CESNET-TLS-Year22 Dataset

  • Yearly TLS network traffic dataset from backbone lines.

CESNET-QUIC22 Dataset

  • One-month QUIC network traffic dataset from backbone lines, showcasing potential to replace TLS over TCP.

  • Unique ISP-based data: characteristics from diverse web browsers, operating systems, devices.

  • Focus on QUIC traffic analysis due to its inspection challenges and HTTP/3 usage.

Dataset Features

  • Flow Characteristics: Encrypted QUIC communications with extended packet metadata and histograms.

  • Handshake Fields: Includes Server Name Indication (SNI), used QUIC version, user agent string.

  • Packet Sequences: Information on the first 30 packets, including length, duration, and roundtrips.

Flow Statistics

  • Aggregate information about bidirectional flow: total bytes, packets, flow duration, and histograms.

  • Histogram Bins: Sizes and times are in logarithmic scale with 8 bins (0–15 ms, 16–31 ms, etc.).

Dataset Structure

  • Flows in compressed CSV format, with metadata in JSON files (flow counts, uncompressed sizes).

  • Includes stats for weekly and overall dataset flow counts, and feature distribution specifics.

Weekly Flow Information

Week

Uncompressed Size

Capture Period

Flows

W-2022-44

19 GB

31.10.2022-6.11.2022

32.6 M

W-2022-45

25 GB

7.11.2022-13.11.2022

42.6 M

W-2022-46

20 GB

14.11.2022-20.11.2022

33.7 M

W-2022-47

25 GB

21.11.2022-27.11.2022

44.1 M

Total

89 GB

31.10.2022-27.11.2022

153 M

CESNET2 Network Overview

  • Network connects several public organizations: universities, hospitals, offices.

  • Utilizes traditional IPFIX monitoring with probes across major cities connected to 100 Gbps lines.

Monitoring Infrastructure

  • Steps include Service Selection, Flow Enrichment, Collection, Sampling, and Anonymization with NTP synchronization for probes.