Hello
I am a novice, ns - 3 in a recent work on a project, is the possibility of abnormal detection of Dos attack, my idea is to use ns - 3 network simulator, a regular type of network model is established, and then simulate the Dos attack, then collected in the attack in the network of various data, including the IP address of the node to send and receive, and the flow state of the sending and receiving data, but to establish a regular pattern of simulation network in some places is not clear, hope each great god can give us your advice, or you can direct messages me!!!!!!!!