Netflow data without sampling for test (D2)

NetFlow traffic generated using DOROTHEA (DOcker-based fRamework fOr gaTHering nEtflow trAffic)

NetFlow is a network protocol developed by Cisco for the collection and monitoring of network traffic flow data generated. A flow is defined as a unidirectional sequence of packets with some common properties that pass through a network device.

NetFlow flows have been captured without sampling at the packet level. A sampling means that 1 out of every X packets is selected to be flow while the rest of the packets are not valued.

The version of NetFlow used to build the datasets is 5.

In the construction of the datasets, different percentages of flows considered attacks and flows considered normal traffic have been used.

These datasets have been used to test machine learning models.