i am trying to implement a algorithm for detecting DDoS attacks. For this i require a collection of both legitimate and attacking traffic but i don't know how to get these traffic samples. Please can anyone help me in this.
I usually just use WireShark to look at all network traffic.