Deakin IoT Traffic Dataset

This dataset comprises network traffic collected from 24 Internet of Things (IoT) devices over a span of 119 days, capturing a total of over 110 million packets. The devices represent 19 distinct types and were monitored in a controlled environment under normal operating conditions, reflecting a variety of functions and behaviors typical of consumer IoT products. The raw packet capture (pcap) files preserve complete packet information across all protocol layers, including ARP, TCP, HTTP, and various application-layer protocols. Raw pcap files are also provided, which contain traffic from 36 non-IoT devices present in the network. To facilitate device-specific analysis, a CSV file is included that maps each IoT device to its unique MAC address. This mapping simplifies the identification and filtering of packets belonging to each device within the pcap files. 3 extra CSV files provide metadate about the states that the devices were in at different times. Additionally, Python scripts are provided to assist in extracting and processing packets. These scripts include functionalities such as packet filtering based on MAC addresses and protocol-specific data extraction, serving as practical examples for data manipulation and analysis techniques. This dataset is valuable for researchers interested in network behavior analysis, anomaly detection, and the development of IoT-specific network policies. It enables the study and differentiation of network behaviors based on device functions and supports behavior-based profiling to identify irregular activities or potential security threats.

本数据集涵盖了24台物联网（Internet of Things, IoT）设备在119天周期内采集的网络流量，累计捕获超过1.1亿个网络数据包。该批设备涵盖19种不同品类，均在受控环境下以正常运行状态进行监测，覆盖了消费级物联网产品典型的各类功能与行为模式。原始数据包捕获（pcap）文件保留了所有协议层的完整数据包信息，涵盖地址解析协议（Address Resolution Protocol, ARP）、传输控制协议（Transmission Control Protocol, TCP）、超文本传输协议（HyperText Transfer Protocol, HTTP）以及各类应用层协议。数据集同时提供了包含网络中36台非物联网设备流量的原始pcap文件。为便于开展设备级分析，数据集附带了一份逗号分隔值（Comma-Separated Values, CSV）文件，用于将每台物联网设备与其唯一媒体访问控制（Media Access Control, MAC）地址进行关联映射。该映射关系可简化pcap文件中各设备对应数据包的识别与筛选操作。另有3份CSV文件提供了各设备在不同时段的运行状态元数据（Metadata）。此外，数据集还附带了用于辅助数据包提取与处理的Python脚本。这些脚本具备基于MAC地址的数据包筛选、协议专属数据提取等功能，可作为数据处理与分析技术的实操示例。本数据集对于关注网络行为分析、异常检测以及物联网专属网络策略研发的研究人员具有重要价值。该数据集支持基于设备功能开展网络行为的研究与区分，并可通过行为画像识别异常活动或潜在安全威胁。

搜集汇总

背景与挑战

背景概述

该数据集收集了24种物联网设备在119天内的网络流量，包含超过1.1亿个数据包，涵盖多种协议层信息，并提供了设备MAC地址映射和数据处理脚本，适用于网络行为分析和异常检测研究。