DDOS_Chargen_2016 (11/25/2016 to 11/26/2016)

This is a real-world DDoS attack captured at Merit's border router in SFPOP. It's a reflection and amplification Distributed Denial of Service attack (DDoS) that is based on the CHARGEN protocol (over UDP). Data are organized into 4 folders, namely WSUa, WSUb, WSUc and WSUd (all folders contain data from the same site; due to traffic load balancing, we have 4 collection folders). The attack starts around 11:59am (Eastern Timezone) and hits destination IP 35.7.72.0 (all our IPs are anonymized by zeroing the last 11 bits). Data format: flow-tools

本数据集为捕获于SFPOP站点Merit边界路由器的真实分布式拒绝服务（Distributed Denial of Service, DDoS）攻击流量。该攻击属于基于运行于用户数据报协议（User Datagram Protocol, UDP）之上的CHARGEN协议的反射放大型DDoS攻击。数据集共划分为4个文件夹，依次为WSUa、WSUb、WSUc与WSUd，所有文件夹均源自同一采集站点；因流量负载均衡需求，共设置4个采集目录。本次攻击于东部时区上午11:59左右启动，攻击目标IP地址为35.7.72.0，所有IP地址均通过将最后11位置零的方式完成匿名化处理。数据存储格式为flow-tools。