Loughborough University - Network Traffic with Port Scanning Attack
datasetposted on 06.04.2017 by Kostas Kyriakopoulos, Francisco Aparicio-Navarro
Datasets usually provide raw data for analysis. This raw data often comes in spreadsheet form, but can be any collection of data, on which analysis can be performed.
Each row of the file is a per second entry
The dataset was gathered from a real LAN in a research office during 9 days and comprises normal traffic and traces of port scanning attacks.
The file contains the following columns:
 Date dd/MM/YY
 Time hh:mm:ss
 Number of frames transmitted per second
 Number of distinct Source MAC addresses per second
 Number of distinct Destination MAC addresses per second
 Throughput (bytes per second)
 Number of distinct Source Ports per second
 Number of distinct Destination Ports per second
 Flag (i.e., 1 if entry includes port scanning activity or 0, if it is just normal traffic)