Open-source datasets for anyone interested in working with network anomaly based machine learning, data science and research
This data set covers three different types of port state changes that can and are seen in a network. These three types are an optical transceiver pulled from a network port on a given device and then once the event stabilizes, the transceiver is reinserted.
The second type of port state change is an admin state change from up to down, a port shutdown. As with the first port state change, once the network event stabilizes the state of the port is changed back to up.
The third port state change is a change in link state, in this case a loss of light to the transceiver. This is achieved by removing the fiber optics cable from the transceiver. Once this network event stabilizes, the fiber optic cable is plugged in and and link will be established.
For the above scenarios, two events were completed allowing you to see the how the event is reflected when it happens on a local port, or when it happens on a remote port of the neighbor box. For the transceiver removal, we removed the transceiver on Spine 2 which will allow you to see the signature of the event trigger and the subsequent event bloom where the trigger happens on Spine 2.
Logfiles for the duration of the events for all devices in the fabric are found under /portflap/logs
portflap_casedata.txt Times and devices where anomaly's occured portflap_header.txt Header line of .csv file with column numbers portflap_header_definitions.docx Description of each column's data portflaptypes.csv.gz Network data
Creative Commons Attribution-NonCommercial 4.0 © Cisco Innovation Edge