 IF src_bytes > 312 AND
     IF dst_host_count > 1 AND
         IF dst_host_srv_diff_host_rate > 0.035 AND
             IF dst_host_same_src_port_rate > 0.03 AND
                 IF dst_host_same_src_port_rate > 0.095 THEN
                     dst_host_srv_serror_rate = 0
                 IF dst_host_same_src_port_rate <= 0.095 THEN
                     dst_host_srv_serror_rate = 0.01
             IF dst_host_same_src_port_rate <= 0.03 THEN
                 dst_host_srv_serror_rate = 0
         IF dst_host_srv_diff_host_rate <= 0.035 THEN
             dst_host_srv_serror_rate = 0
     IF dst_host_count <= 1 THEN
         dst_host_srv_serror_rate = 0.01
 IF src_bytes <= 312 AND
     IF dst_bytes > 25045 AND
         IF dst_host_count > 8 THEN
             dst_host_srv_serror_rate = 0
         IF dst_host_count <= 8 THEN
             dst_host_srv_serror_rate = 0.01
     IF dst_bytes <= 25045 AND
         IF src_bytes > 166 AND
             IF dst_host_count > 48 THEN
                 dst_host_srv_serror_rate = 0
             IF dst_host_count <= 48 AND
                 IF dst_host_count > 43 AND
                     IF count > 9 THEN
                         dst_host_srv_serror_rate = 0
                     IF count <= 9 AND
                         IF dst_host_count > 44 THEN
                             dst_host_srv_serror_rate = 0
                         IF dst_host_count <= 44 THEN
                             dst_host_srv_serror_rate = 0.01
                 IF dst_host_count <= 43 THEN
                     dst_host_srv_serror_rate = 0
         IF src_bytes <= 166 AND
             IF src_bytes > 161 AND
                 IF dst_host_count > 97 THEN
                     dst_host_srv_serror_rate = 0
                 IF dst_host_count <= 97 THEN
                     dst_host_srv_serror_rate = 0.01
             IF src_bytes <= 161 THEN
                 dst_host_srv_serror_rate = 0
