Host network traffic time series 2019/01

<em><strong>General info</strong></em> Dataset was collected over one <strong>month period in January 2019</strong>. The observation points for the collection of IP flows were located at the borders of the university campus network. The campus university network has /16 CIDR IPv4 network range at disposal and contains various network segments from segments connecting dormitories, over server segments, to a segment containing working stations of university administrative workers. The size of the raw IP flows used to create the dataset was over 860GB. <strong>A host in our dataset is identified by its source IPv4 address. </strong><br> <em><strong>Variables</strong></em> The dataset contains the following variables: <strong>Aggregations</strong> - created from five-minute total volumes aggregated over one-hour disjoint windows using mean/max/min aggregation functions <strong># of flows (FL) </strong>- number of flows for a given source IP <strong># of packets (PKT)</strong> - number of packets for a given source IP <strong># of bytes (BYT)</strong> - number of packets for a given source IP <strong>flow duration (DUR)</strong> - average flow duration in seconds <strong>Distinct Counts </strong>- count of distinct values for each variable in five-minute window aggregated over one-hour disjoint windows using mean/max/min aggregation functions <strong># of peers (PEER)</strong> - number of distinct communication peers for a given source IP <strong># of ports (PORTS)</strong> - number of distinct destination ports for a given source IP <strong># of protocols (PROTO)</strong> - number of distinct communication protocols for a given source IP <strong># of AS numbers (AS)</strong> - number of distinct destination AS numbers for a given source IP <strong># of countries (CTRY)</strong> - number of distinct destination countries for a given source IP <strong>Labels</strong> <strong>Range (RNG)</strong> - a network range a host belongs to (anonymized) <strong>Unit (UNT) </strong>- an administrative unit owning the network range <strong>Sub-unit (SUB-UNT)</strong> - a sub-unit of the unit <em><strong>Dataset format</strong></em> The dataset is in <strong>comma-separated values (CSV)</strong> format. <strong>Header</strong> - multilevel, first 3 lines 1 level - aggregation type {mean|min|max} 2 level - variable {see above} 3 level - hour of a day {00,01,02,03,...,22,23} <strong>Lablels</strong> - last 4 columns <strong>Dataset size </strong> rows: 65536 host records + 3 headers columns: 648 variables + 4 labels