UNSW-IoTraffic

UNSW IoT traffic data with packets, flows, and protocols

Dataset DOI: 10.5061/dryad.w0vt4b94b

UNSW-IoTraffic is a multi-resolution network traffic dataset of consumer IoT devices captured from a lab testbed. It includes device-specific raw PCAPs (full headers and payloads), flow-level CSVs (bidirectional 5-tuple flows with statistics), and protocol-parameter CSVs (request/response attributes for selected protocols). The capture covers 27 devices, spans ≈203 days of operation (setup, idle, and interactions), and totals 95,543,405 packets, 4,944,041 flows, and ≈26.9 GB of PCAPs. All timestamps are recorded in UTC.

📊 Description of the data and file structure

We provide five ZIP archives so you can fetch only what you need:

📦 UNSW-IoTraffic.zip

Root archive containing the entire dataset

🔍 pcaps.zip

27 device-specific raw packet traces (.pcap)

🔄 flows.zip

27 device-specific flow-level CSVs

⚙️ protocols.zip

Protocol models and parameters

🔧 scripts.zip

Reusable analysis utilities

Download options: UNSW-IoTraffic.zip (root) contains the entire dataset, including pcaps/, flows/, protocols/, and scripts/. The individual archives are duplicate subsets provided for convenience so users can download only the parts they need.

📁 Dataset Structure

UNSW-IoTraffic/
├─ pcaps/
│  ├─ AmazonEcho_44650d56ccd3.pcap
│  ├─ AwairAirQuality_70886b100fc6.pcap
│  └─ ...
├─ flows/
│  ├─ AmazonEcho_44650d56ccd3_flows.csv
│  ├─ AwairAirQuality_70886b100fc6_flows.csv
│  └─ ...
├─ protocols/
│  ├─ models/
│  │  ├─ DHCP_model.json
│  │  ├─ HTTP_model.json
│  │  └─ ...
│  └─ parameters/
│     └─ <DeviceName>_<DeviceMAC>/
│        ├─ requests/
│        │  ├─ dhcpAttributes.csv
│        │  ├─ httpAttributes.csv
│        │  └─ ...
│        └─ responses/
│           ├─ dhcpAttributes.csv
│           ├─ httpAttributes.csv
│           └─ ...
└─ scripts/
   ├─ random-forest-classifier/
   ├─ state-diagrams/
   └─ summaries/

Cite our data