DDoS and host background traffic - Pcap traces

This dataset includes Pcap files with DDoS and background traffic related to a host machine. Data can be used to test host-based DDoS detection solutions. DDoS traffic has been generated using the following tool: https://github.com/ricardojoserf/ddos simulation/tree/master

Each archive include a different number of malicious IP addresses, specified in the .zip file name.

If you use this dataset, please credit us by citing our paper:

M. Zang, F. De Iaco, J. Wu, M. Savi, In-Kernel Traffic Sketching for Volumetric DDoS Detection, in IEEE International Conference on Communications (ICC), Jun. 2025

If using LaTeX, you can use the following BibTeX:

@inproceedings{zang2025ebpfsketching,
  title={In-Kernel Traffic Sketching for Volumetric DDoS Detection},
  author={Zang, Mingyuan and De-Iaco, Federico and Wu, Jie and Savi, Marco},
  booktitle={IEEE International Conference on Communications (ICC)},
  year={2025},
}