Deakin IoT Traffic Dataset

This dataset comprises network traffic collected from 24 Internet of Things (IoT) devices over a span of 119 days, capturing a total of over 110 million packets. The devices represent 19 distinct types and were monitored in a controlled environment under normal operating conditions, reflecting a variety of functions and behaviors typical of consumer IoT products. The raw packet capture (pcap) files preserve complete packet information across all protocol layers, including ARP, TCP, HTTP, and various application-layer protocols. Raw pcap files are also provided, which contain traffic from 36 non-IoT devices present in the network. To facilitate device-specific analysis, a CSV file is included that maps each IoT device to its unique MAC address. This mapping simplifies the identification and filtering of packets belonging to each device within the pcap files. 3 extra CSV files provide metadate about the states that the devices were in at different times. Additionally, Python scripts are provided to assist in extracting and processing packets. These scripts include functionalities such as packet filtering based on MAC addresses and protocol-specific data extraction, serving as practical examples for data manipulation and analysis techniques. This dataset is valuable for researchers interested in network behavior analysis, anomaly detection, and the development of IoT-specific network policies. It enables the study and differentiation of network behaviors based on device functions and supports behavior-based profiling to identify irregular activities or potential security threats.本数据集收录了24台物联网（Internet of Things）设备在119天周期内产生的网络流量，累计捕获超过1.1亿个数据包。该数据集覆盖19种不同类型的物联网设备，均在受控环境中于正常运行状态下被监控，其功能与行为均符合消费级物联网产品的典型特征。 原始数据包捕获（Packet Capture, pcap）文件可保留所有协议层的完整数据包信息，涵盖地址解析协议（Address Resolution Protocol, ARP）、传输控制协议（Transmission Control Protocol, TCP）、超文本传输协议（Hypertext Transfer Protocol, HTTP）以及各类应用层协议。数据集同时提供了包含网络中36台非物联网设备流量的原始pcap文件。 为便于开展设备针对性分析，本数据集附带一份逗号分隔值（Comma-Separated Values, CSV）文件，用于将每台物联网设备与其唯一的媒体访问控制（Media Access Control, MAC）地址进行关联映射。该映射关系可简化pcap文件中归属各设备的数据包的识别与筛选操作。另有3份CSV文件提供了设备在不同时段的运行状态元数据。 此外，数据集还附带了用于辅助数据包提取与处理的Python脚本。这些脚本具备基于MAC地址的数据包筛选、特定协议数据提取等功能，可作为数据处理与分析技术的实操示例。 本数据集对于关注网络行为分析、异常检测以及物联网专属网络策略开发的研究人员具有较高的应用价值。该数据集可支持基于设备功能的网络行为研究与区分，并可辅助开展基于行为的画像分析，以识别异常活动或潜在安全威胁。