Loughborough University - Network Traffic with Port Scanning Attack

posted on 06.04.2017 by Kostas Kyriakopoulos, Francisco Aparicio-Navarro
Each row of the file is a per second entry

The dataset was gathered from a real LAN in a research office during 9 days and comprises normal traffic and traces of port scanning  attacks.

The file contains the following columns:
[1] Date dd/MM/YY
[2] Time hh:mm:ss
[3] Number of frames transmitted per second
[4] Number of distinct Source MAC addresses per second
[5] Number of distinct Destination MAC addresses per second
[6] Throughput (bytes per second)
[7] Number of distinct Source Ports per second
[8] Number of distinct Destination Ports per second
[9] Flag  (i.e., 1 if entry includes port scanning activity or 0, if it is just normal traffic)


EPSRC: EP/K014307/2, EP/K014307/1