How do you approach feature engineering for a model aimed at detecting anomalies in network traffic on Cisco systems?