SDN traffic data collected from self-generated TCP SYN Flood DDoS attack within 2 hosts, 1 switch network and from public dataset CIC-DDoS2019 in 2025

These data consist of network packets collected from a self-generated TCP SYN Flood attack resembling common DDoS attack in SDN. They came from a simple 2 host, 1 switch network, where one host (attacker) repeatedly sent meaningless information to the other (victim) using randomized source address. The simulated attack was launched using built-in ping command available in Linux virtual machine in 2025. From the data, various information such as source and destination addresses, TCP flags and timeframe between each packet can be used to produce a pattern resembling a DDoS attack, allowing the creation of a machine learning program to detect and mitigate such attack. Additionally, sample data taken from the public dataset CIC-DDoS2019 are also used as training data. These data were collected by Alfred Antonio of Binus University.