it is 10 year ago since I've read this, so I could be very wrong, but I thought from my memory [which is shocking at times] that this is the poison distribution. You could look up Armitage and Berry statistical textbook to check

You could check out Low Orbit Ion Cannon. It's a DDOS low-rate attack tool. You could set up a network testbed with multiple hosts and launch LOIC on multiple hosts. Use Wireshark to capture the packet and use it as dataset for analysis.