a would make a NIDS, for that i must construct a connections, one conection begin with Syn+Syn_Ack+Ack+…+Ack+…Fin_Ack+ack+Fin_ack+ack.
I don’t find an exemple, how make FLAG, flag can be S0, RSTO, SF, REJ.

Can you give a documentation for construction of connections and attributs like FLAG, Duration, …

Thank you verry mutch

Sorry, I also don't really understand the question here?