dataset-v1.pcap

The dataset consists of 9 hosts: 1x HMI; 1x Data Historian; 5x RTU; 1x MITM Attacker; 1x Reconnaissance. The man in the middle (MITM) attack targets IEC104, which replaces the COT value to an invalid value.

There is one dataset in two formats. PCAP and binary format fot SiLK[1]

[1] https://tools.netsa.cert.org/silk/docs.html