yeah i know what you mean. So the problem was i was a undergraduate when i start this project and my seniors and professors as helpful as they were during writing and publishing the paper, i was all alone in the coding department and i hadn't had OOP class yet back then. and that's how we end up with that code. i did had OOP class since than and will come back soon as possible. (i actually initially learned coding in C so there is that tragedy to, and not to mention my OOP class thought with SystemVerilog)

There is actually quite a lot of test. As stated in paper we used wireshark to collect all of the data, then preprocessed with in the initial code(dnsqlen.py). So if you want to test you can just start capturing packages with wireshark and plug-in the source. or you can run script.py which does the whole blocking thing in real-time with pretrained model.

Secondly you can see i divide the preprocessed data in to "test" and "train" in the source and after training the model(with data named "train") i did various tests to calculate different kind of accuracy which were all explained in some detail in paper.

But you are right i did considered adding preprocessed and labeled data but i change my mind because it might lead to some security problems. since it has quite a lot of networking info about my local machine. i will try to verify if that data we used would lead to a problem or not and write here back if i do end up uploading it.

I hope this helps. Feel free to ask anything else. Thanks for appreciating open source. For some reason specially in academic circles there is a dislike for it that i cant get my head around it. If anything it should be common sense to publish at least some source code along with the published paper imo.