Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 10506_8, Duration: 0.227, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 52

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 10170_24, Duration: 0.539, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 10799_103, Duration: 0.107, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 11261_3, Duration: 0.913, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 10207_47, Duration: 0.215, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 12910_109, Duration: 0.801, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 11214_254, Duration: 0.407, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 10082_244, Duration: 1.188, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 10107_215, Duration: 0.453, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 10902_202, Duration: 0.429, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 4, Number of Packets: 32

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 10104_157, Duration: 1.859, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 10244_14, Duration: 1.673, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 10842_79, Duration: 1.062, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 10092_104, Duration: 2.135, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 10249_103, Duration: 0.183, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 10801_116, Duration: 0.343, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 10091_132, Duration: 0.017, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 10082_46, Duration: 0.101, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 11483_229, Duration: 2.352, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 53

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 11906_231, Duration: 1.478, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 43

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 11560_147, Duration: 0.387, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 10459_33, Duration: 0.104, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 12911_225, Duration: 2.609, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 48

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 10533_152, Duration: 3.027, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 765

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 10579_49, Duration: 3.592, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 33

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 10352_165, Duration: 0.082, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 10010_36, Duration: 0.906, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 10296_234, Duration: 2.03, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 150

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 12912_193, Duration: 1.845, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 10366_163, Duration: 1.908, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 10205_12, Duration: 3.943, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 11446_38, Duration: 1.083, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 11710_160, Duration: 0.344, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 12913_251, Duration: 0.285, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 10921_195, Duration: 0.155, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 12914_65, Duration: 0.139, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 12915_114, Duration: 0.939, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 12695_211, Duration: 1.106, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 12704_38, Duration: 1.166, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T07:01:26.996000, End Frame: 2017-03-16T08:01:26.996000, Source IP: 10056_138, Duration: 0.039, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10001_8, Duration: 11.893, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 46, Number of Packets: 321

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10062_127, Duration: 3.235, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 5, Number of Packets: 44

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10056_41, Duration: 1.847, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 7, Number of Packets: 102

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 192.168.220.4, Duration: 671.989, Protocol: 2, Source Port: 1894, Destination IP: 332, Destination Port: 8, Number of Packets: 19385

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10132_239, Duration: 6.745, Protocol: 1, Source Port: 1, Destination IP: 8, Destination Port: 73, Number of Packets: 410

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10135_187, Duration: 2.004, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 10, Number of Packets: 84

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: DNS, Duration: 104.587, Protocol: 1, Source Port: 1, Destination IP: 15, Destination Port: 7541, Number of Packets: 16038

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 192.168.220.7, Duration: 1642.122, Protocol: 2, Source Port: 2703, Destination IP: 445, Destination Port: 7, Number of Packets: 657111

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10366_163, Duration: 0.001, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 12915_114, Duration: 0.168, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 12912_193, Duration: 0.015, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10648_199, Duration: 1.884, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 35

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: EXT_SERVER, Duration: 11.778, Protocol: 1, Source Port: 3, Destination IP: 4, Destination Port: 88, Number of Packets: 1514

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10056_152, Duration: 2.313, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 9, Number of Packets: 1068

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 192.168.200.8, Duration: 28.371, Protocol: 2, Source Port: 76, Destination IP: 2, Destination Port: 3, Number of Packets: 641

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10058_155, Duration: 13.487, Protocol: 1, Source Port: 1, Destination IP: 8, Destination Port: 17, Number of Packets: 190

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10057_29, Duration: 147.926, Protocol: 1, Source Port: 1, Destination IP: 10, Destination Port: 134, Number of Packets: 945

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10180_116, Duration: 14.404, Protocol: 1, Source Port: 1, Destination IP: 8, Destination Port: 18, Number of Packets: 227

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10229_197, Duration: 0.04, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10089_53, Duration: 9.931, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 37, Number of Packets: 280

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 11071_111, Duration: 1.843, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10082_46, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 11214_254, Duration: 3.275, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 45

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10585_220, Duration: 11.973, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 18, Number of Packets: 183

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10527_14, Duration: 176.075, Protocol: 1, Source Port: 2, Destination IP: 9, Destination Port: 147, Number of Packets: 4436

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10589_173, Duration: 0.344, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 192.168.100.5, Duration: 293.69, Protocol: 2, Source Port: 4, Destination IP: 18, Destination Port: 19, Number of Packets: 778541

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10579_49, Duration: 1.827, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 32

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 11446_38, Duration: 0.297, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10585_221, Duration: 0.283, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 7, Number of Packets: 57

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10022_249, Duration: 19.405, Protocol: 1, Source Port: 2, Destination IP: 9, Destination Port: 37, Number of Packets: 806

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 11483_229, Duration: 12.18, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 18, Number of Packets: 153

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10254_213, Duration: 0.016, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 192.168.100.6, Duration: 2.263, Protocol: 2, Source Port: 4, Destination IP: 4, Destination Port: 28, Number of Packets: 277

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10060_27, Duration: 158.646, Protocol: 1, Source Port: 1, Destination IP: 10, Destination Port: 435, Number of Packets: 2686

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 11145_122, Duration: 2.475, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 48

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 11906_231, Duration: 19.71, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 12, Number of Packets: 224

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10056_241, Duration: 0.42, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 7, Number of Packets: 242

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 192.168.200.9, Duration: 27.64, Protocol: 2, Source Port: 76, Destination IP: 2, Destination Port: 3, Number of Packets: 640

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10081_164, Duration: 109.792, Protocol: 1, Source Port: 2, Destination IP: 9, Destination Port: 83, Number of Packets: 1458

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10056_50, Duration: 0.714, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 4, Number of Packets: 400

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10321_204, Duration: 27.729, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 93, Number of Packets: 1510

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10842_79, Duration: 5.795, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 8, Number of Packets: 80

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10145_115, Duration: 0.974, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 14, Number of Packets: 139

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 192.168.220.15, Duration: 1028.205, Protocol: 3, Source Port: 2751, Destination IP: 419, Destination Port: 8, Number of Packets: 44381

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10035_234, Duration: 1.118, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 12914_65, Duration: 0.028, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10010_36, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 192.168.220.3, Duration: 0.0, Protocol: 1, Source Port: 3, Destination IP: 2, Destination Port: 3, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10578_48, Duration: 4.11, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 35, Number of Packets: 380

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10143_90, Duration: 1.484, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 10, Number of Packets: 131

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10012_11, Duration: 0.338, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 14, Number of Packets: 192

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10759_144, Duration: 1.641, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 47

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10495_130, Duration: 0.157, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 48

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10786_4, Duration: 10.662, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 10, Number of Packets: 107

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 12695_211, Duration: 4.391, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 64

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10022_65, Duration: 0.16, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 49

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10532_98, Duration: 0.119, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 49

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10337_177, Duration: 2.835, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10056_138, Duration: 0.47, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 5, Number of Packets: 61

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10174_64, Duration: 0.666, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10501_20, Duration: 0.136, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 56

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10591_216, Duration: 2.276, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 12, Number of Packets: 86

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10337_11, Duration: 6.092, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 13, Number of Packets: 162

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10082_251, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10201_53, Duration: 4.792, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 35

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10056_85, Duration: 0.519, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 7, Number of Packets: 225

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10325_253, Duration: 9.418, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 13, Number of Packets: 523

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10012_58, Duration: 6.253, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 14, Number of Packets: 150

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10352_165, Duration: 2.266, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 192.168.220.16, Duration: 4.13, Protocol: 2, Source Port: 47, Destination IP: 9, Destination Port: 240, Number of Packets: 758

Output: attacker


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 192.168.220.12, Duration: 0.927, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 140

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10117_80, Duration: 42.815, Protocol: 1, Source Port: 2, Destination IP: 8, Destination Port: 82, Number of Packets: 757

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10796_85, Duration: 82.341, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 65, Number of Packets: 1922

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10193_2, Duration: 7.882, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 86

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10074_39, Duration: 5.863, Protocol: 1, Source Port: 2, Destination IP: 8, Destination Port: 54, Number of Packets: 376

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10796_87, Duration: 12.722, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 27, Number of Packets: 3133

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10527_1, Duration: 48.32, Protocol: 1, Source Port: 2, Destination IP: 9, Destination Port: 57, Number of Packets: 2400

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10323_178, Duration: 7.197, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 8, Number of Packets: 193

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10244_14, Duration: 5.585, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 12, Number of Packets: 86

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10527_4, Duration: 77.836, Protocol: 1, Source Port: 2, Destination IP: 9, Destination Port: 43, Number of Packets: 1337

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10336_205, Duration: 7.969, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 12, Number of Packets: 221

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10797_253, Duration: 1.221, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 113

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 12910_109, Duration: 2.777, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10803_54, Duration: 3.256, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 12, Number of Packets: 90

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10803_47, Duration: 2.296, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 13, Number of Packets: 169

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 192.168.220.8, Duration: 2.133, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 139

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10801_116, Duration: 1.591, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10803_53, Duration: 7.681, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 19, Number of Packets: 247

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10798_7, Duration: 3.41, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 16, Number of Packets: 136

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10074_40, Duration: 18.177, Protocol: 1, Source Port: 2, Destination IP: 8, Destination Port: 64, Number of Packets: 445

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10145_27, Duration: 12.736, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 17, Number of Packets: 206

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10527_2, Duration: 207.17, Protocol: 1, Source Port: 2, Destination IP: 9, Destination Port: 52, Number of Packets: 5629

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 192.168.220.9, Duration: 354.568, Protocol: 3, Source Port: 1300, Destination IP: 206, Destination Port: 12, Number of Packets: 23756

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 192.168.200.3, Duration: 0.003, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 192.168.200.4, Duration: 0.696, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 142

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10330_85, Duration: 3.748, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 6, Number of Packets: 121

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 192.168.220.10, Duration: 276.075, Protocol: 2, Source Port: 599, Destination IP: 146, Destination Port: 9, Number of Packets: 10224

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 192.168.210.1, Duration: 0.0, Protocol: 1, Source Port: 24, Destination IP: 1, Destination Port: 15, Number of Packets: 37

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 192.168.220.11, Duration: 627.088, Protocol: 2, Source Port: 1665, Destination IP: 296, Destination Port: 7, Number of Packets: 44062

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 192.168.200.5, Duration: 41.734, Protocol: 2, Source Port: 80, Destination IP: 18, Destination Port: 9, Number of Packets: 2378

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10533_152, Duration: 0.034, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10068_34, Duration: 0.05, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10527_8, Duration: 5.524, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 15, Number of Packets: 282

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10276_235, Duration: 0.002, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10527_6, Duration: 92.48, Protocol: 1, Source Port: 2, Destination IP: 9, Destination Port: 71, Number of Packets: 3608

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 192.168.220.13, Duration: 2077.999, Protocol: 3, Source Port: 4768, Destination IP: 588, Destination Port: 11, Number of Packets: 67595

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 192.168.220.14, Duration: 3.867, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 141

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 12911_225, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10527_3, Duration: 58.923, Protocol: 1, Source Port: 2, Destination IP: 9, Destination Port: 92, Number of Packets: 3533

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 192.168.220.5, Duration: 0.177, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 136

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10056_164, Duration: 0.965, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 6, Number of Packets: 603

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10176_154, Duration: 0.045, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10921_195, Duration: 0.036, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 192.168.220.6, Duration: 515.341, Protocol: 3, Source Port: 1581, Destination IP: 224, Destination Port: 8, Number of Packets: 25393

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10296_234, Duration: 0.025, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10131_216, Duration: 6.054, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 7, Number of Packets: 53

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10163_59, Duration: 37.621, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 53, Number of Packets: 905

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10163_46, Duration: 18.69, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 40, Number of Packets: 421

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10124_1, Duration: 115.813, Protocol: 1, Source Port: 1, Destination IP: 9, Destination Port: 224, Number of Packets: 1060

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10163_21, Duration: 10.878, Protocol: 1, Source Port: 1, Destination IP: 8, Destination Port: 50, Number of Packets: 415

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10326_209, Duration: 6.151, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 6, Number of Packets: 97

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 11361_174, Duration: 0.387, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10005_2, Duration: 13.667, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 11, Number of Packets: 233

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 11215_28, Duration: 0.386, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10315_252, Duration: 8.296, Protocol: 1, Source Port: 2, Destination IP: 8, Destination Port: 46, Number of Packets: 782

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 11517_157, Duration: 1.129, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 33

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10514_205, Duration: 3.677, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 76

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 12411_152, Duration: 1.062, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 192.168.210.4, Duration: 0.0, Protocol: 2, Source Port: 4, Destination IP: 4, Destination Port: 7, Number of Packets: 11

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 192.168.210.2, Duration: 0.0, Protocol: 1, Source Port: 124, Destination IP: 1, Destination Port: 14, Number of Packets: 137

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10036_235, Duration: 2.313, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 35

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10801_108, Duration: 1.527, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10988_223, Duration: 1.727, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 32

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10073_65, Duration: 15.175, Protocol: 1, Source Port: 2, Destination IP: 9, Destination Port: 83, Number of Packets: 577

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10082_253, Duration: 0.6, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 5, Number of Packets: 47

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 11249_5, Duration: 4.397, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 8, Number of Packets: 93

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 192.168.210.3, Duration: 0.04, Protocol: 2, Source Port: 125, Destination IP: 3, Destination Port: 15, Number of Packets: 148

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 11835_203, Duration: 12.645, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 10, Number of Packets: 196

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10163_11, Duration: 20.986, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 43, Number of Packets: 528

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10106_93, Duration: 14.353, Protocol: 1, Source Port: 2, Destination IP: 9, Destination Port: 53, Number of Packets: 381

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10313_139, Duration: 5.077, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 7, Number of Packets: 88

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10412_239, Duration: 5.545, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 6, Number of Packets: 101

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10263_186, Duration: 9.727, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 21, Number of Packets: 166

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10801_113, Duration: 1.966, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10972_180, Duration: 2.229, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 43

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 11346_103, Duration: 6.786, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 12, Number of Packets: 139

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 12503_240, Duration: 1.054, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 192.168.210.5, Duration: 1048.503, Protocol: 2, Source Port: 1609, Destination IP: 220, Destination Port: 10, Number of Packets: 21668

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10056_187, Duration: 4.993, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 11, Number of Packets: 155

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 11529_47, Duration: 0.901, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10223_4, Duration: 25.693, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 32, Number of Packets: 1323

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10185_51, Duration: 18.638, Protocol: 1, Source Port: 1, Destination IP: 9, Destination Port: 21, Number of Packets: 241

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10223_61, Duration: 5.569, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 32, Number of Packets: 620

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10223_24, Duration: 16.252, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 21, Number of Packets: 536

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10979_53, Duration: 9.664, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 9, Number of Packets: 334

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10068_98, Duration: 49.267, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 40, Number of Packets: 993

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 11670_8, Duration: 0.637, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10022_175, Duration: 8.777, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 7, Number of Packets: 138

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 12239_150, Duration: 2.478, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 8, Number of Packets: 56

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10499_34, Duration: 21.519, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 14, Number of Packets: 509

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 11046_155, Duration: 14.779, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 13, Number of Packets: 466

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10621_107, Duration: 1.568, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10828_20, Duration: 2.278, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10401_203, Duration: 2.946, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 35

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10056_103, Duration: 0.865, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 7, Number of Packets: 249

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10527_10, Duration: 24.561, Protocol: 1, Source Port: 2, Destination IP: 9, Destination Port: 51, Number of Packets: 1475

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 12916_78, Duration: 0.205, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10026_249, Duration: 1.24, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 9, Number of Packets: 60

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10063_205, Duration: 1.594, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 78

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10056_199, Duration: 1.011, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10005_36, Duration: 9.627, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 5, Number of Packets: 323

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10005_14, Duration: 2.661, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 18, Number of Packets: 279

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10984_40, Duration: 0.734, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 64

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10833_103, Duration: 0.533, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 192.168.100.4, Duration: 20.574, Protocol: 2, Source Port: 75, Destination IP: 8, Destination Port: 23, Number of Packets: 780

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10872_159, Duration: 2.182, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 7, Number of Packets: 93

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 11273_188, Duration: 0.844, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 62

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10801_109, Duration: 0.757, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10244_252, Duration: 0.189, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10947_49, Duration: 1.201, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 11278_58, Duration: 0.332, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10118_55, Duration: 5.562, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 11, Number of Packets: 171

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10776_200, Duration: 6.609, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 13, Number of Packets: 176

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10801_77, Duration: 0.517, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10118_111, Duration: 9.185, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 37, Number of Packets: 276

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 12917_170, Duration: 0.175, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 12918_44, Duration: 3.997, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 12393_158, Duration: 1.86, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 50

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10159_99, Duration: 8.023, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 9, Number of Packets: 106

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10089_52, Duration: 16.989, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 29, Number of Packets: 233

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10263_185, Duration: 5.555, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 20, Number of Packets: 145

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 11263_137, Duration: 6.525, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 7, Number of Packets: 55

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10082_163, Duration: 2.29, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 4, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10028_249, Duration: 14.953, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 29, Number of Packets: 296

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10249_77, Duration: 0.287, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10573_70, Duration: 3.461, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 362

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10267_102, Duration: 8.113, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 17, Number of Packets: 154

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10603_25, Duration: 0.208, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10986_160, Duration: 24.734, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 27603

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10571_6, Duration: 3.032, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 15, Number of Packets: 123

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10092_104, Duration: 11.373, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 9, Number of Packets: 94

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10989_56, Duration: 0.303, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10826_232, Duration: 1.664, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10163_2, Duration: 2.24, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 11, Number of Packets: 74

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10085_66, Duration: 6.303, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 6, Number of Packets: 112

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 11046_157, Duration: 15.034, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 15, Number of Packets: 431

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10987_129, Duration: 0.634, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10107_215, Duration: 0.406, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10109_187, Duration: 8.583, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 11, Number of Packets: 126

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10135_8, Duration: 0.278, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10583_206, Duration: 3.582, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 6, Number of Packets: 83

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10022_207, Duration: 1.091, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 9, Number of Packets: 123

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10179_174, Duration: 1.295, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 60

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10163_16, Duration: 0.278, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 16, Number of Packets: 48

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10163_10, Duration: 46.17, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 78, Number of Packets: 1020

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 11015_151, Duration: 2.698, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10176_155, Duration: 0.09, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10056_51, Duration: 3.06, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 9, Number of Packets: 475

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10143_80, Duration: 11.331, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 21, Number of Packets: 250

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 11184_35, Duration: 43.614, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 19, Number of Packets: 1816

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10013_97, Duration: 2.305, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 36

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10056_221, Duration: 1.77, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 6, Number of Packets: 693

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10970_157, Duration: 1.804, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10056_127, Duration: 0.393, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 6, Number of Packets: 227

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10064_217, Duration: 4.367, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 14, Number of Packets: 487

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10087_49, Duration: 0.766, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 59

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 11320_220, Duration: 0.684, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 12551_157, Duration: 3.941, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 62

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 11190_51, Duration: 17.725, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 47, Number of Packets: 573

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10170_24, Duration: 4.989, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 8, Number of Packets: 76

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10429_162, Duration: 8.821, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 22, Number of Packets: 290

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10194_74, Duration: 0.722, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 6, Number of Packets: 79

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10380_123, Duration: 0.125, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 11192_136, Duration: 8.534, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 20, Number of Packets: 222

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 11317_245, Duration: 0.374, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10587_170, Duration: 0.177, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 12919_37, Duration: 0.14, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10004_7, Duration: 12.269, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 20, Number of Packets: 1276

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10506_26, Duration: 0.292, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10078_82, Duration: 0.89, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 46

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10078_77, Duration: 2.775, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10171_251, Duration: 10.383, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 16, Number of Packets: 113

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10181_60, Duration: 10.117, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 12, Number of Packets: 143

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10056_20, Duration: 1.155, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 7, Number of Packets: 110

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10307_56, Duration: 4.167, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 15, Number of Packets: 234

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10483_126, Duration: 6.085, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 23, Number of Packets: 273

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10306_252, Duration: 2.094, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 14, Number of Packets: 168

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10307_36, Duration: 2.894, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 20, Number of Packets: 393

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10077_154, Duration: 10.48, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 11, Number of Packets: 271

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10077_156, Duration: 35.809, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 25, Number of Packets: 983

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10311_147, Duration: 8.35, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 25, Number of Packets: 1021

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10511_218, Duration: 8.456, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 14, Number of Packets: 169

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10117_88, Duration: 11.262, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 49, Number of Packets: 408

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10085_31, Duration: 18.638, Protocol: 1, Source Port: 2, Destination IP: 9, Destination Port: 79, Number of Packets: 444

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10195_190, Duration: 13.585, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 23, Number of Packets: 372

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10095_80, Duration: 4.15, Protocol: 1, Source Port: 2, Destination IP: 9, Destination Port: 14, Number of Packets: 147

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10312_219, Duration: 0.289, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 9, Number of Packets: 46

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10090_217, Duration: 1.993, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 8, Number of Packets: 63

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 11046_156, Duration: 19.626, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 14, Number of Packets: 395

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 11357_180, Duration: 4.808, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 5, Number of Packets: 66

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10094_75, Duration: 9.977, Protocol: 1, Source Port: 2, Destination IP: 9, Destination Port: 24, Number of Packets: 201

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10712_206, Duration: 2.815, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 5, Number of Packets: 61

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10092_103, Duration: 4.028, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10056_223, Duration: 10.728, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 10, Number of Packets: 1513

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10848_50, Duration: 2.593, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 57

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10056_129, Duration: 0.439, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 5, Number of Packets: 165

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10066_156, Duration: 28.984, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 35, Number of Packets: 199

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10117_94, Duration: 10.69, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 22, Number of Packets: 211

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T08:01:27.006000, End Frame: 2017-03-16T09:01:27.006000, Source IP: 10206_7, Duration: 9.368, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 35, Number of Packets: 129

Output: normal