How to extract features of ddos in k nearest neighbor(knn) classifier?

See more:

Linux

Python2.7

I am confused about the key features to input for each ddos attacks to differentiate appropriately. Its my first time using the KNN classifier. How should I proceed with the attacks to detect or how should I proceed with the codes to initiate properly. A code example would be very helpful for the initiation of classifier.

Need help urgently ASAP regarding my research project work.

What I have tried:

I tried with the KNN classifier but unable to walk through the procedure entirely.