Witty Worm Dataset (2004-03-19 to 2004-03-24)

Information useful for studying the spread of the Witty worm, as observed by
the UCSD Network Telescope over a 5-day period in Mar 2004. Data available
include IP address and hostname lists: time, duration, and country distributions:
flow files: and raw packet traces containing all observed Witty worm traffic.
Possible uses include modeling worm propagation and using real packet traces
to validate algorithms for detecting or classifying malicious traffic.
Statistics: 104GB (uncompressed) of traces containing 997 million packets,
55,909 infected IP addresses.

本数据集可用于研究Witty蠕虫（Witty worm）的传播行为，其数据源自2004年3月加州大学圣地亚哥分校（UCSD）网络望远镜（Network Telescope）开展的为期5天的观测。可用数据涵盖IP地址与主机名列表、时间分布、持续时长分布与地域分布、流量流文件，以及包含所有观测到的Witty蠕虫流量的原始数据包追踪数据。该数据集的潜在应用包括蠕虫传播建模，以及利用真实数据包追踪数据验证恶意流量检测或分类算法。数据集统计信息：未压缩数据量达104GB，包含9.97亿个数据包与55909个被感染IP地址。