LFA Simulation

This dataset, generated using Containernet, simulates a link flooding DDoS attack in a network with 47 switches, 41 hosts, 60 IDC containers, and 1 DNS server. Captured in /tmp/s6_mixed_traffic.pcap and metadata files, it contains 70%–80% normal traffic (HTTP, HTTPS, SSH, DNS, STUN), 20%–30% attack traffic, and 0%–10% spoofed traffic, with TCP (65%) and UDP (35%) protocols. The critical link (s6–s42) is configured with 5 Mbps bandwidth, 2.1 ms latency, 0.5% packet loss, and 0.5 ms jitter. It is designed for research on evaluating the accuracy of DDoS detection algorithms by analyzing traffic patterns and flow characteristics.