how to define state space of a Reinforcement Learning algorithm using flow entries of an SDN switch?

Question

I am trying to implement DDOS attack detection in SDN network using reinforcement Learning algorithm, for this task I want to define my state space of Reinforcement Learning environment in the form of flow entries of the flow table,but I am unable to represent it properly ? Can somebody provide a little guidance of doing it ?

Thanks and regards