Example flow data for testing with the netAI_CL software Contains sample data of dns (port 53), http (port 8000), and ssh (port 22) data. Including interim flows there are 3137, 1229 and 243 instances in each class respectivly. There are 697 unique application flows in total (not including iterim exports). These files are for testing purposes only and should not be relied on for series classification work!
EXPORT SETTINGS
- UDP flows with at least 1 packet in each direction
- TCP flows that at least 1 packet in each direction and at least 1 byte of data transferred
- 60s flow timeout for UDP flows. TCP flows are exported upon RST from one side or proper FIN/ACK handshake from both sides or after 600s timeout
- Packet length is length of IP header and data
- Interim flow information is updated every 10 seconds
FILES
example.arff
- ARFF formatted dataset containing the flow statistics
can be used for training (-t) or as test set (-T).
example.model
- A J48 model of the data in example.arff.
example.stats
- Unfiltered version of data used in example.arff (as
exported by NetMate)