apache2,dos back,dos buffer_overflow,u2r ftp_write,r2l guess_passwd,r2l httptunnel,u2r imap,r2l ipsweep,probe land,dos loadmodule,u2r mailbomb,dos mscan,probe multihop,r2l named,r2l neptune,dos nmap,probe perl,u2r phf,r2l pod,dos portsweep,probe processtable,dos ps,u2r rootkit,u2r saint,probe satan,probe sendmail,r2l smurf,dos snmpguess,u2r snmpgetattack,r2l spy,r2l sqlattack,u2r teardrop,dos udpstorm,dos warezclient,r2l warezmaster,r2l worm,u2r xlock,r2l xsnoop,r2l xterm,u2r normal,normal unknown,unknown