SDN traffic data collected from self-generated TCP SYN Flood DDoS attack within 2 hosts, 1 switch network in 2025

These data consist of network packets collected from a self-generated TCP SYN Flood attack resembling common DDoS attack in SDN. They came from a simple 2 host, 1 switch network, where one host (attacker) repeatedly sent meaningless information to the other (victim) using randomized source address. The simulated attack was launched using built-in ping command available in Linux virtual machine in 2025. From the data, various information such as source and destination addresses, TCP flags and timeframe between each packet can be used to produce a pattern resembling a DDoS attack, allowing the creation of a machine learning program to detect and mitigate such attack. These data were collected by Alfred Antonio of Binus University.