Gotham Device-Level IoT Traffic — 78 Smart City Devices, Federated IDS Benchmark [2026]
Abstract
"Large-scale distributed IoT IDS benchmark with traffic captured at individual device interfaces across 78 heterogeneous smart city IoT devices using the Gotham testbed. PCAP and CSV. Published January 2026 on Zenodo. Designed for federated learning and decentralised IDS research."
Description
Overview
The Gotham Device-Level IoT Network Traffic Dataset is one of the most recent IoT security benchmarks, published to Zenodo in January 2026. Generated using the open-source Gotham testbed, it represents a virtualised smart city environment where 78 heterogeneous IoT devices generate realistic traffic across multiple device classes and communication protocols.
Its defining innovation is the distributed data collection strategy: traffic is captured separately at each IoT device interface rather than aggregated at a central gateway. This preserves the inherently non-IID character of real-world edge data, crucial for validating federated learning-based IDS systems.
The dataset contains 3,134,004 packets and 3,452,465,659 bytes of network traffic across all device captures. Device traffic volumes vary significantly — from low-bandwidth sensors to high-traffic RTSP cameras generating over one million packets.
Column Schema
| Column | Description |
|---|---|
| timestamp | Timestamp of the captured packet or flow. |
| device_id | Unique identifier for the IoT device interface. |
| device_type | Category of IoT device (camera, sensor, gateway, etc.). |
| src_ip / dst_ip | Source and destination IP addresses. |
| protocol | Network protocol (TCP, UDP, RTSP, MQTT, HTTP, CoAP, etc.). |
| packet_len | Length of the captured packet in bytes. |
| label | Binary label: benign or attack. |
| attack_type | Specific attack category where applicable. |
Key Statistics
- Total Packets: 3,134,004
- Total Bytes: 3,452,465,659
- IoT Devices: 78 heterogeneous smart city IoT devices
- Testbed: Open-source Gotham virtualised smart city environment
- File Format: PCAP and CSV (per-device files)
- Non-IID structure: traffic stored per-device for federated learning
- Published: January 2026 on Zenodo
Use Cases
- Federated learning algorithm development for distributed IoT intrusion detection
- Decentralised IDS evaluation preserving per-device data privacy
- Smart city IoT security analytics across diverse device types and protocols
- Non-IID data benchmarking for privacy-preserving ML in IoT
Source and Attribution
Publicly available on Zenodo (record 14502760), published January 2026. Accompanies research on federated learning-based IDS for heterogeneous IoT environments.
View Data Structure
To explore column names, data types, and sample rows, visit the official dataset page on Zenodo.
Preview on ZenodoCite This Dataset
Belarbi, Othmane, Spyridopoulos, Theodoros, Anthi, Eirini, Rana, Omer, Carnelli, Pietro, & Khan, Aftab (2025). Gotham Device-Level IoT Traffic — 78 Smart City Devices, Federated IDS Benchmark [2026]. [Dataset]. Zenodo. https://doi.org/10.5281/ZENODO.14502760
Source: Zenodo (2025) · DOI: 10.5281/ZENODO.14502760
Indexed by IoTDataset.com on May 03, 2026
Ready to Start Your Research?
Download this dataset directly from the official repository and start building your next breakthrough project.