Bd_116.zip -

It typically contains a subset of "Benign" (normal) network traffic data, which serves as the baseline for identifying anomalies.

Researchers use this file to extract flow features (like flow duration, packet length, and inter-arrival time) to create a "normal" profile for a network. How to Use the File bd_116.zip

Unzip the file to access the raw .pcap files. Note that these files can be several gigabytes in size. It typically contains a subset of "Benign" (normal)

The file is a critical component of the Cyber-Security Research Dataset (CSRD) specifically associated with the CIC-IDS-2017 or CSE-CIC-IDS2018 datasets used for intrusion detection system (IDS) evaluation . It primarily contains raw network traffic data in PCAP format. Overview and Purpose Note that these files can be several gigabytes in size

In the context of the CIC-IDS2017 dataset, bd_116.zip usually refers to one of the raw data segments captured during the 5-day monitoring period.

While the data inside bd_116.zip is generally benign, these datasets often contain traces of malware communication or exploit attempts (if you are looking at the attack-day subsets). It is best practice to handle these files in a if you are performing deep packet inspection or executing any embedded payloads for forensic research.

Developed by the Canadian Institute for Cybersecurity (CIC) at the University of New Brunswick.