| Field | Unique feature values | Anomaly # |
| EDST | 0x0000c0, 0x00105a, 0x00107b, | 6 | ESRC | 0x0000c0, 0x00105a, 0x00107b, | 5 | TOS | Null, 0x00, 0x08, 0x10 | 4 | IL | Null, 38, 40–170, 172–217, , 1489–1500 | 1329 | FF | Null, 0x0000, 0x4000 | 3 | TTL | Null, 60, 63, 64, 128, 254, 255 | 7 | SRC | 135.8.60.182, 135.13.216.191, 172.16.112.10 | 29 | 172.16.112.20, 172.16.112.50, | DST | 135.8.60.182, 135.13.216.191, 172.16.0.1 | 33 | 172.16.112.10, 172.16.112.20, 172.16.112.50, | SP | Null, 20, 21, 22, 23, 25, 53, 79, 80, 113, 123, 514, 515, 6000, 6667, 8000 | 16 | TF | Null, 0x02, 0x04, 0x10, | 9 | TU | Null, 0 | 2 | TC | Null, 0xffff | 2 | TO | Null, 0x020405b4 | 2 | UC | Null, 0xffff | 2 | IC | Null, 0xffff | 2 | PS | 60–184, 186–231, , 1503–1514 | 1321 |
|
|