Skip to main content
Dryad

UNSW-IoTraffic: Consumer IoT Packets, Flows and Protocols

IoT Security & Intrusion Detection IoT Security & Intrusion Detection
138 views
1 min read
License
Catalog metadata: This page is a discovery record, not publisher documentation. Verify the description, schema, provenance, version, licence, and citation at the linked source before use.

Catalog Summary

"Consumer IoT network traffic from 27 devices over about 203 days: 95.5 million packets and 4.9 million flows, released as packet, flow and protocol files."

Catalog Notes

Overview

UNSW-IoTraffic provides consumer IoT network observations at packet, flow and protocol-parameter levels. It supports device profiling and traffic analysis.

Structure and scale

  • Publisher-reported totals: 95,543,405 packets and 4,944,041 flows; 27 devices; approximately 203 days.
  • 27 PCAP files, 27 flow CSV files and 450 protocol-parameter CSV files.
  • 25 protocols detected using models covering 55 protocol types; parameter extraction covers approximately 70 percent of flows.
  • Timestamps use UTC.

Download size

Dryad lists UNSW-IoTraffic.zip at 14.24 GB. It contains the complete package. The separate PCAP, flow, protocol and script archives duplicate its subsets; the displayed 28.47 GB deposit total is not the size of unique data.

Limitations

There are no ground-truth event or interaction annotations. Packet traces retain full headers and payloads. The strings * and null represent documented unavailable or inapplicable fields, not wildcards. Counts are taken from the publisher documentation; the raw files were not independently recounted for this catalog.

Source and license

Savindu Wannigama is affiliated with the University of Peradeniya; Arunan Sivanathan and Hassan Habibi Gharakheili with UNSW Sydney. Dryad publication date: 29 August 2025. Source record. The dataset is registered under CC0 1.0.

Dataset DOI: 10.5061/dryad.w0vt4b94b. Companion descriptor DOI: 10.1109/IEEEDATA.2025.3602010.

View Data Structure

To explore column names, data types, and sample rows, visit the official dataset page on Dryad.

Preview on Dryad

Cite This Dataset

Wannigama, S., Sivanathan, A., & Habibi Gharakheili, H. (2025). UNSW IoT traffic data with packets, flows, and protocols [Data set]. Dryad. https://doi.org/10.5061/dryad.w0vt4b94b

Source metadata: Dryad (2025) · DOI: 10.5061/dryad.w0vt4b94b

Indexed by IoTDataset.com on Sep 22, 2026

Review the Source Record

Confirm the licence, version, access conditions, file format, and provenance at the source before use.

Open Source Page

Related Topics & Keywords

Browse all IoT Security & Intrusion Detection datasets

Share This Research

More in IoT Security & Intrusion Detection

View All
Cybersecurity Kaggle

Bot-IoT Dataset - Large-Scale IoT Botnet Traffic with Full Packet Capture

Comprehensive large-scale IoT botnet dataset combining legitimate IoT network traffic with realistic botnet attack scenarios. Features full packet captures (PCAP) and extracted flow features for diverse attack types including DDoS, reconnaissance, theft, and DoS attacks.

Jan 23, 2026
Network Security IoT Stratosphere Lab

IoT-23: A Labeled Dataset with Malicious and Benign IoT Network Traffic

Comprehensive dataset from Stratosphere Laboratory containing network traffic from 23 IoT malware captures including Mirai and Torii botnets, with over 325 million labeled connections for cybersecurity research and ML-based threat detection.

Jan 16, 2026
Network Security University

MQTT-IoT-IDS2020 — MQTT Internet of Things IDS Dataset

MQTT IoT IDS dataset from a simulated network with 12 sensors, broker, camera, and attacker. PCAP and CSV features support MQTT intrusion detection research.

Jun 02, 2026
Cybersecurity University

MedBIoT — Medium-Sized IoT Botnet IDS Dataset [83 devices]

IoT botnet IDS dataset using 83 real and emulated devices with Mirai, BashLite, and Torii traffic. Raw PCAP files support botnet and anomaly detection research.

Jun 02, 2026
Network Security Zenodo

IoT Emulated ICMP/Ping Dataset — Normal and Malicious Traffic [3.2 GB PCAP]

IoT IDS dataset for distinguishing normal and malicious ICMP/Ping traffic generated from an ESP-01s embedded device. PCAP, Zeek logs, and labelled CSV files.

Jun 02, 2026
Network Security University

CICIoT2023: Real-Time IoT Attack Dataset [47M+ Labeled Flows, 33 Attack Types]

Large-scale IoT cybersecurity dataset with 47M+ labeled network flows from 105 real IoT devices across 33 attack types in 7 categories. PCAP and CSV formats. Built for IDS/IPS development and ML-based IoT traffic classification research.

Apr 13, 2026

Explore other topics

All topics →