To collect the data, a specific POX component was codified in the SDN environment to store in a file of the dataflow. Firstly, in six clients, the Scapy tool was used to generate malicious data traffic. Secondly, to obtain traffic in the network, using six clients again, the ‘‘ping’’ command and the Scapy tool were used, generating HTTP and ICMP normal traffic. In both cases (malicious and normal traffic), the six hosts of the simulated environment were the target.
为了收集数据，在SDN环境中编写了特定的POX组件，以存储在数据流的文件中。首先，在6个客户端使用Scapy工具生成恶意数据流量。其次，为了获取网络流量，再次使用6个客户端，使用“ping”命令和Scapy工具，生成HTTP和ICMP正常流量。在这两种情况下(恶意流量和正常流量)，模拟环境中的6台主机都是目标。
《Machine learning algorithms to detect DDoS attacks in SDN》