[
  {
    "label": "bitcoin:p2p_getheaders_drain",
    "expect": "attack",
    "feat": {
      "app.distinct_metric_names": 0.0,
      "pcap.bytes_per_s": 180355.703,
      "pcap.distinct_dst_ips": 1.0,
      "pcap.distinct_src_dst_pairs": 143.0,
      "pcap.distinct_src_ips": 1.0,
      "pcap.duration_s": 3.809,
      "pcap.mean_packet_size": 134.749,
      "pcap.packet_count": 5098.0,
      "pcap.packets_per_s": 1338.461,
      "pcap.rst_fraction": 0.041,
      "pcap.syn_to_handshake_ratio": 0.526,
      "pcap.tcp_fin": 0.0,
      "pcap.tcp_handshake_ack": 540.0,
      "pcap.tcp_rst": 208.0,
      "pcap.tcp_syn": 284.0,
      "pcap.tcp_syn_ack": 142.0,
      "pcap.tcp_total_packets": 5098.0,
      "pcap.top_dst_port": 48787.0,
      "pcap.top_dst_port_fraction": 0.508,
      "pcap.top_src_port": 48787.0,
      "pcap.top_src_port_fraction": 0.492,
      "pcap.total_bytes": 686948.0,
      "pcap.unique_dst_ports": 5.0,
      "pcap.unique_src_ports": 5.0,
      "resp.count": 0.0,
      "resp.resp_bytes_total": 0.0
    }
  },
  {
    "label": "solana:sol_tpu_quic_handshake_flood",
    "expect": "attack",
    "feat": {
      "app.distinct_metric_names": 0.0,
      "pcap.bytes_per_s": 28177.114,
      "pcap.distinct_dst_ips": 0.0,
      "pcap.distinct_src_dst_pairs": 0.0,
      "pcap.distinct_src_ips": 0.0,
      "pcap.duration_s": 5.815,
      "pcap.mean_packet_size": 256.0,
      "pcap.packet_count": 640.0,
      "pcap.packets_per_s": 110.067,
      "pcap.rst_fraction": 0.0,
      "pcap.syn_to_handshake_ratio": 0.0,
      "pcap.tcp_fin": 0.0,
      "pcap.tcp_handshake_ack": 0.0,
      "pcap.tcp_rst": 0.0,
      "pcap.tcp_syn": 0.0,
      "pcap.tcp_syn_ack": 0.0,
      "pcap.tcp_total_packets": 0.0,
      "pcap.top_dst_port": 0.0,
      "pcap.top_dst_port_fraction": 0.0,
      "pcap.top_src_port": 0.0,
      "pcap.top_src_port_fraction": 0.0,
      "pcap.total_bytes": 163840.0,
      "pcap.unique_dst_ports": 0.0,
      "pcap.unique_src_ports": 0.0,
      "resp.count": 0.0,
      "resp.resp_bytes_total": 0.0
    }
  },
  {
    "label": "bitcoin:benign_bitcoin_light_client_normal",
    "expect": "benign",
    "feat": {
      "app.distinct_metric_names": 0.0,
      "pcap.bytes_per_s": 45302.279,
      "pcap.distinct_dst_ips": 1.0,
      "pcap.distinct_src_dst_pairs": 67.0,
      "pcap.distinct_src_ips": 1.0,
      "pcap.duration_s": 3.236,
      "pcap.mean_packet_size": 113.65,
      "pcap.packet_count": 1290.0,
      "pcap.packets_per_s": 398.611,
      "pcap.rst_fraction": 0.057,
      "pcap.syn_to_handshake_ratio": 0.506,
      "pcap.tcp_fin": 2.0,
      "pcap.tcp_handshake_ack": 261.0,
      "pcap.tcp_rst": 73.0,
      "pcap.tcp_syn": 132.0,
      "pcap.tcp_syn_ack": 66.0,
      "pcap.tcp_total_packets": 1290.0,
      "pcap.top_dst_port": 48787.0,
      "pcap.top_dst_port_fraction": 0.518,
      "pcap.top_src_port": 48787.0,
      "pcap.top_src_port_fraction": 0.482,
      "pcap.total_bytes": 146609.0,
      "pcap.unique_dst_ports": 5.0,
      "pcap.unique_src_ports": 5.0,
      "resp.count": 0.0,
      "resp.resp_bytes_total": 0.0
    }
  }
]