UNSW IoT traffic data with packets, flows, and protocols

The UNSW IoT traffic data (UNSW-IoTraffic) is a dataset comprising (a) raw
network packet traces with full headers and payload, (b) flow-level
metadata summarizing fine-grained bidirectional activity behaviors, and
(c) protocol parameters describing network protocol
characteristics.  The dataset also includes scripts written in
Java for flow extraction and protocol matching using protocol data models,
along with data models for six dominant protocols (TLS, HTTP, DNS, DHCP,
SSDP, and NTP). The dataset contains 95.5 million packets of IoT
communications captured over 203 days, organized into 27 per-device packet
capture (PCAP) files. Derived flow data, categorized based on the 5-tuple
attributes (source IP address, destination IP address, protocol number,
source port number, destination port number), are provided as 27
per-device CSV files. Additionally, protocol-specific parameters for 70%
 flows are extracted into a total of 450 CSV files across 27
device types, covering 25 protocols, each with request and response data.
Our dataset's three-level structure—containing packets, flows, and
protocols—supports a diverse range of users, from students learning data
networking concepts to experienced researchers and industry professionals.
It enables the behavioral analysis of consumer IoT devices, the detection
of anomalies, and the validation of protocols.