>22</td>\n",
       "      <td>6</td>\n",
       "      <td>23/02/2018 08:18:29</td>\n",
       "      <td>1532698</td>\n",
       "      <td>11</td>\n",
       "      <td>11</td>\n",
       "      <td>1179</td>\n",
       "      <td>1969</td>\n",
       "      <td>648</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>32</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.000000e+00</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1</th>\n",
       "      <td>500</td>\n",
       "      <td>17</td>\n",
       "      <td>23/02/2018 08:17:45</td>\n",
       "      <td>117573855</td>\n",
       "      <td>3</td>\n",
       "      <td>0</td>\n",
       "      <td>1500</td>\n",
       "      <td>0</td>\n",
       "      <td>500</td>\n",
       "      <td>500</td>\n",
       "      <td>...</td>\n",
       "      <td>8</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>58786927.5</td>\n",
       "      <td>2.375324e+07</td>\n",
       "      <td>75583006</td>\n",
       "      <td>41990849</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>2</th>\n",
       "      <td>500</td>\n",
       "      <td>17</td>\n",
       "      <td>23/02/2018 08:17:45</td>\n",
       "      <td>117573848</td>\n",
       "      <td>3</td>\n",
       "      <td>0</td>\n",
       "      <td>1500</td>\n",
       "      <td>0</td>\n",
       "      <td>500</td>\n",
       "      <td>500</td>\n",
       "      <td>...</td>\n",
       "      <td>8</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>58786924.0</td>\n",
       "      <td>2.375325e+07</td>\n",
       "      <td>75583007</td>\n",
       "      <td>41990841</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>3</th>\n",
       "      <td>22</td>\n",
       "      <td>6</td>\n",
       "      <td>23/02/2018 08:19:55</td>\n",
       "      <td>1745392</td>\n",
       "      <td>11</td>\n",
       "      <td>11</td>\n",
       "      <td>1179</td>\n",
       "      <td>1969</td>\n",
       "      <td>648</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>32</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.000000e+00</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>4</th>\n",
       "      <td>500</td>\n",
       "      <td>17</td>\n",
       "      <td>23/02/2018 08:18:17</td>\n",
       "      <td>89483474</td>\n",
       "      <td>6</td>\n",
       "      <td>0</td>\n",
       "      <td>3000</td>\n",
       "      <td>0</td>\n",
       "      <td>500</td>\n",
       "      <td>500</td>\n",
       "      <td>...</td>\n",
       "      <td>8</td>\n",
       "      <td>4000364.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>4000364</td>\n",
       "      <td>4000364</td>\n",
       "      <td>21370777.5</td>\n",
       "      <td>1.528092e+07</td>\n",
       "      <td>41989576</td>\n",
       "      <td>7200485</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>...</th>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1048570</th>\n",
       "      <td>54116</td>\n",
       "      <td>6</td>\n",
       "      <td>23/02/2018 09:00:54</td>\n",
       "      <td>85992425</td>\n",
       "      <td>2</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>85992425.0</td>\n",
       "      <td>0.000000e+00</td>\n",
       "      <td>85992425</td>\n",
       "      <td>85992425</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1048571</th>\n",
       "      <td>33914</td>\n",
       "      <td>6</td>\n",
       "      <td>23/02/2018 12:31:42</td>\n",
       "      <td>132</td>\n",
       "      <td>2</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.000000e+00</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1048572</th>\n",
       "      <td>53</td>\n",
       "      <td>17</td>\n",
       "      <td>23/02/2018 12:15:24</td>\n",
       "      <td>79134</td>\n",
       "      <td>1</td>\n",
       "      <td>1</td>\n",
       "      <td>41</td>\n",
       "      <td>98</td>\n",
       "      <td>41</td>\n",
       "      <td>41</td>\n",
       "      <td>...</td>\n",
       "      <td>8</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.000000e+00</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1048573</th>\n",
       "      <td>3389</td>\n",
       "      <td>6</td>\n",
       "      <td>23/02/2018 12:45:39</td>\n",
       "      <td>10053785</td>\n",
       "      <td>11</td>\n",
       "      <td>12</td>\n",
       "      <td>1321</td>\n",
       "      <td>1659</td>\n",
       "      <td>677</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.000000e+00</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1048574</th>\n",
       "      <td>445</td>\n",
       "      <td>6</td>\n",
       "      <td>23/02/2018 09:04:11</td>\n",
       "      <td>566835</td>\n",
       "      <td>6</td>\n",
       "      <td>5</td>\n",
       "      <td>455</td>\n",
       "      <td>338</td>\n",
       "      <td>140</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.000000e+00</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "  </tbody>\n",
       "</table>\n",
       "<p>1048575 rows × 80 columns</p>\n",
       "</div>"
      ],
      "text/plain": [
       "         Dst Port  Protocol            Timestamp  Flow Duration  Tot Fwd Pkts  \\\n",
       "0              22         6  23/02/2018 08:18:29        1532698            11   \n",
       "1             500        17  23/02/2018 08:17:45      117573855             3   \n",
       "2             500        17  23/02/2018 08:17:45      117573848             3   \n",
       "3              22         6  23/02/2018 08:19:55        1745392            11   \n",
       "4             500        17  23/02/2018 08:18:17       89483474             6   \n",
       "...           ...       ...                  ...            ...           ...   \n",
       "1048570     54116         6  23/02/2018 09:00:54       85992425             2   \n",
       "1048571     33914         6  23/02/2018 12:31:42            132             2   \n",
       "1048572        53        17  23/02/2018 12:15:24          79134             1   \n",
       "1048573      3389         6  23/02/2018 12:45:39       10053785            11   \n",
       "1048574       445         6  23/02/2018 09:04:11         566835             6   \n",
       "\n",
       "         Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max  \\\n",
       "0                  11             1179             1969              648   \n",
       "1                   0             1500                0              500   \n",
       "2                   0             1500                0              500   \n",
       "3                  11             1179             1969              648   \n",
       "4                   0             3000                0              500   \n",
       "...               ...              ...              ...              ...   \n",
       "1048570             0                0                0                0   \n",
       "1048571             0                0                0                0   \n",
       "1048572             1               41               98               41   \n",
       "1048573            12             1321             1659              677   \n",
       "1048574             5              455              338              140   \n",
       "\n",
       "         Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std  \\\n",
       "0                      0  ...                32          0.0         0.0   \n",
       "1                    500  ...                 8          0.0         0.0   \n",
       "2                    500  ...                 8          0.0         0.0   \n",
       "3                      0  ...                32          0.0         0.0   \n",
       "4                    500  ...                 8    4000364.0         0.0   \n",
       "...                  ...  ...               ...          ...         ...   \n",
       "1048570                0  ...                20          0.0         0.0   \n",
       "1048571                0  ...                20          0.0         0.0   \n",
       "1048572               41  ...                 8          0.0         0.0   \n",
       "1048573                0  ...                20          0.0         0.0   \n",
       "1048574                0  ...                20          0.0         0.0   \n",
       "\n",
       "         Active Max  Active Min   Idle Mean      Idle Std  Idle Max  Idle Min  \\\n",
       "0                 0           0         0.0  0.000000e+00         0         0   \n",
       "1                 0           0  58786927.5  2.375324e+07  75583006  41990849   \n",
       "2                 0           0  58786924.0  2.375325e+07  75583007  41990841   \n",
       "3                 0           0         0.0  0.000000e+00         0         0   \n",
       "4           4000364     4000364  21370777.5  1.528092e+07  41989576   7200485   \n",
       "...             ...         ...         ...           ...       ...       ...   \n",
       "1048570           0           0  85992425.0  0.000000e+00  85992425  85992425   \n",
       "1048571           0           0         0.0  0.000000e+00         0         0   \n",
       "1048572           0           0         0.0  0.000000e+00         0         0   \n",
       "1048573           0           0         0.0  0.000000e+00         0         0   \n",
       "1048574           0           0         0.0  0.000000e+00         0         0   \n",
       "\n",
       "          Label  \n",
       "0        Benign  \n",
       "1        Benign  \n",
       "2        Benign  \n",
       "3        Benign  \n",
       "4        Benign  \n",
       "...         ...  \n",
       "1048570  Benign  \n",
       "1048571  Benign  \n",
       "1048572  Benign  \n",
       "1048573  Benign  \n",
       "1048574  Benign  \n",
       "\n",
       "[1048575 rows x 80 columns]"
      ]
     },
     "execution_count": 14,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "df_friday3"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 15,
   "id": "7e2a0b06",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/plain": [
       "Index(['Dst Port', 'Protocol', 'Timestamp', 'Flow Duration', 'Tot Fwd Pkts',\n",
       "       'Tot Bwd Pkts', 'TotLen Fwd Pkts', 'TotLen Bwd Pkts', 'Fwd Pkt Len Max',\n",
       "       'Fwd Pkt Len Min', 'Fwd Pkt Len Mean', 'Fwd Pkt Len Std',\n",
       "       'Bwd Pkt Len Max', 'Bwd Pkt Len Min', 'Bwd Pkt Len Mean',\n",
       "       'Bwd Pkt Len Std', 'Flow Byts/s', 'Flow Pkts/s', 'Flow IAT Mean',\n",
       "       'Flow IAT Std', 'Flow IAT Max', 'Flow IAT Min', 'Fwd IAT Tot',\n",
       "       'Fwd IAT Mean', 'Fwd IAT Std', 'Fwd IAT Max', 'Fwd IAT Min',\n",
       "       'Bwd IAT Tot', 'Bwd IAT Mean', 'Bwd IAT Std', 'Bwd IAT Max',\n",
       "       'Bwd IAT Min', 'Fwd PSH Flags', 'Bwd PSH Flags', 'Fwd URG Flags',\n",
       "       'Bwd URG Flags', 'Fwd Header Len', 'Bwd Header Len', 'Fwd Pkts/s',\n",
       "       'Bwd Pkts/s', 'Pkt Len Min', 'Pkt Len Max', 'Pkt Len Mean',\n",
       "       'Pkt Len Std', 'Pkt Len Var', 'FIN Flag Cnt', 'SYN Flag Cnt',\n",
       "       'RST Flag Cnt', 'PSH Flag Cnt', 'ACK Flag Cnt', 'URG Flag Cnt',\n",
       "       'CWE Flag Count', 'ECE Flag Cnt', 'Down/Up Ratio', 'Pkt Size Avg',\n",
       "       'Fwd Seg Size Avg', 'Bwd Seg Size Avg', 'Fwd Byts/b Avg',\n",
       "       'Fwd Pkts/b Avg', 'Fwd Blk Rate Avg', 'Bwd Byts/b Avg',\n",
       "       'Bwd Pkts/b Avg', 'Bwd Blk Rate Avg', 'Subflow Fwd Pkts',\n",
       "       'Subflow Fwd Byts', 'Subflow Bwd Pkts', 'Subflow Bwd Byts',\n",
       "       'Init Fwd Win Byts', 'Init Bwd Win Byts', 'Fwd Act Data Pkts',\n",
       "       'Fwd Seg Size Min', 'Active Mean', 'Active Std', 'Active Max',\n",
       "       'Active Min', 'Idle Mean', 'Idle Std', 'Idle Max', 'Idle Min', 'Label'],\n",
       "      dtype='object')"
      ]
     },
     "execution_count": 15,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "df_friday3.columns"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 16,
   "id": "41b2564e",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/plain": [
       "array(['Benign', 'Brute Force -Web', 'Brute Force -XSS', 'SQL Injection'],\n",
       "      dtype=object)"
      ]
     },
     "execution_count": 16,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "df_friday3[\"Label\"].unique()"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 17,
   "id": "da6aef74",
   "metadata": {},
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "1048009\n",
      "362\n",
      "151\n",
      "53\n"
     ]
    }
   ],
   "source": [
    "print(df_friday3[\"Label\"].value_counts()[['Benign']].sum())\n",
    "print(df_friday3[\"Label\"].value_counts()[['Brute Force -Web']].sum())\n",
    "print(df_friday3[\"Label\"].value_counts()[['Brute Force -XSS']].sum())\n",
    "print(df_friday3[\"Label\"].value_counts()[['SQL Injection']].sum())"
   ]
  },
  {
   "cell_type": "markdown",
   "id": "68cbacf2",
   "metadata": {},
   "source": [
    "### 2- Thursday logs"
   ]
  },
  {
   "cell_type": "markdown",
   "id": "1db5aa63",
   "metadata": {},
   "source": [
    "#### 2.1 Thuesday-20-02-2018_TrafficForML_CICFlowMeter.csv"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 18,
   "id": "98cefb9e",
   "metadata": {},
   "outputs": [],
   "source": [
    "df_thursday1 = pd.read_csv(\"CIC-IDS-2018-Dataset/Thuesday-20-02-2018_TrafficForML_CICFlowMeter.csv\")"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 19,
   "id": "d79b30f8",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/html": [
       "<div>\n",
       "<style scoped>\n",
       "    .dataframe tbody tr th:only-of-type {\n",
       "        vertical-align: middle;\n",
       "    }\n",
       "\n",
       "    .dataframe tbody tr th {\n",
       "        vertical-align: top;\n",
       "    }\n",
       "\n",
       "    .dataframe thead th {\n",
       "        text-align: right;\n",
       "    }\n",
       "</style>\n",
       "<table border=\"1\" class=\"dataframe\">\n",
       "  <thead>\n",
       "    <tr style=\"text-align: right;\">\n",
       "      <th></th>\n",
       "      <th>Flow ID</th>\n",
       "      <th>Src IP</th>\n",
       "      <th>Src Port</th>\n",
       "      <th>Dst IP</th>\n",
       "      <th>Dst Port</th>\n",
       "      <th>Protocol</th>\n",
       "      <th>Timestamp</th>\n",
       "      <th>Flow Duration</th>\n",
       "      <th>Tot Fwd Pkts</th>\n",
       "      <th>Tot Bwd Pkts</th>\n",
       "      <th>...</th>\n",
       "      <th>Fwd Seg Size Min</th>\n",
       "      <th>Active Mean</th>\n",
       "      <th>Active Std</th>\n",
       "      <th>Active Max</th>\n",
       "      <th>Active Min</th>\n",
       "      <th>Idle Mean</th>\n",
       "      <th>Idle Std</th>\n",
       "      <th>Idle Max</th>\n",
       "      <th>Idle Min</th>\n",
       "      <th>Label</th>\n",
       "    </tr>\n",
       "  </thead>\n",
       "  <tbody>\n",
       "    <tr>\n",
       "      <th>0</th>\n",
       "      <td>172.31.69.25-94.231.103.172-22-45498-6</td>\n",
       "      <td>94.231.103.172</td>\n",
       "      <td>45498</td>\n",
       "      <td>172.31.69.25</td>\n",
       "      <td>22</td>\n",
       "      <td>6</td>\n",
       "      <td>20/02/2018 08:34:07</td>\n",
       "      <td>888751</td>\n",
       "      <td>11</td>\n",
       "      <td>11</td>\n",
       "      <td>...</td>\n",
       "      <td>32</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.000000</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1</th>\n",
       "      <td>8.0.6.4-8.6.0.1-0-0-0</td>\n",
       "      <td>8.6.0.1</td>\n",
       "      <td>0</td>\n",
       "      <td>8.0.6.4</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>20/02/2018 08:33:22</td>\n",
       "      <td>112642816</td>\n",
       "      <td>3</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>56300000.0</td>\n",
       "      <td>7.071068</td>\n",
       "      <td>56300000.0</td>\n",
       "      <td>56300000.0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>2</th>\n",
       "      <td>8.0.6.4-8.6.0.1-0-0-0</td>\n",
       "      <td>8.6.0.1</td>\n",
       "      <td>0</td>\n",
       "      <td>8.0.6.4</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>20/02/2018 08:36:11</td>\n",
       "      <td>112642712</td>\n",
       "      <td>3</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>56300000.0</td>\n",
       "      <td>18.384776</td>\n",
       "      <td>56300000.0</td>\n",
       "      <td>56300000.0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>3</th>\n",
       "      <td>8.0.6.4-8.6.0.1-0-0-0</td>\n",
       "      <td>8.6.0.1</td>\n",
       "      <td>0</td>\n",
       "      <td>8.0.6.4</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>20/02/2018 08:39:00</td>\n",
       "      <td>112642648</td>\n",
       "      <td>3</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>56300000.0</td>\n",
       "      <td>5.656854</td>\n",
       "      <td>56300000.0</td>\n",
       "      <td>56300000.0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>4</th>\n",
       "      <td>8.0.6.4-8.6.0.1-0-0-0</td>\n",
       "      <td>8.6.0.1</td>\n",
       "      <td>0</td>\n",
       "      <td>8.0.6.4</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>20/02/2018 08:41:49</td>\n",
       "      <td>112642702</td>\n",
       "      <td>3</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>56300000.0</td>\n",
       "      <td>65.053824</td>\n",
       "      <td>56300000.0</td>\n",
       "      <td>56300000.0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>...</th>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>7948743</th>\n",
       "      <td>172.31.69.7-185.2.197.19-623-42801-6</td>\n",
       "      <td>185.2.197.19</td>\n",
       "      <td>42801</td>\n",
       "      <td>172.31.69.7</td>\n",
       "      <td>623</td>\n",
       "      <td>6</td>\n",
       "      <td>20/02/2018 01:41:45</td>\n",
       "      <td>94042</td>\n",
       "      <td>2</td>\n",
       "      <td>1</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.000000</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>7948744</th>\n",
       "      <td>172.31.69.7-195.22.125.42-22-2178-6</td>\n",
       "      <td>195.22.125.42</td>\n",
       "      <td>2178</td>\n",
       "      <td>172.31.69.7</td>\n",
       "      <td>22</td>\n",
       "      <td>6</td>\n",
       "      <td>20/02/2018 11:51:06</td>\n",
       "      <td>251281</td>\n",
       "      <td>4</td>\n",
       "      <td>2</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.000000</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>7948745</th>\n",
       "      <td>172.31.69.7-107.3.188.61-23-14259-6</td>\n",
       "      <td>107.3.188.61</td>\n",
       "      <td>14259</td>\n",
       "      <td>172.31.69.7</td>\n",
       "      <td>23</td>\n",
       "      <td>6</td>\n",
       "      <td>20/02/2018 08:49:20</td>\n",
       "      <td>21</td>\n",
       "      <td>1</td>\n",
       "      <td>1</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.000000</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>7948746</th>\n",
       "      <td>172.31.69.7-5.188.11.188-3039-54193-6</td>\n",
       "      <td>5.188.11.188</td>\n",
       "      <td>54193</td>\n",
       "      <td>172.31.69.7</td>\n",
       "      <td>3039</td>\n",
       "      <td>6</td>\n",
       "      <td>20/02/2018 02:00:54</td>\n",
       "      <td>181954</td>\n",
       "      <td>2</td>\n",
       "      <td>1</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.000000</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>7948747</th>\n",
       "      <td>172.31.69.7-188.19.76.194-445-57958-6</td>\n",
       "      <td>188.19.76.194</td>\n",
       "      <td>57958</td>\n",
       "      <td>172.31.69.7</td>\n",
       "      <td>445</td>\n",
       "      <td>6</td>\n",
       "      <td>20/02/2018 04:07:01</td>\n",
       "      <td>687378</td>\n",
       "      <td>2</td>\n",
       "      <td>2</td>\n",
       "      <td>...</td>\n",
       "      <td>32</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.000000</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "  </tbody>\n",
       "</table>\n",
       "<p>7948748 rows × 84 columns</p>\n",
       "</div>"
      ],
      "text/plain": [
       "                                        Flow ID          Src IP  Src Port  \\\n",
       "0        172.31.69.25-94.231.103.172-22-45498-6  94.231.103.172     45498   \n",
       "1                         8.0.6.4-8.6.0.1-0-0-0         8.6.0.1         0   \n",
       "2                         8.0.6.4-8.6.0.1-0-0-0         8.6.0.1         0   \n",
       "3                         8.0.6.4-8.6.0.1-0-0-0         8.6.0.1         0   \n",
       "4                         8.0.6.4-8.6.0.1-0-0-0         8.6.0.1         0   \n",
       "...                                         ...             ...       ...   \n",
       "7948743    172.31.69.7-185.2.197.19-623-42801-6    185.2.197.19     42801   \n",
       "7948744     172.31.69.7-195.22.125.42-22-2178-6   195.22.125.42      2178   \n",
       "7948745     172.31.69.7-107.3.188.61-23-14259-6    107.3.188.61     14259   \n",
       "7948746   172.31.69.7-5.188.11.188-3039-54193-6    5.188.11.188     54193   \n",
       "7948747   172.31.69.7-188.19.76.194-445-57958-6   188.19.76.194     57958   \n",
       "\n",
       "               Dst IP  Dst Port  Protocol            Timestamp  Flow Duration  \\\n",
       "0        172.31.69.25        22         6  20/02/2018 08:34:07         888751   \n",
       "1             8.0.6.4         0         0  20/02/2018 08:33:22      112642816   \n",
       "2             8.0.6.4         0         0  20/02/2018 08:36:11      112642712   \n",
       "3             8.0.6.4         0         0  20/02/2018 08:39:00      112642648   \n",
       "4             8.0.6.4         0         0  20/02/2018 08:41:49      112642702   \n",
       "...               ...       ...       ...                  ...            ...   \n",
       "7948743   172.31.69.7       623         6  20/02/2018 01:41:45          94042   \n",
       "7948744   172.31.69.7        22         6  20/02/2018 11:51:06         251281   \n",
       "7948745   172.31.69.7        23         6  20/02/2018 08:49:20             21   \n",
       "7948746   172.31.69.7      3039         6  20/02/2018 02:00:54         181954   \n",
       "7948747   172.31.69.7       445         6  20/02/2018 04:07:01         687378   \n",
       "\n",
       "         Tot Fwd Pkts  Tot Bwd Pkts  ...  Fwd Seg Size Min  Active Mean  \\\n",
       "0                  11            11  ...                32          0.0   \n",
       "1                   3             0  ...                 0          0.0   \n",
       "2                   3             0  ...                 0          0.0   \n",
       "3                   3             0  ...                 0          0.0   \n",
       "4                   3             0  ...                 0          0.0   \n",
       "...               ...           ...  ...               ...          ...   \n",
       "7948743             2             1  ...                20          0.0   \n",
       "7948744             4             2  ...                20          0.0   \n",
       "7948745             1             1  ...                20          0.0   \n",
       "7948746             2             1  ...                20          0.0   \n",
       "7948747             2             2  ...                32          0.0   \n",
       "\n",
       "         Active Std  Active Max  Active Min   Idle Mean   Idle Std  \\\n",
       "0               0.0         0.0         0.0         0.0   0.000000   \n",
       "1               0.0         0.0         0.0  56300000.0   7.071068   \n",
       "2               0.0         0.0         0.0  56300000.0  18.384776   \n",
       "3               0.0         0.0         0.0  56300000.0   5.656854   \n",
       "4               0.0         0.0         0.0  56300000.0  65.053824   \n",
       "...             ...         ...         ...         ...        ...   \n",
       "7948743         0.0         0.0         0.0         0.0   0.000000   \n",
       "7948744         0.0         0.0         0.0         0.0   0.000000   \n",
       "7948745         0.0         0.0         0.0         0.0   0.000000   \n",
       "7948746         0.0         0.0         0.0         0.0   0.000000   \n",
       "7948747         0.0         0.0         0.0         0.0   0.000000   \n",
       "\n",
       "           Idle Max    Idle Min   Label  \n",
       "0               0.0         0.0  Benign  \n",
       "1        56300000.0  56300000.0  Benign  \n",
       "2        56300000.0  56300000.0  Benign  \n",
       "3        56300000.0  56300000.0  Benign  \n",
       "4        56300000.0  56300000.0  Benign  \n",
       "...             ...         ...     ...  \n",
       "7948743         0.0         0.0  Benign  \n",
       "7948744         0.0         0.0  Benign  \n",
       "7948745         0.0         0.0  Benign  \n",
       "7948746         0.0         0.0  Benign  \n",
       "7948747         0.0         0.0  Benign  \n",
       "\n",
       "[7948748 rows x 84 columns]"
      ]
     },
     "execution_count": 19,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "df_thursday1"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 20,
   "id": "9b048679",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/plain": [
       "Index(['Flow ID', 'Src IP', 'Src Port', 'Dst IP', 'Dst Port', 'Protocol',\n",
       "       'Timestamp', 'Flow Duration', 'Tot Fwd Pkts', 'Tot Bwd Pkts',\n",
       "       'TotLen Fwd Pkts', 'TotLen Bwd Pkts', 'Fwd Pkt Len Max',\n",
       "       'Fwd Pkt Len Min', 'Fwd Pkt Len Mean', 'Fwd Pkt Len Std',\n",
       "       'Bwd Pkt Len Max', 'Bwd Pkt Len Min', 'Bwd Pkt Len Mean',\n",
       "       'Bwd Pkt Len Std', 'Flow Byts/s', 'Flow Pkts/s', 'Flow IAT Mean',\n",
       "       'Flow IAT Std', 'Flow IAT Max', 'Flow IAT Min', 'Fwd IAT Tot',\n",
       "       'Fwd IAT Mean', 'Fwd IAT Std', 'Fwd IAT Max', 'Fwd IAT Min',\n",
       "       'Bwd IAT Tot', 'Bwd IAT Mean', 'Bwd IAT Std', 'Bwd IAT Max',\n",
       "       'Bwd IAT Min', 'Fwd PSH Flags', 'Bwd PSH Flags', 'Fwd URG Flags',\n",
       "       'Bwd URG Flags', 'Fwd Header Len', 'Bwd Header Len', 'Fwd Pkts/s',\n",
       "       'Bwd Pkts/s', 'Pkt Len Min', 'Pkt Len Max', 'Pkt Len Mean',\n",
       "       'Pkt Len Std', 'Pkt Len Var', 'FIN Flag Cnt', 'SYN Flag Cnt',\n",
       "       'RST Flag Cnt', 'PSH Flag Cnt', 'ACK Flag Cnt', 'URG Flag Cnt',\n",
       "       'CWE Flag Count', 'ECE Flag Cnt', 'Down/Up Ratio', 'Pkt Size Avg',\n",
       "       'Fwd Seg Size Avg', 'Bwd Seg Size Avg', 'Fwd Byts/b Avg',\n",
       "       'Fwd Pkts/b Avg', 'Fwd Blk Rate Avg', 'Bwd Byts/b Avg',\n",
       "       'Bwd Pkts/b Avg', 'Bwd Blk Rate Avg', 'Subflow Fwd Pkts',\n",
       "       'Subflow Fwd Byts', 'Subflow Bwd Pkts', 'Subflow Bwd Byts',\n",
       "       'Init Fwd Win Byts', 'Init Bwd Win Byts', 'Fwd Act Data Pkts',\n",
       "       'Fwd Seg Size Min', 'Active Mean', 'Active Std', 'Active Max',\n",
       "       'Active Min', 'Idle Mean', 'Idle Std', 'Idle Max', 'Idle Min', 'Label'],\n",
       "      dtype='object')"
      ]
     },
     "execution_count": 20,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "df_thursday1.columns"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 21,
   "id": "d317d19c",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/plain": [
       "array(['Benign', 'DDoS attacks-LOIC-HTTP'], dtype=object)"
      ]
     },
     "execution_count": 21,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "df_thursday1[\"Label\"].unique()"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 22,
   "id": "3c1d8e2b",
   "metadata": {},
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "7372557\n",
      "576191\n"
     ]
    }
   ],
   "source": [
    "print(df_thursday1[\"Label\"].value_counts()[['Benign']].sum())\n",
    "print(df_thursday1[\"Label\"].value_counts()[['DDoS attacks-LOIC-HTTP']].sum())"
   ]
  },
  {
   "cell_type": "markdown",
   "id": "7e6c311b",
   "metadata": {},
   "source": [
    "#### 2.2 Thursday-01-03-2018_TrafficForML_CICFlowMeter.csv"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 23,
   "id": "2dc4d94c",
   "metadata": {},
   "outputs": [
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      "/home/tamer/anaconda3/envs/cic-ids-2018/lib/python3.7/site-packages/IPython/core/interactiveshell.py:3444: DtypeWarning: Columns (0,1,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78) have mixed types.Specify dtype option on import or set low_memory=False.\n",
      "  exec(code_obj, self.user_global_ns, self.user_ns)\n"
     ]
    }
   ],
   "source": [
    "df_thursday2 = pd.read_csv(\"CIC-IDS-2018-Dataset/Thursday-01-03-2018_TrafficForML_CICFlowMeter.csv\")"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 24,
   "id": "a1d2993f",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/html": [
       "<div>\n",
       "<style scoped>\n",
       "    .dataframe tbody tr th:only-of-type {\n",
       "        vertical-align: middle;\n",
       "    }\n",
       "\n",
       "    .dataframe tbody tr th {\n",
       "        vertical-align: top;\n",
       "    }\n",
       "\n",
       "    .dataframe thead th {\n",
       "        text-align: right;\n",
       "    }\n",
       "</style>\n",
       "<table border=\"1\" class=\"dataframe\">\n",
       "  <thead>\n",
       "    <tr style=\"text-align: right;\">\n",
       "      <th></th>\n",
       "      <th>Dst Port</th>\n",
       "      <th>Protocol</th>\n",
       "      <th>Timestamp</th>\n",
       "      <th>Flow Duration</th>\n",
       "      <th>Tot Fwd Pkts</th>\n",
       "      <th>Tot Bwd Pkts</th>\n",
       "      <th>TotLen Fwd Pkts</th>\n",
       "      <th>TotLen Bwd Pkts</th>\n",
       "      <th>Fwd Pkt Len Max</th>\n",
       "      <th>Fwd Pkt Len Min</th>\n",
       "      <th>...</th>\n",
       "      <th>Fwd Seg Size Min</th>\n",
       "      <th>Active Mean</th>\n",
       "      <th>Active Std</th>\n",
       "      <th>Active Max</th>\n",
       "      <th>Active Min</th>\n",
       "      <th>Idle Mean</th>\n",
       "      <th>Idle Std</th>\n",
       "      <th>Idle Max</th>\n",
       "      <th>Idle Min</th>\n",
       "      <th>Label</th>\n",
       "    </tr>\n",
       "  </thead>\n",
       "  <tbody>\n",
       "    <tr>\n",
       "      <th>0</th>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>01/03/2018 08:17:11</td>\n",
       "      <td>115307855</td>\n",
       "      <td>5</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>0</td>\n",
       "      <td>1812348</td>\n",
       "      <td>0</td>\n",
       "      <td>1812348</td>\n",
       "      <td>1812348</td>\n",
       "      <td>56700000</td>\n",
       "      <td>6010057.622</td>\n",
       "      <td>61000000</td>\n",
       "      <td>52500000</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1</th>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>01/03/2018 08:20:07</td>\n",
       "      <td>60997457</td>\n",
       "      <td>2</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>61000000</td>\n",
       "      <td>0</td>\n",
       "      <td>61000000</td>\n",
       "      <td>61000000</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>2</th>\n",
       "      <td>67</td>\n",
       "      <td>17</td>\n",
       "      <td>01/03/2018 08:17:18</td>\n",
       "      <td>61149019</td>\n",
       "      <td>5</td>\n",
       "      <td>0</td>\n",
       "      <td>1500</td>\n",
       "      <td>0</td>\n",
       "      <td>300</td>\n",
       "      <td>300</td>\n",
       "      <td>...</td>\n",
       "      <td>8</td>\n",
       "      <td>3530939</td>\n",
       "      <td>0</td>\n",
       "      <td>3530939</td>\n",
       "      <td>3530939</td>\n",
       "      <td>19200000</td>\n",
       "      <td>12500000</td>\n",
       "      <td>32600000</td>\n",
       "      <td>7999725</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>3</th>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>01/03/2018 08:22:09</td>\n",
       "      <td>60997555</td>\n",
       "      <td>2</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>61000000</td>\n",
       "      <td>0</td>\n",
       "      <td>61000000</td>\n",
       "      <td>61000000</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>4</th>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>01/03/2018 08:24:11</td>\n",
       "      <td>61997503</td>\n",
       "      <td>3</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>0</td>\n",
       "      <td>999909</td>\n",
       "      <td>0</td>\n",
       "      <td>999909</td>\n",
       "      <td>999909</td>\n",
       "      <td>61000000</td>\n",
       "      <td>0</td>\n",
       "      <td>61000000</td>\n",
       "      <td>61000000</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>...</th>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>331120</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>331121</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>331122</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>331123</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>331124</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "  </tbody>\n",
       "</table>\n",
       "<p>331125 rows × 80 columns</p>\n",
       "</div>"
      ],
      "text/plain": [
       "        Dst Port  Protocol            Timestamp  Flow Duration  Tot Fwd Pkts  \\\n",
       "0              0         0  01/03/2018 08:17:11      115307855             5   \n",
       "1              0         0  01/03/2018 08:20:07       60997457             2   \n",
       "2             67        17  01/03/2018 08:17:18       61149019             5   \n",
       "3              0         0  01/03/2018 08:22:09       60997555             2   \n",
       "4              0         0  01/03/2018 08:24:11       61997503             3   \n",
       "...          ...       ...                  ...            ...           ...   \n",
       "331120  Dst Port  Protocol            Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "331121  Dst Port  Protocol            Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "331122  Dst Port  Protocol            Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "331123  Dst Port  Protocol            Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "331124  Dst Port  Protocol            Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "\n",
       "        Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max  \\\n",
       "0                  0                0                0                0   \n",
       "1                  0                0                0                0   \n",
       "2                  0             1500                0              300   \n",
       "3                  0                0                0                0   \n",
       "4                  0                0                0                0   \n",
       "...              ...              ...              ...              ...   \n",
       "331120  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "331121  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "331122  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "331123  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "331124  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "\n",
       "        Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std  \\\n",
       "0                     0  ...                 0      1812348           0   \n",
       "1                     0  ...                 0            0           0   \n",
       "2                   300  ...                 8      3530939           0   \n",
       "3                     0  ...                 0            0           0   \n",
       "4                     0  ...                 0       999909           0   \n",
       "...                 ...  ...               ...          ...         ...   \n",
       "331120  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "331121  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "331122  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "331123  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "331124  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "\n",
       "        Active Max  Active Min  Idle Mean     Idle Std  Idle Max  Idle Min  \\\n",
       "0          1812348     1812348   56700000  6010057.622  61000000  52500000   \n",
       "1                0           0   61000000            0  61000000  61000000   \n",
       "2          3530939     3530939   19200000     12500000  32600000   7999725   \n",
       "3                0           0   61000000            0  61000000  61000000   \n",
       "4           999909      999909   61000000            0  61000000  61000000   \n",
       "...            ...         ...        ...          ...       ...       ...   \n",
       "331120  Active Max  Active Min  Idle Mean     Idle Std  Idle Max  Idle Min   \n",
       "331121  Active Max  Active Min  Idle Mean     Idle Std  Idle Max  Idle Min   \n",
       "331122  Active Max  Active Min  Idle Mean     Idle Std  Idle Max  Idle Min   \n",
       "331123  Active Max  Active Min  Idle Mean     Idle Std  Idle Max  Idle Min   \n",
       "331124  Active Max  Active Min  Idle Mean     Idle Std  Idle Max  Idle Min   \n",
       "\n",
       "         Label  \n",
       "0       Benign  \n",
       "1       Benign  \n",
       "2       Benign  \n",
       "3       Benign  \n",
       "4       Benign  \n",
       "...        ...  \n",
       "331120   Label  \n",
       "331121   Label  \n",
       "331122   Label  \n",
       "331123   Label  \n",
       "331124   Label  \n",
       "\n",
       "[331125 rows x 80 columns]"
      ]
     },
     "execution_count": 24,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "df_thursday2"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 25,
   "id": "37cdb159",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/plain": [
       "Index(['Dst Port', 'Protocol', 'Timestamp', 'Flow Duration', 'Tot Fwd Pkts',\n",
       "       'Tot Bwd Pkts', 'TotLen Fwd Pkts', 'TotLen Bwd Pkts', 'Fwd Pkt Len Max',\n",
       "       'Fwd Pkt Len Min', 'Fwd Pkt Len Mean', 'Fwd Pkt Len Std',\n",
       "       'Bwd Pkt Len Max', 'Bwd Pkt Len Min', 'Bwd Pkt Len Mean',\n",
       "       'Bwd Pkt Len Std', 'Flow Byts/s', 'Flow Pkts/s', 'Flow IAT Mean',\n",
       "       'Flow IAT Std', 'Flow IAT Max', 'Flow IAT Min', 'Fwd IAT Tot',\n",
       "       'Fwd IAT Mean', 'Fwd IAT Std', 'Fwd IAT Max', 'Fwd IAT Min',\n",
       "       'Bwd IAT Tot', 'Bwd IAT Mean', 'Bwd IAT Std', 'Bwd IAT Max',\n",
       "       'Bwd IAT Min', 'Fwd PSH Flags', 'Bwd PSH Flags', 'Fwd URG Flags',\n",
       "       'Bwd URG Flags', 'Fwd Header Len', 'Bwd Header Len', 'Fwd Pkts/s',\n",
       "       'Bwd Pkts/s', 'Pkt Len Min', 'Pkt Len Max', 'Pkt Len Mean',\n",
       "       'Pkt Len Std', 'Pkt Len Var', 'FIN Flag Cnt', 'SYN Flag Cnt',\n",
       "       'RST Flag Cnt', 'PSH Flag Cnt', 'ACK Flag Cnt', 'URG Flag Cnt',\n",
       "       'CWE Flag Count', 'ECE Flag Cnt', 'Down/Up Ratio', 'Pkt Size Avg',\n",
       "       'Fwd Seg Size Avg', 'Bwd Seg Size Avg', 'Fwd Byts/b Avg',\n",
       "       'Fwd Pkts/b Avg', 'Fwd Blk Rate Avg', 'Bwd Byts/b Avg',\n",
       "       'Bwd Pkts/b Avg', 'Bwd Blk Rate Avg', 'Subflow Fwd Pkts',\n",
       "       'Subflow Fwd Byts', 'Subflow Bwd Pkts', 'Subflow Bwd Byts',\n",
       "       'Init Fwd Win Byts', 'Init Bwd Win Byts', 'Fwd Act Data Pkts',\n",
       "       'Fwd Seg Size Min', 'Active Mean', 'Active Std', 'Active Max',\n",
       "       'Active Min', 'Idle Mean', 'Idle Std', 'Idle Max', 'Idle Min', 'Label'],\n",
       "      dtype='object')"
      ]
     },
     "execution_count": 25,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "df_thursday2.columns"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 26,
   "id": "a7f8c2b9",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/plain": [
       "array(['Benign', 'Label', 'Infilteration'], dtype=object)"
      ]
     },
     "execution_count": 26,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "df_thursday2[\"Label\"].unique()"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 27,
   "id": "f957c691",
   "metadata": {},
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "238037\n",
      "25\n",
      "93063\n"
     ]
    }
   ],
   "source": [
    "print(df_thursday2[\"Label\"].value_counts()[['Benign']].sum())\n",
    "print(df_thursday2[\"Label\"].value_counts()[['Label']].sum())\n",
    "print(df_thursday2[\"Label\"].value_counts()[['Infilteration']].sum())"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 28,
   "id": "792ee1f7",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/html": [
       "<div>\n",
       "<style scoped>\n",
       "    .dataframe tbody tr th:only-of-type {\n",
       "        vertical-align: middle;\n",
       "    }\n",
       "\n",
       "    .dataframe tbody tr th {\n",
       "        vertical-align: top;\n",
       "    }\n",
       "\n",
       "    .dataframe thead th {\n",
       "        text-align: right;\n",
       "    }\n",
       "</style>\n",
       "<table border=\"1\" class=\"dataframe\">\n",
       "  <thead>\n",
       "    <tr style=\"text-align: right;\">\n",
       "      <th></th>\n",
       "      <th>Dst Port</th>\n",
       "      <th>Protocol</th>\n",
       "      <th>Timestamp</th>\n",
       "      <th>Flow Duration</th>\n",
       "      <th>Tot Fwd Pkts</th>\n",
       "      <th>Tot Bwd Pkts</th>\n",
       "      <th>TotLen Fwd Pkts</th>\n",
       "      <th>TotLen Bwd Pkts</th>\n",
       "      <th>Fwd Pkt Len Max</th>\n",
       "      <th>Fwd Pkt Len Min</th>\n",
       "      <th>...</th>\n",
       "      <th>Fwd Seg Size Min</th>\n",
       "      <th>Active Mean</th>\n",
       "      <th>Active Std</th>\n",
       "      <th>Active Max</th>\n",
       "      <th>Active Min</th>\n",
       "      <th>Idle Mean</th>\n",
       "      <th>Idle Std</th>\n",
       "      <th>Idle Max</th>\n",
       "      <th>Idle Min</th>\n",
       "      <th>Label</th>\n",
       "    </tr>\n",
       "  </thead>\n",
       "  <tbody>\n",
       "    <tr>\n",
       "      <th>413</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>19761</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>19906</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>39019</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>60809</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>76528</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>81059</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>85448</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>89953</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>91404</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>92657</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>95060</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>331112</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>331113</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>331114</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>331115</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>331116</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>331117</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>331118</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>331119</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>331120</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>331121</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>331122</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>331123</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>331124</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "  </tbody>\n",
       "</table>\n",
       "<p>25 rows × 80 columns</p>\n",
       "</div>"
      ],
      "text/plain": [
       "        Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts  \\\n",
       "413     Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "19761   Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "19906   Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "39019   Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "60809   Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "76528   Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "81059   Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "85448   Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "89953   Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "91404   Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "92657   Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "95060   Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "331112  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "331113  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "331114  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "331115  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "331116  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "331117  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "331118  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "331119  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "331120  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "331121  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "331122  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "331123  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "331124  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "\n",
       "        Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max  \\\n",
       "413     Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "19761   Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "19906   Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "39019   Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "60809   Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "76528   Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "81059   Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "85448   Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "89953   Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "91404   Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "92657   Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "95060   Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "331112  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "331113  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "331114  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "331115  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "331116  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "331117  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "331118  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "331119  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "331120  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "331121  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "331122  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "331123  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "331124  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "\n",
       "        Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std  \\\n",
       "413     Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "19761   Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "19906   Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "39019   Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "60809   Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "76528   Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "81059   Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "85448   Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "89953   Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "91404   Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "92657   Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "95060   Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "331112  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "331113  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "331114  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "331115  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "331116  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "331117  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "331118  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "331119  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "331120  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "331121  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "331122  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "331123  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "331124  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "\n",
       "        Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "413     Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "19761   Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "19906   Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "39019   Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "60809   Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "76528   Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "81059   Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "85448   Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "89953   Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "91404   Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "92657   Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "95060   Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "331112  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "331113  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "331114  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "331115  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "331116  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "331117  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "331118  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "331119  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "331120  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "331121  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "331122  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "331123  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "331124  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "\n",
       "[25 rows x 80 columns]"
      ]
     },
     "execution_count": 28,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "df_thursday2.loc[df_thursday2[\"Label\"] == \"Label\"]"
   ]
  },
  {
   "cell_type": "markdown",
   "id": "ac24a96e",
   "metadata": {},
   "source": [
    "#### 2.3 Thursday-15-02-2018_TrafficForML_CICFlowMeter.csv"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 29,
   "id": "57530d86",
   "metadata": {},
   "outputs": [],
   "source": [
    "df_thursday3 = pd.read_csv(\"CIC-IDS-2018-Dataset/Thursday-15-02-2018_TrafficForML_CICFlowMeter.csv\")"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 30,
   "id": "2289694d",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/html": [
       "<div>\n",
       "<style scoped>\n",
       "    .dataframe tbody tr th:only-of-type {\n",
       "        vertical-align: middle;\n",
       "    }\n",
       "\n",
       "    .dataframe tbody tr th {\n",
       "        vertical-align: top;\n",
       "    }\n",
       "\n",
       "    .dataframe thead th {\n",
       "        text-align: right;\n",
       "    }\n",
       "</style>\n",
       "<table border=\"1\" class=\"dataframe\">\n",
       "  <thead>\n",
       "    <tr style=\"text-align: right;\">\n",
       "      <th></th>\n",
       "      <th>Dst Port</th>\n",
       "      <th>Protocol</th>\n",
       "      <th>Timestamp</th>\n",
       "      <th>Flow Duration</th>\n",
       "      <th>Tot Fwd Pkts</th>\n",
       "      <th>Tot Bwd Pkts</th>\n",
       "      <th>TotLen Fwd Pkts</th>\n",
       "      <th>TotLen Bwd Pkts</th>\n",
       "      <th>Fwd Pkt Len Max</th>\n",
       "      <th>Fwd Pkt Len Min</th>\n",
       "      <th>...</th>\n",
       "      <th>Fwd Seg Size Min</th>\n",
       "      <th>Active Mean</th>\n",
       "      <th>Active Std</th>\n",
       "      <th>Active Max</th>\n",
       "      <th>Active Min</th>\n",
       "      <th>Idle Mean</th>\n",
       "      <th>Idle Std</th>\n",
       "      <th>Idle Max</th>\n",
       "      <th>Idle Min</th>\n",
       "      <th>Label</th>\n",
       "    </tr>\n",
       "  </thead>\n",
       "  <tbody>\n",
       "    <tr>\n",
       "      <th>0</th>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>15/02/2018 08:25:18</td>\n",
       "      <td>112641158</td>\n",
       "      <td>3</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.000000</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>56320579.0</td>\n",
       "      <td>7.042784e+02</td>\n",
       "      <td>56321077</td>\n",
       "      <td>56320081</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1</th>\n",
       "      <td>22</td>\n",
       "      <td>6</td>\n",
       "      <td>15/02/2018 08:29:05</td>\n",
       "      <td>37366762</td>\n",
       "      <td>14</td>\n",
       "      <td>12</td>\n",
       "      <td>2168</td>\n",
       "      <td>2993</td>\n",
       "      <td>712</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>32</td>\n",
       "      <td>1024353.0</td>\n",
       "      <td>649038.754495</td>\n",
       "      <td>1601183</td>\n",
       "      <td>321569</td>\n",
       "      <td>11431221.0</td>\n",
       "      <td>3.644991e+06</td>\n",
       "      <td>15617415</td>\n",
       "      <td>8960247</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>2</th>\n",
       "      <td>47514</td>\n",
       "      <td>6</td>\n",
       "      <td>15/02/2018 08:29:42</td>\n",
       "      <td>543</td>\n",
       "      <td>2</td>\n",
       "      <td>0</td>\n",
       "      <td>64</td>\n",
       "      <td>0</td>\n",
       "      <td>64</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>32</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.000000</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.000000e+00</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>3</th>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>15/02/2018 08:28:07</td>\n",
       "      <td>112640703</td>\n",
       "      <td>3</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.000000</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>56320351.5</td>\n",
       "      <td>3.669884e+02</td>\n",
       "      <td>56320611</td>\n",
       "      <td>56320092</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>4</th>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>15/02/2018 08:30:56</td>\n",
       "      <td>112640874</td>\n",
       "      <td>3</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.000000</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>56320437.0</td>\n",
       "      <td>7.198347e+02</td>\n",
       "      <td>56320946</td>\n",
       "      <td>56319928</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>...</th>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1048570</th>\n",
       "      <td>50111</td>\n",
       "      <td>6</td>\n",
       "      <td>15/02/2018 09:04:42</td>\n",
       "      <td>22</td>\n",
       "      <td>3</td>\n",
       "      <td>0</td>\n",
       "      <td>31</td>\n",
       "      <td>0</td>\n",
       "      <td>31</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.000000</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.000000e+00</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1048571</th>\n",
       "      <td>443</td>\n",
       "      <td>6</td>\n",
       "      <td>15/02/2018 09:03:55</td>\n",
       "      <td>54682783</td>\n",
       "      <td>5</td>\n",
       "      <td>1</td>\n",
       "      <td>123</td>\n",
       "      <td>46</td>\n",
       "      <td>46</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>158783.0</td>\n",
       "      <td>0.000000</td>\n",
       "      <td>158783</td>\n",
       "      <td>158783</td>\n",
       "      <td>54523813.0</td>\n",
       "      <td>0.000000e+00</td>\n",
       "      <td>54523813</td>\n",
       "      <td>54523813</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1048572</th>\n",
       "      <td>443</td>\n",
       "      <td>6</td>\n",
       "      <td>15/02/2018 09:03:56</td>\n",
       "      <td>53682093</td>\n",
       "      <td>5</td>\n",
       "      <td>1</td>\n",
       "      <td>123</td>\n",
       "      <td>46</td>\n",
       "      <td>46</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>259719.0</td>\n",
       "      <td>0.000000</td>\n",
       "      <td>259719</td>\n",
       "      <td>259719</td>\n",
       "      <td>53421756.0</td>\n",
       "      <td>0.000000e+00</td>\n",
       "      <td>53421756</td>\n",
       "      <td>53421756</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1048573</th>\n",
       "      <td>443</td>\n",
       "      <td>6</td>\n",
       "      <td>15/02/2018 09:03:55</td>\n",
       "      <td>54683364</td>\n",
       "      <td>5</td>\n",
       "      <td>1</td>\n",
       "      <td>123</td>\n",
       "      <td>46</td>\n",
       "      <td>46</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>158870.0</td>\n",
       "      <td>0.000000</td>\n",
       "      <td>158870</td>\n",
       "      <td>158870</td>\n",
       "      <td>54523593.0</td>\n",
       "      <td>0.000000e+00</td>\n",
       "      <td>54523593</td>\n",
       "      <td>54523593</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1048574</th>\n",
       "      <td>443</td>\n",
       "      <td>6</td>\n",
       "      <td>15/02/2018 09:02:01</td>\n",
       "      <td>116857161</td>\n",
       "      <td>18</td>\n",
       "      <td>17</td>\n",
       "      <td>1066</td>\n",
       "      <td>5265</td>\n",
       "      <td>281</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>221407.0</td>\n",
       "      <td>48231.753545</td>\n",
       "      <td>255512</td>\n",
       "      <td>187302</td>\n",
       "      <td>58082282.0</td>\n",
       "      <td>1.832213e+05</td>\n",
       "      <td>58211839</td>\n",
       "      <td>57952725</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "  </tbody>\n",
       "</table>\n",
       "<p>1048575 rows × 80 columns</p>\n",
       "</div>"
      ],
      "text/plain": [
       "         Dst Port  Protocol            Timestamp  Flow Duration  Tot Fwd Pkts  \\\n",
       "0               0         0  15/02/2018 08:25:18      112641158             3   \n",
       "1              22         6  15/02/2018 08:29:05       37366762            14   \n",
       "2           47514         6  15/02/2018 08:29:42            543             2   \n",
       "3               0         0  15/02/2018 08:28:07      112640703             3   \n",
       "4               0         0  15/02/2018 08:30:56      112640874             3   \n",
       "...           ...       ...                  ...            ...           ...   \n",
       "1048570     50111         6  15/02/2018 09:04:42             22             3   \n",
       "1048571       443         6  15/02/2018 09:03:55       54682783             5   \n",
       "1048572       443         6  15/02/2018 09:03:56       53682093             5   \n",
       "1048573       443         6  15/02/2018 09:03:55       54683364             5   \n",
       "1048574       443         6  15/02/2018 09:02:01      116857161            18   \n",
       "\n",
       "         Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max  \\\n",
       "0                   0                0                0                0   \n",
       "1                  12             2168             2993              712   \n",
       "2                   0               64                0               64   \n",
       "3                   0                0                0                0   \n",
       "4                   0                0                0                0   \n",
       "...               ...              ...              ...              ...   \n",
       "1048570             0               31                0               31   \n",
       "1048571             1              123               46               46   \n",
       "1048572             1              123               46               46   \n",
       "1048573             1              123               46               46   \n",
       "1048574            17             1066             5265              281   \n",
       "\n",
       "         Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean     Active Std  \\\n",
       "0                      0  ...                 0          0.0       0.000000   \n",
       "1                      0  ...                32    1024353.0  649038.754495   \n",
       "2                      0  ...                32          0.0       0.000000   \n",
       "3                      0  ...                 0          0.0       0.000000   \n",
       "4                      0  ...                 0          0.0       0.000000   \n",
       "...                  ...  ...               ...          ...            ...   \n",
       "1048570                0  ...                20          0.0       0.000000   \n",
       "1048571                0  ...                20     158783.0       0.000000   \n",
       "1048572                0  ...                20     259719.0       0.000000   \n",
       "1048573                0  ...                20     158870.0       0.000000   \n",
       "1048574                0  ...                20     221407.0   48231.753545   \n",
       "\n",
       "         Active Max  Active Min   Idle Mean      Idle Std  Idle Max  Idle Min  \\\n",
       "0                 0           0  56320579.0  7.042784e+02  56321077  56320081   \n",
       "1           1601183      321569  11431221.0  3.644991e+06  15617415   8960247   \n",
       "2                 0           0         0.0  0.000000e+00         0         0   \n",
       "3                 0           0  56320351.5  3.669884e+02  56320611  56320092   \n",
       "4                 0           0  56320437.0  7.198347e+02  56320946  56319928   \n",
       "...             ...         ...         ...           ...       ...       ...   \n",
       "1048570           0           0         0.0  0.000000e+00         0         0   \n",
       "1048571      158783      158783  54523813.0  0.000000e+00  54523813  54523813   \n",
       "1048572      259719      259719  53421756.0  0.000000e+00  53421756  53421756   \n",
       "1048573      158870      158870  54523593.0  0.000000e+00  54523593  54523593   \n",
       "1048574      255512      187302  58082282.0  1.832213e+05  58211839  57952725   \n",
       "\n",
       "          Label  \n",
       "0        Benign  \n",
       "1        Benign  \n",
       "2        Benign  \n",
       "3        Benign  \n",
       "4        Benign  \n",
       "...         ...  \n",
       "1048570  Benign  \n",
       "1048571  Benign  \n",
       "1048572  Benign  \n",
       "1048573  Benign  \n",
       "1048574  Benign  \n",
       "\n",
       "[1048575 rows x 80 columns]"
      ]
     },
     "execution_count": 30,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "df_thursday3"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 31,
   "id": "d794d3bc",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/plain": [
       "Index(['Dst Port', 'Protocol', 'Timestamp', 'Flow Duration', 'Tot Fwd Pkts',\n",
       "       'Tot Bwd Pkts', 'TotLen Fwd Pkts', 'TotLen Bwd Pkts', 'Fwd Pkt Len Max',\n",
       "       'Fwd Pkt Len Min', 'Fwd Pkt Len Mean', 'Fwd Pkt Len Std',\n",
       "       'Bwd Pkt Len Max', 'Bwd Pkt Len Min', 'Bwd Pkt Len Mean',\n",
       "       'Bwd Pkt Len Std', 'Flow Byts/s', 'Flow Pkts/s', 'Flow IAT Mean',\n",
       "       'Flow IAT Std', 'Flow IAT Max', 'Flow IAT Min', 'Fwd IAT Tot',\n",
       "       'Fwd IAT Mean', 'Fwd IAT Std', 'Fwd IAT Max', 'Fwd IAT Min',\n",
       "       'Bwd IAT Tot', 'Bwd IAT Mean', 'Bwd IAT Std', 'Bwd IAT Max',\n",
       "       'Bwd IAT Min', 'Fwd PSH Flags', 'Bwd PSH Flags', 'Fwd URG Flags',\n",
       "       'Bwd URG Flags', 'Fwd Header Len', 'Bwd Header Len', 'Fwd Pkts/s',\n",
       "       'Bwd Pkts/s', 'Pkt Len Min', 'Pkt Len Max', 'Pkt Len Mean',\n",
       "       'Pkt Len Std', 'Pkt Len Var', 'FIN Flag Cnt', 'SYN Flag Cnt',\n",
       "       'RST Flag Cnt', 'PSH Flag Cnt', 'ACK Flag Cnt', 'URG Flag Cnt',\n",
       "       'CWE Flag Count', 'ECE Flag Cnt', 'Down/Up Ratio', 'Pkt Size Avg',\n",
       "       'Fwd Seg Size Avg', 'Bwd Seg Size Avg', 'Fwd Byts/b Avg',\n",
       "       'Fwd Pkts/b Avg', 'Fwd Blk Rate Avg', 'Bwd Byts/b Avg',\n",
       "       'Bwd Pkts/b Avg', 'Bwd Blk Rate Avg', 'Subflow Fwd Pkts',\n",
       "       'Subflow Fwd Byts', 'Subflow Bwd Pkts', 'Subflow Bwd Byts',\n",
       "       'Init Fwd Win Byts', 'Init Bwd Win Byts', 'Fwd Act Data Pkts',\n",
       "       'Fwd Seg Size Min', 'Active Mean', 'Active Std', 'Active Max',\n",
       "       'Active Min', 'Idle Mean', 'Idle Std', 'Idle Max', 'Idle Min', 'Label'],\n",
       "      dtype='object')"
      ]
     },
     "execution_count": 31,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "df_thursday3.columns"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 32,
   "id": "b2bbefc6",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/plain": [
       "array(['Benign', 'DoS attacks-GoldenEye', 'DoS attacks-Slowloris'],\n",
       "      dtype=object)"
      ]
     },
     "execution_count": 32,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "df_thursday3[\"Label\"].unique()"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 33,
   "id": "6ae9595a",
   "metadata": {},
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "996077\n",
      "41508\n",
      "10990\n"
     ]
    }
   ],
   "source": [
    "print(df_thursday3[\"Label\"].value_counts()[['Benign']].sum())\n",
    "print(df_thursday3[\"Label\"].value_counts()[['DoS attacks-GoldenEye']].sum())\n",
    "print(df_thursday3[\"Label\"].value_counts()[['DoS attacks-Slowloris']].sum())"
   ]
  },
  {
   "cell_type": "markdown",
   "id": "63fd0bff",
   "metadata": {},
   "source": [
    "#### 2.4 Thursday-22-02-2018_TrafficForML_CICFlowMeter.csv"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 34,
   "id": "94f6dbab",
   "metadata": {},
   "outputs": [],
   "source": [
    "df_thursday4 = pd.read_csv(\"CIC-IDS-2018-Dataset/Thursday-22-02-2018_TrafficForML_CICFlowMeter.csv\")"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 35,
   "id": "b3691c9e",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/html": [
       "<div>\n",
       "<style scoped>\n",
       "    .dataframe tbody tr th:only-of-type {\n",
       "        vertical-align: middle;\n",
       "    }\n",
       "\n",
       "    .dataframe tbody tr th {\n",
       "        vertical-align: top;\n",
       "    }\n",
       "\n",
       "    .dataframe thead th {\n",
       "        text-align: right;\n",
       "    }\n",
       "</style>\n",
       "<table border=\"1\" class=\"dataframe\">\n",
       "  <thead>\n",
       "    <tr style=\"text-align: right;\">\n",
       "      <th></th>\n",
       "      <th>Dst Port</th>\n",
       "      <th>Protocol</th>\n",
       "      <th>Timestamp</th>\n",
       "      <th>Flow Duration</th>\n",
       "      <th>Tot Fwd Pkts</th>\n",
       "      <th>Tot Bwd Pkts</th>\n",
       "      <th>TotLen Fwd Pkts</th>\n",
       "      <th>TotLen Bwd Pkts</th>\n",
       "      <th>Fwd Pkt Len Max</th>\n",
       "      <th>Fwd Pkt Len Min</th>\n",
       "      <th>...</th>\n",
       "      <th>Fwd Seg Size Min</th>\n",
       "      <th>Active Mean</th>\n",
       "      <th>Active Std</th>\n",
       "      <th>Active Max</th>\n",
       "      <th>Active Min</th>\n",
       "      <th>Idle Mean</th>\n",
       "      <th>Idle Std</th>\n",
       "      <th>Idle Max</th>\n",
       "      <th>Idle Min</th>\n",
       "      <th>Label</th>\n",
       "    </tr>\n",
       "  </thead>\n",
       "  <tbody>\n",
       "    <tr>\n",
       "      <th>0</th>\n",
       "      <td>22</td>\n",
       "      <td>6</td>\n",
       "      <td>22/02/2018 08:26:03</td>\n",
       "      <td>20553406</td>\n",
       "      <td>10</td>\n",
       "      <td>7</td>\n",
       "      <td>1063</td>\n",
       "      <td>1297</td>\n",
       "      <td>744</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>1027304.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>1027304</td>\n",
       "      <td>1027304</td>\n",
       "      <td>1.952608e+07</td>\n",
       "      <td>0.000000e+00</td>\n",
       "      <td>19526080</td>\n",
       "      <td>19526080</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1</th>\n",
       "      <td>34989</td>\n",
       "      <td>6</td>\n",
       "      <td>22/02/2018 08:26:24</td>\n",
       "      <td>790</td>\n",
       "      <td>2</td>\n",
       "      <td>0</td>\n",
       "      <td>848</td>\n",
       "      <td>0</td>\n",
       "      <td>848</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.000000e+00</td>\n",
       "      <td>0.000000e+00</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>2</th>\n",
       "      <td>500</td>\n",
       "      <td>17</td>\n",
       "      <td>22/02/2018 08:25:10</td>\n",
       "      <td>99745913</td>\n",
       "      <td>5</td>\n",
       "      <td>0</td>\n",
       "      <td>2500</td>\n",
       "      <td>0</td>\n",
       "      <td>500</td>\n",
       "      <td>500</td>\n",
       "      <td>...</td>\n",
       "      <td>8</td>\n",
       "      <td>4000203.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>4000203</td>\n",
       "      <td>4000203</td>\n",
       "      <td>3.191524e+07</td>\n",
       "      <td>3.792787e+07</td>\n",
       "      <td>75584115</td>\n",
       "      <td>7200679</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>3</th>\n",
       "      <td>500</td>\n",
       "      <td>17</td>\n",
       "      <td>22/02/2018 08:25:10</td>\n",
       "      <td>99745913</td>\n",
       "      <td>5</td>\n",
       "      <td>0</td>\n",
       "      <td>2500</td>\n",
       "      <td>0</td>\n",
       "      <td>500</td>\n",
       "      <td>500</td>\n",
       "      <td>...</td>\n",
       "      <td>8</td>\n",
       "      <td>4000189.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>4000189</td>\n",
       "      <td>4000189</td>\n",
       "      <td>3.191524e+07</td>\n",
       "      <td>3.792788e+07</td>\n",
       "      <td>75584130</td>\n",
       "      <td>7200693</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>4</th>\n",
       "      <td>500</td>\n",
       "      <td>17</td>\n",
       "      <td>22/02/2018 08:24:59</td>\n",
       "      <td>89481361</td>\n",
       "      <td>6</td>\n",
       "      <td>0</td>\n",
       "      <td>3000</td>\n",
       "      <td>0</td>\n",
       "      <td>500</td>\n",
       "      <td>500</td>\n",
       "      <td>...</td>\n",
       "      <td>8</td>\n",
       "      <td>4000554.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>4000554</td>\n",
       "      <td>4000554</td>\n",
       "      <td>2.137020e+07</td>\n",
       "      <td>1.528109e+07</td>\n",
       "      <td>41990741</td>\n",
       "      <td>7200848</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>...</th>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1048570</th>\n",
       "      <td>53</td>\n",
       "      <td>17</td>\n",
       "      <td>22/02/2018 09:57:34</td>\n",
       "      <td>61898</td>\n",
       "      <td>2</td>\n",
       "      <td>2</td>\n",
       "      <td>78</td>\n",
       "      <td>254</td>\n",
       "      <td>39</td>\n",
       "      <td>39</td>\n",
       "      <td>...</td>\n",
       "      <td>8</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.000000e+00</td>\n",
       "      <td>0.000000e+00</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1048571</th>\n",
       "      <td>1500</td>\n",
       "      <td>6</td>\n",
       "      <td>22/02/2018 04:51:29</td>\n",
       "      <td>86213373</td>\n",
       "      <td>2</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>8.621337e+07</td>\n",
       "      <td>0.000000e+00</td>\n",
       "      <td>86213373</td>\n",
       "      <td>86213373</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1048572</th>\n",
       "      <td>53</td>\n",
       "      <td>17</td>\n",
       "      <td>22/02/2018 03:52:37</td>\n",
       "      <td>642</td>\n",
       "      <td>1</td>\n",
       "      <td>1</td>\n",
       "      <td>39</td>\n",
       "      <td>67</td>\n",
       "      <td>39</td>\n",
       "      <td>39</td>\n",
       "      <td>...</td>\n",
       "      <td>8</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.000000e+00</td>\n",
       "      <td>0.000000e+00</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1048573</th>\n",
       "      <td>53</td>\n",
       "      <td>17</td>\n",
       "      <td>22/02/2018 09:40:42</td>\n",
       "      <td>78472</td>\n",
       "      <td>1</td>\n",
       "      <td>1</td>\n",
       "      <td>32</td>\n",
       "      <td>121</td>\n",
       "      <td>32</td>\n",
       "      <td>32</td>\n",
       "      <td>...</td>\n",
       "      <td>8</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.000000e+00</td>\n",
       "      <td>0.000000e+00</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1048574</th>\n",
       "      <td>3389</td>\n",
       "      <td>6</td>\n",
       "      <td>22/02/2018 04:34:32</td>\n",
       "      <td>2013403</td>\n",
       "      <td>8</td>\n",
       "      <td>7</td>\n",
       "      <td>1144</td>\n",
       "      <td>1581</td>\n",
       "      <td>677</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.000000e+00</td>\n",
       "      <td>0.000000e+00</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "  </tbody>\n",
       "</table>\n",
       "<p>1048575 rows × 80 columns</p>\n",
       "</div>"
      ],
      "text/plain": [
       "         Dst Port  Protocol            Timestamp  Flow Duration  Tot Fwd Pkts  \\\n",
       "0              22         6  22/02/2018 08:26:03       20553406            10   \n",
       "1           34989         6  22/02/2018 08:26:24            790             2   \n",
       "2             500        17  22/02/2018 08:25:10       99745913             5   \n",
       "3             500        17  22/02/2018 08:25:10       99745913             5   \n",
       "4             500        17  22/02/2018 08:24:59       89481361             6   \n",
       "...           ...       ...                  ...            ...           ...   \n",
       "1048570        53        17  22/02/2018 09:57:34          61898             2   \n",
       "1048571      1500         6  22/02/2018 04:51:29       86213373             2   \n",
       "1048572        53        17  22/02/2018 03:52:37            642             1   \n",
       "1048573        53        17  22/02/2018 09:40:42          78472             1   \n",
       "1048574      3389         6  22/02/2018 04:34:32        2013403             8   \n",
       "\n",
       "         Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max  \\\n",
       "0                   7             1063             1297              744   \n",
       "1                   0              848                0              848   \n",
       "2                   0             2500                0              500   \n",
       "3                   0             2500                0              500   \n",
       "4                   0             3000                0              500   \n",
       "...               ...              ...              ...              ...   \n",
       "1048570             2               78              254               39   \n",
       "1048571             0                0                0                0   \n",
       "1048572             1               39               67               39   \n",
       "1048573             1               32              121               32   \n",
       "1048574             7             1144             1581              677   \n",
       "\n",
       "         Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std  \\\n",
       "0                      0  ...                20    1027304.0         0.0   \n",
       "1                      0  ...                20          0.0         0.0   \n",
       "2                    500  ...                 8    4000203.0         0.0   \n",
       "3                    500  ...                 8    4000189.0         0.0   \n",
       "4                    500  ...                 8    4000554.0         0.0   \n",
       "...                  ...  ...               ...          ...         ...   \n",
       "1048570               39  ...                 8          0.0         0.0   \n",
       "1048571                0  ...                20          0.0         0.0   \n",
       "1048572               39  ...                 8          0.0         0.0   \n",
       "1048573               32  ...                 8          0.0         0.0   \n",
       "1048574                0  ...                20          0.0         0.0   \n",
       "\n",
       "         Active Max  Active Min     Idle Mean      Idle Std  Idle Max  \\\n",
       "0           1027304     1027304  1.952608e+07  0.000000e+00  19526080   \n",
       "1                 0           0  0.000000e+00  0.000000e+00         0   \n",
       "2           4000203     4000203  3.191524e+07  3.792787e+07  75584115   \n",
       "3           4000189     4000189  3.191524e+07  3.792788e+07  75584130   \n",
       "4           4000554     4000554  2.137020e+07  1.528109e+07  41990741   \n",
       "...             ...         ...           ...           ...       ...   \n",
       "1048570           0           0  0.000000e+00  0.000000e+00         0   \n",
       "1048571           0           0  8.621337e+07  0.000000e+00  86213373   \n",
       "1048572           0           0  0.000000e+00  0.000000e+00         0   \n",
       "1048573           0           0  0.000000e+00  0.000000e+00         0   \n",
       "1048574           0           0  0.000000e+00  0.000000e+00         0   \n",
       "\n",
       "         Idle Min   Label  \n",
       "0        19526080  Benign  \n",
       "1               0  Benign  \n",
       "2         7200679  Benign  \n",
       "3         7200693  Benign  \n",
       "4         7200848  Benign  \n",
       "...           ...     ...  \n",
       "1048570         0  Benign  \n",
       "1048571  86213373  Benign  \n",
       "1048572         0  Benign  \n",
       "1048573         0  Benign  \n",
       "1048574         0  Benign  \n",
       "\n",
       "[1048575 rows x 80 columns]"
      ]
     },
     "execution_count": 35,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "df_thursday4"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 36,
   "id": "996708b6",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/plain": [
       "Index(['Dst Port', 'Protocol', 'Timestamp', 'Flow Duration', 'Tot Fwd Pkts',\n",
       "       'Tot Bwd Pkts', 'TotLen Fwd Pkts', 'TotLen Bwd Pkts', 'Fwd Pkt Len Max',\n",
       "       'Fwd Pkt Len Min', 'Fwd Pkt Len Mean', 'Fwd Pkt Len Std',\n",
       "       'Bwd Pkt Len Max', 'Bwd Pkt Len Min', 'Bwd Pkt Len Mean',\n",
       "       'Bwd Pkt Len Std', 'Flow Byts/s', 'Flow Pkts/s', 'Flow IAT Mean',\n",
       "       'Flow IAT Std', 'Flow IAT Max', 'Flow IAT Min', 'Fwd IAT Tot',\n",
       "       'Fwd IAT Mean', 'Fwd IAT Std', 'Fwd IAT Max', 'Fwd IAT Min',\n",
       "       'Bwd IAT Tot', 'Bwd IAT Mean', 'Bwd IAT Std', 'Bwd IAT Max',\n",
       "       'Bwd IAT Min', 'Fwd PSH Flags', 'Bwd PSH Flags', 'Fwd URG Flags',\n",
       "       'Bwd URG Flags', 'Fwd Header Len', 'Bwd Header Len', 'Fwd Pkts/s',\n",
       "       'Bwd Pkts/s', 'Pkt Len Min', 'Pkt Len Max', 'Pkt Len Mean',\n",
       "       'Pkt Len Std', 'Pkt Len Var', 'FIN Flag Cnt', 'SYN Flag Cnt',\n",
       "       'RST Flag Cnt', 'PSH Flag Cnt', 'ACK Flag Cnt', 'URG Flag Cnt',\n",
       "       'CWE Flag Count', 'ECE Flag Cnt', 'Down/Up Ratio', 'Pkt Size Avg',\n",
       "       'Fwd Seg Size Avg', 'Bwd Seg Size Avg', 'Fwd Byts/b Avg',\n",
       "       'Fwd Pkts/b Avg', 'Fwd Blk Rate Avg', 'Bwd Byts/b Avg',\n",
       "       'Bwd Pkts/b Avg', 'Bwd Blk Rate Avg', 'Subflow Fwd Pkts',\n",
       "       'Subflow Fwd Byts', 'Subflow Bwd Pkts', 'Subflow Bwd Byts',\n",
       "       'Init Fwd Win Byts', 'Init Bwd Win Byts', 'Fwd Act Data Pkts',\n",
       "       'Fwd Seg Size Min', 'Active Mean', 'Active Std', 'Active Max',\n",
       "       'Active Min', 'Idle Mean', 'Idle Std', 'Idle Max', 'Idle Min', 'Label'],\n",
       "      dtype='object')"
      ]
     },
     "execution_count": 36,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "df_thursday4.columns"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 37,
   "id": "749e28dd",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/plain": [
       "array(['Benign', 'Brute Force -Web', 'Brute Force -XSS', 'SQL Injection'],\n",
       "      dtype=object)"
      ]
     },
     "execution_count": 37,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "df_thursday4[\"Label\"].unique()"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 38,
   "id": "cff88724",
   "metadata": {},
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "1048213\n",
      "249\n",
      "79\n",
      "34\n"
     ]
    }
   ],
   "source": [
    "print(df_thursday4[\"Label\"].value_counts()[['Benign']].sum())\n",
    "print(df_thursday4[\"Label\"].value_counts()[['Brute Force -Web']].sum())\n",
    "print(df_thursday4[\"Label\"].value_counts()[['Brute Force -XSS']].sum())\n",
    "print(df_thursday4[\"Label\"].value_counts()[['SQL Injection']].sum())"
   ]
  },
  {
   "cell_type": "markdown",
   "id": "ef42a4d3",
   "metadata": {},
   "source": [
    "### 3- Wednesday logs"
   ]
  },
  {
   "cell_type": "markdown",
   "id": "131aa2a5",
   "metadata": {},
   "source": [
    "#### 3.1 Wednesday-14-02-2018_TrafficForML_CICFlowMeter.csv"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 39,
   "id": "23a8e486",
   "metadata": {},
   "outputs": [],
   "source": [
    "df_wednesday1 = pd.read_csv(\"CIC-IDS-2018-Dataset/Wednesday-14-02-2018_TrafficForML_CICFlowMeter.csv\")"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 40,
   "id": "81af6914",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/html": [
       "<div>\n",
       "<style scoped>\n",
       "    .dataframe tbody tr th:only-of-type {\n",
       "        vertical-align: middle;\n",
       "    }\n",
       "\n",
       "    .dataframe tbody tr th {\n",
       "        vertical-align: top;\n",
       "    }\n",
       "\n",
       "    .dataframe thead th {\n",
       "        text-align: right;\n",
       "    }\n",
       "</style>\n",
       "<table border=\"1\" class=\"dataframe\">\n",
       "  <thead>\n",
       "    <tr style=\"text-align: right;\">\n",
       "      <th></th>\n",
       "      <th>Dst Port</th>\n",
       "      <th>Protocol</th>\n",
       "      <th>Timestamp</th>\n",
       "      <th>Flow Duration</th>\n",
       "      <th>Tot Fwd Pkts</th>\n",
       "      <th>Tot Bwd Pkts</th>\n",
       "      <th>TotLen Fwd Pkts</th>\n",
       "      <th>TotLen Bwd Pkts</th>\n",
       "      <th>Fwd Pkt Len Max</th>\n",
       "      <th>Fwd Pkt Len Min</th>\n",
       "      <th>...</th>\n",
       "      <th>Fwd Seg Size Min</th>\n",
       "      <th>Active Mean</th>\n",
       "      <th>Active Std</th>\n",
       "      <th>Active Max</th>\n",
       "      <th>Active Min</th>\n",
       "      <th>Idle Mean</th>\n",
       "      <th>Idle Std</th>\n",
       "      <th>Idle Max</th>\n",
       "      <th>Idle Min</th>\n",
       "      <th>Label</th>\n",
       "    </tr>\n",
       "  </thead>\n",
       "  <tbody>\n",
       "    <tr>\n",
       "      <th>0</th>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>14/02/2018 08:31:01</td>\n",
       "      <td>112641719</td>\n",
       "      <td>3</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>56320859.5</td>\n",
       "      <td>139.300036</td>\n",
       "      <td>56320958</td>\n",
       "      <td>56320761</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1</th>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>14/02/2018 08:33:50</td>\n",
       "      <td>112641466</td>\n",
       "      <td>3</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>56320733.0</td>\n",
       "      <td>114.551299</td>\n",
       "      <td>56320814</td>\n",
       "      <td>56320652</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>2</th>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>14/02/2018 08:36:39</td>\n",
       "      <td>112638623</td>\n",
       "      <td>3</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>56319311.5</td>\n",
       "      <td>301.934596</td>\n",
       "      <td>56319525</td>\n",
       "      <td>56319098</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>3</th>\n",
       "      <td>22</td>\n",
       "      <td>6</td>\n",
       "      <td>14/02/2018 08:40:13</td>\n",
       "      <td>6453966</td>\n",
       "      <td>15</td>\n",
       "      <td>10</td>\n",
       "      <td>1239</td>\n",
       "      <td>2273</td>\n",
       "      <td>744</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>32</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.000000</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>4</th>\n",
       "      <td>22</td>\n",
       "      <td>6</td>\n",
       "      <td>14/02/2018 08:40:23</td>\n",
       "      <td>8804066</td>\n",
       "      <td>14</td>\n",
       "      <td>11</td>\n",
       "      <td>1143</td>\n",
       "      <td>2209</td>\n",
       "      <td>744</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>32</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.000000</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>...</th>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1048570</th>\n",
       "      <td>80</td>\n",
       "      <td>6</td>\n",
       "      <td>14/02/2018 10:53:23</td>\n",
       "      <td>10156986</td>\n",
       "      <td>5</td>\n",
       "      <td>5</td>\n",
       "      <td>1089</td>\n",
       "      <td>1923</td>\n",
       "      <td>587</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.000000</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1048571</th>\n",
       "      <td>80</td>\n",
       "      <td>6</td>\n",
       "      <td>14/02/2018 10:53:33</td>\n",
       "      <td>117</td>\n",
       "      <td>2</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.000000</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1048572</th>\n",
       "      <td>80</td>\n",
       "      <td>6</td>\n",
       "      <td>14/02/2018 10:53:28</td>\n",
       "      <td>5095331</td>\n",
       "      <td>3</td>\n",
       "      <td>1</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.000000</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1048573</th>\n",
       "      <td>80</td>\n",
       "      <td>6</td>\n",
       "      <td>14/02/2018 10:53:28</td>\n",
       "      <td>5235511</td>\n",
       "      <td>3</td>\n",
       "      <td>1</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.000000</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1048574</th>\n",
       "      <td>443</td>\n",
       "      <td>6</td>\n",
       "      <td>14/02/2018 10:53:28</td>\n",
       "      <td>5807256</td>\n",
       "      <td>6</td>\n",
       "      <td>4</td>\n",
       "      <td>327</td>\n",
       "      <td>145</td>\n",
       "      <td>245</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>291569.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>291569</td>\n",
       "      <td>291569</td>\n",
       "      <td>5515650.0</td>\n",
       "      <td>0.000000</td>\n",
       "      <td>5515650</td>\n",
       "      <td>5515650</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "  </tbody>\n",
       "</table>\n",
       "<p>1048575 rows × 80 columns</p>\n",
       "</div>"
      ],
      "text/plain": [
       "         Dst Port  Protocol            Timestamp  Flow Duration  Tot Fwd Pkts  \\\n",
       "0               0         0  14/02/2018 08:31:01      112641719             3   \n",
       "1               0         0  14/02/2018 08:33:50      112641466             3   \n",
       "2               0         0  14/02/2018 08:36:39      112638623             3   \n",
       "3              22         6  14/02/2018 08:40:13        6453966            15   \n",
       "4              22         6  14/02/2018 08:40:23        8804066            14   \n",
       "...           ...       ...                  ...            ...           ...   \n",
       "1048570        80         6  14/02/2018 10:53:23       10156986             5   \n",
       "1048571        80         6  14/02/2018 10:53:33            117             2   \n",
       "1048572        80         6  14/02/2018 10:53:28        5095331             3   \n",
       "1048573        80         6  14/02/2018 10:53:28        5235511             3   \n",
       "1048574       443         6  14/02/2018 10:53:28        5807256             6   \n",
       "\n",
       "         Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max  \\\n",
       "0                   0                0                0                0   \n",
       "1                   0                0                0                0   \n",
       "2                   0                0                0                0   \n",
       "3                  10             1239             2273              744   \n",
       "4                  11             1143             2209              744   \n",
       "...               ...              ...              ...              ...   \n",
       "1048570             5             1089             1923              587   \n",
       "1048571             0                0                0                0   \n",
       "1048572             1                0                0                0   \n",
       "1048573             1                0                0                0   \n",
       "1048574             4              327              145              245   \n",
       "\n",
       "         Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std  \\\n",
       "0                      0  ...                 0          0.0         0.0   \n",
       "1                      0  ...                 0          0.0         0.0   \n",
       "2                      0  ...                 0          0.0         0.0   \n",
       "3                      0  ...                32          0.0         0.0   \n",
       "4                      0  ...                32          0.0         0.0   \n",
       "...                  ...  ...               ...          ...         ...   \n",
       "1048570                0  ...                20          0.0         0.0   \n",
       "1048571                0  ...                20          0.0         0.0   \n",
       "1048572                0  ...                20          0.0         0.0   \n",
       "1048573                0  ...                20          0.0         0.0   \n",
       "1048574                0  ...                20     291569.0         0.0   \n",
       "\n",
       "         Active Max  Active Min   Idle Mean    Idle Std  Idle Max  Idle Min  \\\n",
       "0                 0           0  56320859.5  139.300036  56320958  56320761   \n",
       "1                 0           0  56320733.0  114.551299  56320814  56320652   \n",
       "2                 0           0  56319311.5  301.934596  56319525  56319098   \n",
       "3                 0           0         0.0    0.000000         0         0   \n",
       "4                 0           0         0.0    0.000000         0         0   \n",
       "...             ...         ...         ...         ...       ...       ...   \n",
       "1048570           0           0         0.0    0.000000         0         0   \n",
       "1048571           0           0         0.0    0.000000         0         0   \n",
       "1048572           0           0         0.0    0.000000         0         0   \n",
       "1048573           0           0         0.0    0.000000         0         0   \n",
       "1048574      291569      291569   5515650.0    0.000000   5515650   5515650   \n",
       "\n",
       "          Label  \n",
       "0        Benign  \n",
       "1        Benign  \n",
       "2        Benign  \n",
       "3        Benign  \n",
       "4        Benign  \n",
       "...         ...  \n",
       "1048570  Benign  \n",
       "1048571  Benign  \n",
       "1048572  Benign  \n",
       "1048573  Benign  \n",
       "1048574  Benign  \n",
       "\n",
       "[1048575 rows x 80 columns]"
      ]
     },
     "execution_count": 40,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "df_wednesday1"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 41,
   "id": "cf6b3b05",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/plain": [
       "Index(['Dst Port', 'Protocol', 'Timestamp', 'Flow Duration', 'Tot Fwd Pkts',\n",
       "       'Tot Bwd Pkts', 'TotLen Fwd Pkts', 'TotLen Bwd Pkts', 'Fwd Pkt Len Max',\n",
       "       'Fwd Pkt Len Min', 'Fwd Pkt Len Mean', 'Fwd Pkt Len Std',\n",
       "       'Bwd Pkt Len Max', 'Bwd Pkt Len Min', 'Bwd Pkt Len Mean',\n",
       "       'Bwd Pkt Len Std', 'Flow Byts/s', 'Flow Pkts/s', 'Flow IAT Mean',\n",
       "       'Flow IAT Std', 'Flow IAT Max', 'Flow IAT Min', 'Fwd IAT Tot',\n",
       "       'Fwd IAT Mean', 'Fwd IAT Std', 'Fwd IAT Max', 'Fwd IAT Min',\n",
       "       'Bwd IAT Tot', 'Bwd IAT Mean', 'Bwd IAT Std', 'Bwd IAT Max',\n",
       "       'Bwd IAT Min', 'Fwd PSH Flags', 'Bwd PSH Flags', 'Fwd URG Flags',\n",
       "       'Bwd URG Flags', 'Fwd Header Len', 'Bwd Header Len', 'Fwd Pkts/s',\n",
       "       'Bwd Pkts/s', 'Pkt Len Min', 'Pkt Len Max', 'Pkt Len Mean',\n",
       "       'Pkt Len Std', 'Pkt Len Var', 'FIN Flag Cnt', 'SYN Flag Cnt',\n",
       "       'RST Flag Cnt', 'PSH Flag Cnt', 'ACK Flag Cnt', 'URG Flag Cnt',\n",
       "       'CWE Flag Count', 'ECE Flag Cnt', 'Down/Up Ratio', 'Pkt Size Avg',\n",
       "       'Fwd Seg Size Avg', 'Bwd Seg Size Avg', 'Fwd Byts/b Avg',\n",
       "       'Fwd Pkts/b Avg', 'Fwd Blk Rate Avg', 'Bwd Byts/b Avg',\n",
       "       'Bwd Pkts/b Avg', 'Bwd Blk Rate Avg', 'Subflow Fwd Pkts',\n",
       "       'Subflow Fwd Byts', 'Subflow Bwd Pkts', 'Subflow Bwd Byts',\n",
       "       'Init Fwd Win Byts', 'Init Bwd Win Byts', 'Fwd Act Data Pkts',\n",
       "       'Fwd Seg Size Min', 'Active Mean', 'Active Std', 'Active Max',\n",
       "       'Active Min', 'Idle Mean', 'Idle Std', 'Idle Max', 'Idle Min', 'Label'],\n",
       "      dtype='object')"
      ]
     },
     "execution_count": 41,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "df_wednesday1.columns"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 42,
   "id": "8ba00996",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/plain": [
       "array(['Benign', 'FTP-BruteForce', 'SSH-Bruteforce'], dtype=object)"
      ]
     },
     "execution_count": 42,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "df_wednesday1[\"Label\"].unique()"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 43,
   "id": "cc32f2fd",
   "metadata": {},
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "667626\n",
      "193360\n",
      "187589\n"
     ]
    }
   ],
   "source": [
    "print(df_wednesday1[\"Label\"].value_counts()[['Benign']].sum())\n",
    "print(df_wednesday1[\"Label\"].value_counts()[['FTP-BruteForce']].sum())\n",
    "print(df_wednesday1[\"Label\"].value_counts()[['SSH-Bruteforce']].sum())"
   ]
  },
  {
   "cell_type": "markdown",
   "id": "09764649",
   "metadata": {},
   "source": [
    "#### 3.2 Wednesday-21-02-2018_TrafficForML_CICFlowMeter.csv"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 44,
   "id": "819e577f",
   "metadata": {},
   "outputs": [],
   "source": [
    "df_wednesday2 = pd.read_csv(\"CIC-IDS-2018-Dataset/Wednesday-21-02-2018_TrafficForML_CICFlowMeter.csv\")"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 45,
   "id": "bc45109b",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/html": [
       "<div>\n",
       "<style scoped>\n",
       "    .dataframe tbody tr th:only-of-type {\n",
       "        vertical-align: middle;\n",
       "    }\n",
       "\n",
       "    .dataframe tbody tr th {\n",
       "        vertical-align: top;\n",
       "    }\n",
       "\n",
       "    .dataframe thead th {\n",
       "        text-align: right;\n",
       "    }\n",
       "</style>\n",
       "<table border=\"1\" class=\"dataframe\">\n",
       "  <thead>\n",
       "    <tr style=\"text-align: right;\">\n",
       "      <th></th>\n",
       "      <th>Dst Port</th>\n",
       "      <th>Protocol</th>\n",
       "      <th>Timestamp</th>\n",
       "      <th>Flow Duration</th>\n",
       "      <th>Tot Fwd Pkts</th>\n",
       "      <th>Tot Bwd Pkts</th>\n",
       "      <th>TotLen Fwd Pkts</th>\n",
       "      <th>TotLen Bwd Pkts</th>\n",
       "      <th>Fwd Pkt Len Max</th>\n",
       "      <th>Fwd Pkt Len Min</th>\n",
       "      <th>...</th>\n",
       "      <th>Fwd Seg Size Min</th>\n",
       "      <th>Active Mean</th>\n",
       "      <th>Active Std</th>\n",
       "      <th>Active Max</th>\n",
       "      <th>Active Min</th>\n",
       "      <th>Idle Mean</th>\n",
       "      <th>Idle Std</th>\n",
       "      <th>Idle Max</th>\n",
       "      <th>Idle Min</th>\n",
       "      <th>Label</th>\n",
       "    </tr>\n",
       "  </thead>\n",
       "  <tbody>\n",
       "    <tr>\n",
       "      <th>0</th>\n",
       "      <td>80</td>\n",
       "      <td>6</td>\n",
       "      <td>21/02/2018 08:33:25</td>\n",
       "      <td>37953</td>\n",
       "      <td>5</td>\n",
       "      <td>3</td>\n",
       "      <td>135</td>\n",
       "      <td>127</td>\n",
       "      <td>135</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>32</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1</th>\n",
       "      <td>500</td>\n",
       "      <td>17</td>\n",
       "      <td>21/02/2018 08:33:06</td>\n",
       "      <td>117573474</td>\n",
       "      <td>3</td>\n",
       "      <td>0</td>\n",
       "      <td>1500</td>\n",
       "      <td>0</td>\n",
       "      <td>500</td>\n",
       "      <td>500</td>\n",
       "      <td>...</td>\n",
       "      <td>8</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>58800000.0</td>\n",
       "      <td>23800000.0</td>\n",
       "      <td>75600000</td>\n",
       "      <td>42000000</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>2</th>\n",
       "      <td>500</td>\n",
       "      <td>17</td>\n",
       "      <td>21/02/2018 08:33:06</td>\n",
       "      <td>117573474</td>\n",
       "      <td>3</td>\n",
       "      <td>0</td>\n",
       "      <td>1500</td>\n",
       "      <td>0</td>\n",
       "      <td>500</td>\n",
       "      <td>500</td>\n",
       "      <td>...</td>\n",
       "      <td>8</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>58800000.0</td>\n",
       "      <td>23800000.0</td>\n",
       "      <td>75600000</td>\n",
       "      <td>42000000</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>3</th>\n",
       "      <td>500</td>\n",
       "      <td>17</td>\n",
       "      <td>21/02/2018 08:33:11</td>\n",
       "      <td>99743998</td>\n",
       "      <td>5</td>\n",
       "      <td>0</td>\n",
       "      <td>2500</td>\n",
       "      <td>0</td>\n",
       "      <td>500</td>\n",
       "      <td>500</td>\n",
       "      <td>...</td>\n",
       "      <td>8</td>\n",
       "      <td>4000290.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>4000290</td>\n",
       "      <td>4000290</td>\n",
       "      <td>31900000.0</td>\n",
       "      <td>37900000.0</td>\n",
       "      <td>75600000</td>\n",
       "      <td>7200397</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>4</th>\n",
       "      <td>500</td>\n",
       "      <td>17</td>\n",
       "      <td>21/02/2018 08:33:11</td>\n",
       "      <td>99743999</td>\n",
       "      <td>5</td>\n",
       "      <td>0</td>\n",
       "      <td>2500</td>\n",
       "      <td>0</td>\n",
       "      <td>500</td>\n",
       "      <td>500</td>\n",
       "      <td>...</td>\n",
       "      <td>8</td>\n",
       "      <td>4000286.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>4000286</td>\n",
       "      <td>4000286</td>\n",
       "      <td>31900000.0</td>\n",
       "      <td>37900000.0</td>\n",
       "      <td>75600000</td>\n",
       "      <td>7200399</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>...</th>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1048570</th>\n",
       "      <td>55484</td>\n",
       "      <td>6</td>\n",
       "      <td>21/02/2018 02:33:29</td>\n",
       "      <td>1252</td>\n",
       "      <td>5</td>\n",
       "      <td>2</td>\n",
       "      <td>935</td>\n",
       "      <td>274</td>\n",
       "      <td>935</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1048571</th>\n",
       "      <td>57624</td>\n",
       "      <td>6</td>\n",
       "      <td>21/02/2018 02:33:29</td>\n",
       "      <td>19055</td>\n",
       "      <td>5</td>\n",
       "      <td>2</td>\n",
       "      <td>935</td>\n",
       "      <td>341</td>\n",
       "      <td>935</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1048572</th>\n",
       "      <td>57623</td>\n",
       "      <td>6</td>\n",
       "      <td>21/02/2018 02:33:29</td>\n",
       "      <td>36677</td>\n",
       "      <td>5</td>\n",
       "      <td>2</td>\n",
       "      <td>935</td>\n",
       "      <td>341</td>\n",
       "      <td>935</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1048573</th>\n",
       "      <td>57625</td>\n",
       "      <td>6</td>\n",
       "      <td>21/02/2018 02:33:29</td>\n",
       "      <td>1849</td>\n",
       "      <td>5</td>\n",
       "      <td>2</td>\n",
       "      <td>935</td>\n",
       "      <td>341</td>\n",
       "      <td>935</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1048574</th>\n",
       "      <td>58120</td>\n",
       "      <td>6</td>\n",
       "      <td>21/02/2018 02:33:29</td>\n",
       "      <td>20580</td>\n",
       "      <td>5</td>\n",
       "      <td>2</td>\n",
       "      <td>935</td>\n",
       "      <td>299</td>\n",
       "      <td>935</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "  </tbody>\n",
       "</table>\n",
       "<p>1048575 rows × 80 columns</p>\n",
       "</div>"
      ],
      "text/plain": [
       "         Dst Port  Protocol            Timestamp  Flow Duration  Tot Fwd Pkts  \\\n",
       "0              80         6  21/02/2018 08:33:25          37953             5   \n",
       "1             500        17  21/02/2018 08:33:06      117573474             3   \n",
       "2             500        17  21/02/2018 08:33:06      117573474             3   \n",
       "3             500        17  21/02/2018 08:33:11       99743998             5   \n",
       "4             500        17  21/02/2018 08:33:11       99743999             5   \n",
       "...           ...       ...                  ...            ...           ...   \n",
       "1048570     55484         6  21/02/2018 02:33:29           1252             5   \n",
       "1048571     57624         6  21/02/2018 02:33:29          19055             5   \n",
       "1048572     57623         6  21/02/2018 02:33:29          36677             5   \n",
       "1048573     57625         6  21/02/2018 02:33:29           1849             5   \n",
       "1048574     58120         6  21/02/2018 02:33:29          20580             5   \n",
       "\n",
       "         Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max  \\\n",
       "0                   3              135              127              135   \n",
       "1                   0             1500                0              500   \n",
       "2                   0             1500                0              500   \n",
       "3                   0             2500                0              500   \n",
       "4                   0             2500                0              500   \n",
       "...               ...              ...              ...              ...   \n",
       "1048570             2              935              274              935   \n",
       "1048571             2              935              341              935   \n",
       "1048572             2              935              341              935   \n",
       "1048573             2              935              341              935   \n",
       "1048574             2              935              299              935   \n",
       "\n",
       "         Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std  \\\n",
       "0                      0  ...                32          0.0         0.0   \n",
       "1                    500  ...                 8          0.0         0.0   \n",
       "2                    500  ...                 8          0.0         0.0   \n",
       "3                    500  ...                 8    4000290.0         0.0   \n",
       "4                    500  ...                 8    4000286.0         0.0   \n",
       "...                  ...  ...               ...          ...         ...   \n",
       "1048570                0  ...                20          0.0         0.0   \n",
       "1048571                0  ...                20          0.0         0.0   \n",
       "1048572                0  ...                20          0.0         0.0   \n",
       "1048573                0  ...                20          0.0         0.0   \n",
       "1048574                0  ...                20          0.0         0.0   \n",
       "\n",
       "         Active Max  Active Min   Idle Mean    Idle Std  Idle Max  Idle Min  \\\n",
       "0                 0           0         0.0         0.0         0         0   \n",
       "1                 0           0  58800000.0  23800000.0  75600000  42000000   \n",
       "2                 0           0  58800000.0  23800000.0  75600000  42000000   \n",
       "3           4000290     4000290  31900000.0  37900000.0  75600000   7200397   \n",
       "4           4000286     4000286  31900000.0  37900000.0  75600000   7200399   \n",
       "...             ...         ...         ...         ...       ...       ...   \n",
       "1048570           0           0         0.0         0.0         0         0   \n",
       "1048571           0           0         0.0         0.0         0         0   \n",
       "1048572           0           0         0.0         0.0         0         0   \n",
       "1048573           0           0         0.0         0.0         0         0   \n",
       "1048574           0           0         0.0         0.0         0         0   \n",
       "\n",
       "          Label  \n",
       "0        Benign  \n",
       "1        Benign  \n",
       "2        Benign  \n",
       "3        Benign  \n",
       "4        Benign  \n",
       "...         ...  \n",
       "1048570  Benign  \n",
       "1048571  Benign  \n",
       "1048572  Benign  \n",
       "1048573  Benign  \n",
       "1048574  Benign  \n",
       "\n",
       "[1048575 rows x 80 columns]"
      ]
     },
     "execution_count": 45,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "df_wednesday2"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 46,
   "id": "f877be42",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/plain": [
       "Index(['Dst Port', 'Protocol', 'Timestamp', 'Flow Duration', 'Tot Fwd Pkts',\n",
       "       'Tot Bwd Pkts', 'TotLen Fwd Pkts', 'TotLen Bwd Pkts', 'Fwd Pkt Len Max',\n",
       "       'Fwd Pkt Len Min', 'Fwd Pkt Len Mean', 'Fwd Pkt Len Std',\n",
       "       'Bwd Pkt Len Max', 'Bwd Pkt Len Min', 'Bwd Pkt Len Mean',\n",
       "       'Bwd Pkt Len Std', 'Flow Byts/s', 'Flow Pkts/s', 'Flow IAT Mean',\n",
       "       'Flow IAT Std', 'Flow IAT Max', 'Flow IAT Min', 'Fwd IAT Tot',\n",
       "       'Fwd IAT Mean', 'Fwd IAT Std', 'Fwd IAT Max', 'Fwd IAT Min',\n",
       "       'Bwd IAT Tot', 'Bwd IAT Mean', 'Bwd IAT Std', 'Bwd IAT Max',\n",
       "       'Bwd IAT Min', 'Fwd PSH Flags', 'Bwd PSH Flags', 'Fwd URG Flags',\n",
       "       'Bwd URG Flags', 'Fwd Header Len', 'Bwd Header Len', 'Fwd Pkts/s',\n",
       "       'Bwd Pkts/s', 'Pkt Len Min', 'Pkt Len Max', 'Pkt Len Mean',\n",
       "       'Pkt Len Std', 'Pkt Len Var', 'FIN Flag Cnt', 'SYN Flag Cnt',\n",
       "       'RST Flag Cnt', 'PSH Flag Cnt', 'ACK Flag Cnt', 'URG Flag Cnt',\n",
       "       'CWE Flag Count', 'ECE Flag Cnt', 'Down/Up Ratio', 'Pkt Size Avg',\n",
       "       'Fwd Seg Size Avg', 'Bwd Seg Size Avg', 'Fwd Byts/b Avg',\n",
       "       'Fwd Pkts/b Avg', 'Fwd Blk Rate Avg', 'Bwd Byts/b Avg',\n",
       "       'Bwd Pkts/b Avg', 'Bwd Blk Rate Avg', 'Subflow Fwd Pkts',\n",
       "       'Subflow Fwd Byts', 'Subflow Bwd Pkts', 'Subflow Bwd Byts',\n",
       "       'Init Fwd Win Byts', 'Init Bwd Win Byts', 'Fwd Act Data Pkts',\n",
       "       'Fwd Seg Size Min', 'Active Mean', 'Active Std', 'Active Max',\n",
       "       'Active Min', 'Idle Mean', 'Idle Std', 'Idle Max', 'Idle Min', 'Label'],\n",
       "      dtype='object')"
      ]
     },
     "execution_count": 46,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "df_wednesday2.columns"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 47,
   "id": "680bb16c",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/plain": [
       "array(['Benign', 'DDOS attack-LOIC-UDP', 'DDOS attack-HOIC'], dtype=object)"
      ]
     },
     "execution_count": 47,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "df_wednesday2[\"Label\"].unique()"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 48,
   "id": "1287c842",
   "metadata": {},
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "360833\n",
      "1730\n",
      "686012\n"
     ]
    }
   ],
   "source": [
    "print(df_wednesday2[\"Label\"].value_counts()[['Benign']].sum())\n",
    "print(df_wednesday2[\"Label\"].value_counts()[['DDOS attack-LOIC-UDP']].sum())\n",
    "print(df_wednesday2[\"Label\"].value_counts()[['DDOS attack-HOIC']].sum())"
   ]
  },
  {
   "cell_type": "markdown",
   "id": "ee7401c3",
   "metadata": {},
   "source": [
    "#### 3.3 Wednesday-28-02-2018_TrafficForML_CICFlowMeter.csv"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 49,
   "id": "d7b38fcb",
   "metadata": {},
   "outputs": [
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      "/home/tamer/anaconda3/envs/cic-ids-2018/lib/python3.7/site-packages/IPython/core/interactiveshell.py:3444: DtypeWarning: Columns (0,1,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78) have mixed types.Specify dtype option on import or set low_memory=False.\n",
      "  exec(code_obj, self.user_global_ns, self.user_ns)\n"
     ]
    }
   ],
   "source": [
    "df_wednesday3 = pd.read_csv(\"CIC-IDS-2018-Dataset/Wednesday-28-02-2018_TrafficForML_CICFlowMeter.csv\")"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 50,
   "id": "ff33ef1b",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/html": [
       "<div>\n",
       "<style scoped>\n",
       "    .dataframe tbody tr th:only-of-type {\n",
       "        vertical-align: middle;\n",
       "    }\n",
       "\n",
       "    .dataframe tbody tr th {\n",
       "        vertical-align: top;\n",
       "    }\n",
       "\n",
       "    .dataframe thead th {\n",
       "        text-align: right;\n",
       "    }\n",
       "</style>\n",
       "<table border=\"1\" class=\"dataframe\">\n",
       "  <thead>\n",
       "    <tr style=\"text-align: right;\">\n",
       "      <th></th>\n",
       "      <th>Dst Port</th>\n",
       "      <th>Protocol</th>\n",
       "      <th>Timestamp</th>\n",
       "      <th>Flow Duration</th>\n",
       "      <th>Tot Fwd Pkts</th>\n",
       "      <th>Tot Bwd Pkts</th>\n",
       "      <th>TotLen Fwd Pkts</th>\n",
       "      <th>TotLen Bwd Pkts</th>\n",
       "      <th>Fwd Pkt Len Max</th>\n",
       "      <th>Fwd Pkt Len Min</th>\n",
       "      <th>...</th>\n",
       "      <th>Fwd Seg Size Min</th>\n",
       "      <th>Active Mean</th>\n",
       "      <th>Active Std</th>\n",
       "      <th>Active Max</th>\n",
       "      <th>Active Min</th>\n",
       "      <th>Idle Mean</th>\n",
       "      <th>Idle Std</th>\n",
       "      <th>Idle Max</th>\n",
       "      <th>Idle Min</th>\n",
       "      <th>Label</th>\n",
       "    </tr>\n",
       "  </thead>\n",
       "  <tbody>\n",
       "    <tr>\n",
       "      <th>0</th>\n",
       "      <td>443</td>\n",
       "      <td>6</td>\n",
       "      <td>28/02/2018 08:22:13</td>\n",
       "      <td>94658</td>\n",
       "      <td>6</td>\n",
       "      <td>7</td>\n",
       "      <td>708</td>\n",
       "      <td>3718</td>\n",
       "      <td>387</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>1</th>\n",
       "      <td>443</td>\n",
       "      <td>6</td>\n",
       "      <td>28/02/2018 08:22:13</td>\n",
       "      <td>206</td>\n",
       "      <td>2</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>2</th>\n",
       "      <td>445</td>\n",
       "      <td>6</td>\n",
       "      <td>28/02/2018 08:22:15</td>\n",
       "      <td>165505</td>\n",
       "      <td>3</td>\n",
       "      <td>1</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>3</th>\n",
       "      <td>443</td>\n",
       "      <td>6</td>\n",
       "      <td>28/02/2018 08:22:16</td>\n",
       "      <td>102429</td>\n",
       "      <td>6</td>\n",
       "      <td>7</td>\n",
       "      <td>708</td>\n",
       "      <td>3718</td>\n",
       "      <td>387</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>4</th>\n",
       "      <td>443</td>\n",
       "      <td>6</td>\n",
       "      <td>28/02/2018 08:22:16</td>\n",
       "      <td>167</td>\n",
       "      <td>2</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>20</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0.0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>...</th>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "      <td>...</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>613099</th>\n",
       "      <td>23</td>\n",
       "      <td>6</td>\n",
       "      <td>28/02/2018 11:59:12</td>\n",
       "      <td>3</td>\n",
       "      <td>1</td>\n",
       "      <td>1</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>24</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Infilteration</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>613100</th>\n",
       "      <td>425</td>\n",
       "      <td>6</td>\n",
       "      <td>28/02/2018 10:50:04</td>\n",
       "      <td>2</td>\n",
       "      <td>1</td>\n",
       "      <td>1</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>24</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Infilteration</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>613101</th>\n",
       "      <td>445</td>\n",
       "      <td>6</td>\n",
       "      <td>28/02/2018 12:52:55</td>\n",
       "      <td>732728</td>\n",
       "      <td>2</td>\n",
       "      <td>2</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>32</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Benign</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>613102</th>\n",
       "      <td>23</td>\n",
       "      <td>6</td>\n",
       "      <td>28/02/2018 11:10:50</td>\n",
       "      <td>22</td>\n",
       "      <td>1</td>\n",
       "      <td>1</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>24</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Infilteration</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>613103</th>\n",
       "      <td>443</td>\n",
       "      <td>6</td>\n",
       "      <td>28/02/2018 11:12:18</td>\n",
       "      <td>2</td>\n",
       "      <td>1</td>\n",
       "      <td>1</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>...</td>\n",
       "      <td>24</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>0</td>\n",
       "      <td>Infilteration</td>\n",
       "    </tr>\n",
       "  </tbody>\n",
       "</table>\n",
       "<p>613104 rows × 80 columns</p>\n",
       "</div>"
      ],
      "text/plain": [
       "       Dst Port Protocol            Timestamp Flow Duration Tot Fwd Pkts  \\\n",
       "0           443        6  28/02/2018 08:22:13         94658            6   \n",
       "1           443        6  28/02/2018 08:22:13           206            2   \n",
       "2           445        6  28/02/2018 08:22:15        165505            3   \n",
       "3           443        6  28/02/2018 08:22:16        102429            6   \n",
       "4           443        6  28/02/2018 08:22:16           167            2   \n",
       "...         ...      ...                  ...           ...          ...   \n",
       "613099       23        6  28/02/2018 11:59:12             3            1   \n",
       "613100      425        6  28/02/2018 10:50:04             2            1   \n",
       "613101      445        6  28/02/2018 12:52:55        732728            2   \n",
       "613102       23        6  28/02/2018 11:10:50            22            1   \n",
       "613103      443        6  28/02/2018 11:12:18             2            1   \n",
       "\n",
       "       Tot Bwd Pkts TotLen Fwd Pkts TotLen Bwd Pkts Fwd Pkt Len Max  \\\n",
       "0                 7             708            3718             387   \n",
       "1                 0               0               0               0   \n",
       "2                 1               0               0               0   \n",
       "3                 7             708            3718             387   \n",
       "4                 0               0               0               0   \n",
       "...             ...             ...             ...             ...   \n",
       "613099            1               0               0               0   \n",
       "613100            1               0               0               0   \n",
       "613101            2               0               0               0   \n",
       "613102            1               0               0               0   \n",
       "613103            1               0               0               0   \n",
       "\n",
       "       Fwd Pkt Len Min  ... Fwd Seg Size Min Active Mean Active Std  \\\n",
       "0                    0  ...               20         0.0        0.0   \n",
       "1                    0  ...               20         0.0        0.0   \n",
       "2                    0  ...               20         0.0        0.0   \n",
       "3                    0  ...               20         0.0        0.0   \n",
       "4                    0  ...               20         0.0        0.0   \n",
       "...                ...  ...              ...         ...        ...   \n",
       "613099               0  ...               24           0          0   \n",
       "613100               0  ...               24           0          0   \n",
       "613101               0  ...               32           0          0   \n",
       "613102               0  ...               24           0          0   \n",
       "613103               0  ...               24           0          0   \n",
       "\n",
       "       Active Max Active Min Idle Mean Idle Std Idle Max Idle Min  \\\n",
       "0               0          0       0.0      0.0        0        0   \n",
       "1               0          0       0.0      0.0        0        0   \n",
       "2               0          0       0.0      0.0        0        0   \n",
       "3               0          0       0.0      0.0        0        0   \n",
       "4               0          0       0.0      0.0        0        0   \n",
       "...           ...        ...       ...      ...      ...      ...   \n",
       "613099          0          0         0        0        0        0   \n",
       "613100          0          0         0        0        0        0   \n",
       "613101          0          0         0        0        0        0   \n",
       "613102          0          0         0        0        0        0   \n",
       "613103          0          0         0        0        0        0   \n",
       "\n",
       "                Label  \n",
       "0              Benign  \n",
       "1              Benign  \n",
       "2              Benign  \n",
       "3              Benign  \n",
       "4              Benign  \n",
       "...               ...  \n",
       "613099  Infilteration  \n",
       "613100  Infilteration  \n",
       "613101         Benign  \n",
       "613102  Infilteration  \n",
       "613103  Infilteration  \n",
       "\n",
       "[613104 rows x 80 columns]"
      ]
     },
     "execution_count": 50,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "df_wednesday3"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 51,
   "id": "8f1fa961",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/plain": [
       "Index(['Dst Port', 'Protocol', 'Timestamp', 'Flow Duration', 'Tot Fwd Pkts',\n",
       "       'Tot Bwd Pkts', 'TotLen Fwd Pkts', 'TotLen Bwd Pkts', 'Fwd Pkt Len Max',\n",
       "       'Fwd Pkt Len Min', 'Fwd Pkt Len Mean', 'Fwd Pkt Len Std',\n",
       "       'Bwd Pkt Len Max', 'Bwd Pkt Len Min', 'Bwd Pkt Len Mean',\n",
       "       'Bwd Pkt Len Std', 'Flow Byts/s', 'Flow Pkts/s', 'Flow IAT Mean',\n",
       "       'Flow IAT Std', 'Flow IAT Max', 'Flow IAT Min', 'Fwd IAT Tot',\n",
       "       'Fwd IAT Mean', 'Fwd IAT Std', 'Fwd IAT Max', 'Fwd IAT Min',\n",
       "       'Bwd IAT Tot', 'Bwd IAT Mean', 'Bwd IAT Std', 'Bwd IAT Max',\n",
       "       'Bwd IAT Min', 'Fwd PSH Flags', 'Bwd PSH Flags', 'Fwd URG Flags',\n",
       "       'Bwd URG Flags', 'Fwd Header Len', 'Bwd Header Len', 'Fwd Pkts/s',\n",
       "       'Bwd Pkts/s', 'Pkt Len Min', 'Pkt Len Max', 'Pkt Len Mean',\n",
       "       'Pkt Len Std', 'Pkt Len Var', 'FIN Flag Cnt', 'SYN Flag Cnt',\n",
       "       'RST Flag Cnt', 'PSH Flag Cnt', 'ACK Flag Cnt', 'URG Flag Cnt',\n",
       "       'CWE Flag Count', 'ECE Flag Cnt', 'Down/Up Ratio', 'Pkt Size Avg',\n",
       "       'Fwd Seg Size Avg', 'Bwd Seg Size Avg', 'Fwd Byts/b Avg',\n",
       "       'Fwd Pkts/b Avg', 'Fwd Blk Rate Avg', 'Bwd Byts/b Avg',\n",
       "       'Bwd Pkts/b Avg', 'Bwd Blk Rate Avg', 'Subflow Fwd Pkts',\n",
       "       'Subflow Fwd Byts', 'Subflow Bwd Pkts', 'Subflow Bwd Byts',\n",
       "       'Init Fwd Win Byts', 'Init Bwd Win Byts', 'Fwd Act Data Pkts',\n",
       "       'Fwd Seg Size Min', 'Active Mean', 'Active Std', 'Active Max',\n",
       "       'Active Min', 'Idle Mean', 'Idle Std', 'Idle Max', 'Idle Min', 'Label'],\n",
       "      dtype='object')"
      ]
     },
     "execution_count": 51,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "df_wednesday3.columns"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 52,
   "id": "f1a8d8e2",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/plain": [
       "array(['Benign', 'Label', 'Infilteration'], dtype=object)"
      ]
     },
     "execution_count": 52,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "df_wednesday3[\"Label\"].unique()"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 53,
   "id": "732a4ab7",
   "metadata": {},
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "544200\n",
      "33\n",
      "68871\n"
     ]
    }
   ],
   "source": [
    "print(df_wednesday3[\"Label\"].value_counts()[['Benign']].sum())\n",
    "print(df_wednesday3[\"Label\"].value_counts()[['Label']].sum())\n",
    "print(df_wednesday3[\"Label\"].value_counts()[['Infilteration']].sum())"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 54,
   "id": "a87cf3d5",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/html": [
       "<div>\n",
       "<style scoped>\n",
       "    .dataframe tbody tr th:only-of-type {\n",
       "        vertical-align: middle;\n",
       "    }\n",
       "\n",
       "    .dataframe tbody tr th {\n",
       "        vertical-align: top;\n",
       "    }\n",
       "\n",
       "    .dataframe thead th {\n",
       "        text-align: right;\n",
       "    }\n",
       "</style>\n",
       "<table border=\"1\" class=\"dataframe\">\n",
       "  <thead>\n",
       "    <tr style=\"text-align: right;\">\n",
       "      <th></th>\n",
       "      <th>Dst Port</th>\n",
       "      <th>Protocol</th>\n",
       "      <th>Timestamp</th>\n",
       "      <th>Flow Duration</th>\n",
       "      <th>Tot Fwd Pkts</th>\n",
       "      <th>Tot Bwd Pkts</th>\n",
       "      <th>TotLen Fwd Pkts</th>\n",
       "      <th>TotLen Bwd Pkts</th>\n",
       "      <th>Fwd Pkt Len Max</th>\n",
       "      <th>Fwd Pkt Len Min</th>\n",
       "      <th>...</th>\n",
       "      <th>Fwd Seg Size Min</th>\n",
       "      <th>Active Mean</th>\n",
       "      <th>Active Std</th>\n",
       "      <th>Active Max</th>\n",
       "      <th>Active Min</th>\n",
       "      <th>Idle Mean</th>\n",
       "      <th>Idle Std</th>\n",
       "      <th>Idle Max</th>\n",
       "      <th>Idle Min</th>\n",
       "      <th>Label</th>\n",
       "    </tr>\n",
       "  </thead>\n",
       "  <tbody>\n",
       "    <tr>\n",
       "      <th>21838</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>43117</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>63291</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>84013</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>107719</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>132409</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>154205</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>160206</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>202680</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>228583</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>247717</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>271676</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>296994</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>322938</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>344162</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>349509</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>355079</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>360660</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>366039</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>367413</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>368613</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>371159</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>377704</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>399543</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>420822</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>440996</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>461718</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>485424</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>510114</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>534073</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>559391</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>585335</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>606559</th>\n",
       "      <td>Dst Port</td>\n",
       "      <td>Protocol</td>\n",
       "      <td>Timestamp</td>\n",
       "      <td>Flow Duration</td>\n",
       "      <td>Tot Fwd Pkts</td>\n",
       "      <td>Tot Bwd Pkts</td>\n",
       "      <td>TotLen Fwd Pkts</td>\n",
       "      <td>TotLen Bwd Pkts</td>\n",
       "      <td>Fwd Pkt Len Max</td>\n",
       "      <td>Fwd Pkt Len Min</td>\n",
       "      <td>...</td>\n",
       "      <td>Fwd Seg Size Min</td>\n",
       "      <td>Active Mean</td>\n",
       "      <td>Active Std</td>\n",
       "      <td>Active Max</td>\n",
       "      <td>Active Min</td>\n",
       "      <td>Idle Mean</td>\n",
       "      <td>Idle Std</td>\n",
       "      <td>Idle Max</td>\n",
       "      <td>Idle Min</td>\n",
       "      <td>Label</td>\n",
       "    </tr>\n",
       "  </tbody>\n",
       "</table>\n",
       "<p>33 rows × 80 columns</p>\n",
       "</div>"
      ],
      "text/plain": [
       "        Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts  \\\n",
       "21838   Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "43117   Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "63291   Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "84013   Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "107719  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "132409  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "154205  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "160206  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "202680  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "228583  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "247717  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "271676  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "296994  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "322938  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "344162  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "349509  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "355079  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "360660  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "366039  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "367413  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "368613  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "371159  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "377704  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "399543  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "420822  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "440996  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "461718  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "485424  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "510114  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "534073  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "559391  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "585335  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "606559  Dst Port  Protocol  Timestamp  Flow Duration  Tot Fwd Pkts   \n",
       "\n",
       "        Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max  \\\n",
       "21838   Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "43117   Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "63291   Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "84013   Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "107719  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "132409  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "154205  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "160206  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "202680  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "228583  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "247717  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "271676  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "296994  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "322938  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "344162  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "349509  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "355079  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "360660  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "366039  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "367413  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "368613  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "371159  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "377704  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "399543  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "420822  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "440996  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "461718  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "485424  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "510114  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "534073  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "559391  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "585335  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "606559  Tot Bwd Pkts  TotLen Fwd Pkts  TotLen Bwd Pkts  Fwd Pkt Len Max   \n",
       "\n",
       "        Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std  \\\n",
       "21838   Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "43117   Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "63291   Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "84013   Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "107719  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "132409  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "154205  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "160206  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "202680  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "228583  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "247717  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "271676  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "296994  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "322938  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "344162  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "349509  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "355079  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "360660  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "366039  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "367413  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "368613  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "371159  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "377704  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "399543  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "420822  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "440996  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "461718  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "485424  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "510114  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "534073  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "559391  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "585335  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "606559  Fwd Pkt Len Min  ...  Fwd Seg Size Min  Active Mean  Active Std   \n",
       "\n",
       "        Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "21838   Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "43117   Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "63291   Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "84013   Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "107719  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "132409  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "154205  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "160206  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "202680  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "228583  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "247717  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "271676  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "296994  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "322938  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "344162  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "349509  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "355079  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "360660  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "366039  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "367413  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "368613  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "371159  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "377704  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "399543  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "420822  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "440996  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "461718  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "485424  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "510114  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "534073  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "559391  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "585335  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "606559  Active Max  Active Min  Idle Mean  Idle Std  Idle Max  Idle Min  Label  \n",
       "\n",
       "[33 rows x 80 columns]"
      ]
     },
     "execution_count": 54,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "df_wednesday3.loc[df_wednesday3[\"Label\"] == \"Label\"]"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": null,
   "id": "57706b89",
   "metadata": {},
   "outputs": [],
   "source": []
  }
 ],
 "metadata": {
  "kernelspec": {
   "display_name": "Python 3 (ipykernel)",
   "language": "python",
   "name": "python3"
  },
  "language_info": {
   "codemirror_mode": {
    "name": "ipython",
    "version": 3
   },
   "file_extension": ".py",
   "mimetype": "text/x-python",
   "name": "python",
   "nbconvert_exporter": "python",
   "pygments_lexer": "ipython3",
   "version": "3.7.11"
  }
 },
 "nbformat": 4,
 "nbformat_minor": 5
}