Text this: Uncovering anomaly traffic based on traffic features