Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10062_127, Duration: 5.48, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 7, Number of Packets: 92

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10056_123, Duration: 2.59, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 7, Number of Packets: 115

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10295_109, Duration: 1.139, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 41

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10747_183, Duration: 0.189, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10784_4, Duration: 45.302, Protocol: 2, Source Port: 2, Destination IP: 1, Destination Port: 246, Number of Packets: 2507

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10370_33, Duration: 5.007, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 4, Number of Packets: 50

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10185_51, Duration: 13.811, Protocol: 1, Source Port: 1, Destination IP: 11, Destination Port: 15, Number of Packets: 189

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 13706_245, Duration: 2.154, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 36

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10786_4, Duration: 4.67, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 7, Number of Packets: 82

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10056_41, Duration: 1.232, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 6, Number of Packets: 97

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10036_235, Duration: 1.51, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10056_168, Duration: 1.66, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 6, Number of Packets: 683

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10056_85, Duration: 3.135, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 16, Number of Packets: 503

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11929_61, Duration: 0.167, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11184_35, Duration: 17.769, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 12, Number of Packets: 1120

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10848_50, Duration: 1.463, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 12838_7, Duration: 1.78, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11187_158, Duration: 0.217, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 12206_212, Duration: 3.385, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10787_163, Duration: 8.969, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 65

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11192_136, Duration: 3.458, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 6, Number of Packets: 65

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10194_74, Duration: 2.255, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 8, Number of Packets: 84

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10244_15, Duration: 4.355, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 8, Number of Packets: 100

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10429_162, Duration: 1.119, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 192.168.210.4, Duration: 319.03, Protocol: 2, Source Port: 36, Destination IP: 11, Destination Port: 8, Number of Packets: 326674

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11191_163, Duration: 0.546, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10194_82, Duration: 0.478, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10249_103, Duration: 0.266, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10170_25, Duration: 2.643, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 6, Number of Packets: 45

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 13914_46, Duration: 0.372, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10069_64, Duration: 0.872, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 7, Number of Packets: 44

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10812_185, Duration: 1.396, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10195_190, Duration: 7.307, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 18, Number of Packets: 316

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10078_100, Duration: 9.488, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 17, Number of Packets: 215

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 12518_4, Duration: 1.184, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 12681_54, Duration: 0.466, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10081_16, Duration: 8.738, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 65

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10001_232, Duration: 39.237, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 37, Number of Packets: 1839

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10183_224, Duration: 1.258, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 45

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10183_208, Duration: 2.544, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 56

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10183_203, Duration: 1.209, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10183_218, Duration: 0.038, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10183_219, Duration: 0.03, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10431_136, Duration: 2.999, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 105

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10183_234, Duration: 0.041, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10183_233, Duration: 0.019, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10790_112, Duration: 0.781, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10005_36, Duration: 33.193, Protocol: 1, Source Port: 1, Destination IP: 9, Destination Port: 11, Number of Packets: 1406

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10183_209, Duration: 2.335, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10183_211, Duration: 0.419, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 192.168.200.3, Duration: 0.118, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10181_60, Duration: 6.81, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 9, Number of Packets: 110

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10307_56, Duration: 2.635, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 18, Number of Packets: 148

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10483_126, Duration: 6.139, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 27, Number of Packets: 232

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10307_36, Duration: 0.723, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 6, Number of Packets: 157

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10308_125, Duration: 3.741, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 15, Number of Packets: 187

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10309_27, Duration: 1.191, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 118

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10074_40, Duration: 17.747, Protocol: 1, Source Port: 2, Destination IP: 9, Destination Port: 70, Number of Packets: 401

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10077_154, Duration: 12.448, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 8, Number of Packets: 359

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10591_216, Duration: 5.538, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 11, Number of Packets: 98

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10014_174, Duration: 1.11, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11223_157, Duration: 4.055, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 6, Number of Packets: 181

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10315_252, Duration: 6.094, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 31, Number of Packets: 435

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10170_26, Duration: 5.303, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 5, Number of Packets: 56

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10313_131, Duration: 1.403, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 6, Number of Packets: 95

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10092_102, Duration: 16.591, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 17, Number of Packets: 100

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10150_53, Duration: 6.121, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 43, Number of Packets: 231

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10056_241, Duration: 0.294, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 6, Number of Packets: 152

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10488_11, Duration: 4.489, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 46

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11924_154, Duration: 0.865, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 41

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10998_36, Duration: 7.743, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 50

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 12610_56, Duration: 4.43, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 7, Number of Packets: 75

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10090_217, Duration: 1.009, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 5, Number of Packets: 35

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10312_219, Duration: 1.923, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 13, Number of Packets: 63

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10170_29, Duration: 7.611, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 10, Number of Packets: 146

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11773_155, Duration: 6.519, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 14, Number of Packets: 83

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10061_91, Duration: 0.253, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 4, Number of Packets: 60

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10163_46, Duration: 11.274, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 37, Number of Packets: 424

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10317_230, Duration: 0.908, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10320_171, Duration: 5.222, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 60

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10089_53, Duration: 13.084, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 29, Number of Packets: 224

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10163_10, Duration: 19.267, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 37, Number of Packets: 479

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11654_196, Duration: 0.917, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10012_11, Duration: 6.193, Protocol: 1, Source Port: 1, Destination IP: 8, Destination Port: 19, Number of Packets: 1196

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10163_21, Duration: 25.309, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 67, Number of Packets: 559

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10930_119, Duration: 2.697, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 5, Number of Packets: 44

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11417_168, Duration: 3.157, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 57

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10522_112, Duration: 1.598, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10249_71, Duration: 20.454, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 65, Number of Packets: 520

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11044_241, Duration: 1.007, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 6, Number of Packets: 71

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 12080_109, Duration: 0.977, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10961_68, Duration: 1.467, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10281_174, Duration: 2.068, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 42

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11558_169, Duration: 0.966, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10991_177, Duration: 2.085, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10340_17, Duration: 0.817, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 10, Number of Packets: 50

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10494_223, Duration: 0.644, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10225_200, Duration: 33.883, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 8, Number of Packets: 338

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10224_175, Duration: 8.758, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 12, Number of Packets: 320

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10223_24, Duration: 53.96, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 91, Number of Packets: 2319

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10223_61, Duration: 17.2, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 126, Number of Packets: 1432

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10223_4, Duration: 32.306, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 171, Number of Packets: 2735

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 12253_192, Duration: 2.432, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 9, Number of Packets: 104

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10022_175, Duration: 12.302, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 33, Number of Packets: 372

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 12239_150, Duration: 12.76, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 27, Number of Packets: 195

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10621_107, Duration: 4.072, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 6, Number of Packets: 79

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10056_234, Duration: 3.268, Protocol: 1, Source Port: 1, Destination IP: 9, Destination Port: 12, Number of Packets: 1001

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10056_141, Duration: 1.231, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 8, Number of Packets: 225

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10186_125, Duration: 1.405, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10056_99, Duration: 2.553, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10228_240, Duration: 1.185, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11550_77, Duration: 4.22, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 149

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10063_205, Duration: 4.617, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 27, Number of Packets: 226

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 13915_200, Duration: 0.308, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10056_131, Duration: 1.679, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 7, Number of Packets: 104

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 192.168.100.6, Duration: 1.1, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 21, Number of Packets: 133

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10032_128, Duration: 4.675, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 5, Number of Packets: 64

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11496_39, Duration: 24.33, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 20, Number of Packets: 1673

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10490_102, Duration: 0.222, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 43

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10075_234, Duration: 0.352, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 127

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10068_10, Duration: 3.379, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 5, Number of Packets: 176

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 13916_94, Duration: 0.688, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10842_79, Duration: 4.251, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 35

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11536_57, Duration: 0.301, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 13027_8, Duration: 0.203, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10205_12, Duration: 15.046, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 14, Number of Packets: 66

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 13917_193, Duration: 0.833, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11302_116, Duration: 0.558, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10092_109, Duration: 10.298, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 35

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10394_149, Duration: 6.349, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 15, Number of Packets: 246

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11464_135, Duration: 0.202, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10163_59, Duration: 5.041, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 21, Number of Packets: 199

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10321_204, Duration: 37.037, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 121, Number of Packets: 2215

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10492_168, Duration: 1.196, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 63

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10150_40, Duration: 5.872, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 19, Number of Packets: 127

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10323_178, Duration: 7.136, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 12, Number of Packets: 260

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10337_11, Duration: 4.357, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 15, Number of Packets: 200

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10549_16, Duration: 0.463, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 4, Number of Packets: 66

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10336_205, Duration: 7.398, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 12, Number of Packets: 252

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10521_178, Duration: 7.054, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 4, Number of Packets: 59

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10316_219, Duration: 4.526, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 46

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10330_85, Duration: 10.697, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 10, Number of Packets: 236

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11109_10, Duration: 0.06, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10514_205, Duration: 11.402, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 65

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10392_126, Duration: 4.88, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 40, Number of Packets: 255

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 13855_145, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10073_64, Duration: 5.277, Protocol: 1, Source Port: 2, Destination IP: 8, Destination Port: 67, Number of Packets: 414

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10028_175, Duration: 7.909, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 51, Number of Packets: 229

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10165_80, Duration: 0.428, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10123_173, Duration: 0.23, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10122_64, Duration: 10.703, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 13, Number of Packets: 126

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10068_98, Duration: 12.923, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 24, Number of Packets: 373

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10536_87, Duration: 0.459, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11972_154, Duration: 4.707, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 8, Number of Packets: 55

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 12145_153, Duration: 10.448, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 93

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10396_162, Duration: 6.396, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 53

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10004_10, Duration: 1.761, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 61

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10901_40, Duration: 7.333, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 52

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 192.168.100.3, Duration: 0.004, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10504_199, Duration: 1.431, Protocol: 2, Source Port: 3, Destination IP: 4, Destination Port: 12, Number of Packets: 71

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 12145_223, Duration: 6.691, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 269

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 12145_228, Duration: 7.416, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 12, Number of Packets: 167

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11499_59, Duration: 5.533, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 12, Number of Packets: 364

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10131_216, Duration: 3.062, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 12, Number of Packets: 107

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11499_53, Duration: 0.804, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 8, Number of Packets: 97

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11499_58, Duration: 3.444, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 59

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10276_216, Duration: 0.994, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 6, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10244_16, Duration: 1.382, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 6, Number of Packets: 36

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 12456_145, Duration: 0.086, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10682_19, Duration: 0.076, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 12103_10, Duration: 0.506, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10092_99, Duration: 8.273, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 4, Number of Packets: 47

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10402_46, Duration: 8.605, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11271_228, Duration: 1.201, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 39

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11379_126, Duration: 0.481, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10056_81, Duration: 3.766, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11543_70, Duration: 4.683, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 6, Number of Packets: 47

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11468_77, Duration: 0.419, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 192.168.210.5, Duration: 1.414, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 58

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10979_53, Duration: 40.875, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 49, Number of Packets: 1799

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10629_11, Duration: 45.443, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 10, Number of Packets: 415

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10965_51, Duration: 31.858, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 30, Number of Packets: 1912

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10965_52, Duration: 30.631, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 46, Number of Packets: 900

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11223_155, Duration: 4.653, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 4, Number of Packets: 126

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11015_151, Duration: 2.967, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 4, Number of Packets: 52

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10171_236, Duration: 0.001, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10092_108, Duration: 3.204, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 3, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11380_121, Duration: 0.117, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 75

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10163_60, Duration: 13.668, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 34, Number of Packets: 277

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10249_72, Duration: 0.241, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 12028_255, Duration: 0.154, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10218_207, Duration: 0.437, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10263_186, Duration: 5.595, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 24, Number of Packets: 188

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11359_51, Duration: 4.319, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 35

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10630_249, Duration: 2.05, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10637_200, Duration: 2.391, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 36

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10278_34, Duration: 2.904, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 13, Number of Packets: 150

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10107_38, Duration: 2.633, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 7, Number of Packets: 62

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10631_40, Duration: 2.249, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 44

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10632_175, Duration: 0.113, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10129_14, Duration: 2.474, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 10, Number of Packets: 56

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11389_98, Duration: 1.679, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 32

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10078_80, Duration: 2.91, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 41

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10281_132, Duration: 0.364, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11388_60, Duration: 2.258, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 33

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10967_1, Duration: 0.269, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10450_7, Duration: 0.694, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10681_249, Duration: 1.695, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11504_217, Duration: 3.583, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 71

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10638_99, Duration: 0.111, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10969_100, Duration: 0.091, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10629_12, Duration: 1.483, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 54

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 12145_222, Duration: 8.911, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 13, Number of Packets: 399

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 12339_13, Duration: 2.802, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 6, Number of Packets: 46

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 13717_57, Duration: 6.089, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 6, Number of Packets: 85

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10644_249, Duration: 0.084, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10078_76, Duration: 14.009, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 17, Number of Packets: 263

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10150_42, Duration: 6.635, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 21, Number of Packets: 126

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 13086_99, Duration: 0.201, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10362_18, Duration: 0.827, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 12896_89, Duration: 0.668, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 13324_183, Duration: 0.202, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10027_68, Duration: 0.291, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 37

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10644_250, Duration: 0.337, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10143_90, Duration: 7.656, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 8, Number of Packets: 134

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10264_171, Duration: 2.556, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 18, Number of Packets: 93

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10166_58, Duration: 4.687, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 45

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10102_54, Duration: 20.482, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 35, Number of Packets: 352

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10641_224, Duration: 0.593, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11537_36, Duration: 0.068, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10201_53, Duration: 4.366, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 72

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11953_17, Duration: 0.507, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11027_42, Duration: 2.534, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 3, Number of Packets: 253

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 13321_140, Duration: 1.833, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10230_59, Duration: 1.728, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 8, Number of Packets: 87

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11393_225, Duration: 1.089, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11309_15, Duration: 2.71, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10737_69, Duration: 0.406, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 32

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10793_170, Duration: 0.71, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 48

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10193_10, Duration: 32.766, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 11, Number of Packets: 1002

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10224_168, Duration: 0.132, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 35

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 13918_35, Duration: 0.953, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10982_41, Duration: 0.625, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10708_178, Duration: 6.479, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 12, Number of Packets: 82

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11650_139, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11440_62, Duration: 0.169, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10150_80, Duration: 7.596, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 26, Number of Packets: 181

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10129_10, Duration: 5.214, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 7, Number of Packets: 57

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 13919_117, Duration: 2.098, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11526_85, Duration: 0.571, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11078_73, Duration: 0.744, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10056_83, Duration: 1.313, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 6, Number of Packets: 113

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10012_25, Duration: 16.575, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 32, Number of Packets: 795

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10003_195, Duration: 2.628, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 42

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10150_211, Duration: 0.298, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10543_146, Duration: 1.448, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 192.168.220.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11531_232, Duration: 1.021, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10150_12, Duration: 10.563, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 47, Number of Packets: 304

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11530_168, Duration: 1.801, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11532_104, Duration: 3.506, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10056_11, Duration: 5.181, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10000_35, Duration: 6.03, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 376

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10045_28, Duration: 3.782, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 39

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10045_27, Duration: 0.309, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10433_11, Duration: 1.578, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10433_73, Duration: 1.922, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 3, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10070_48, Duration: 7.208, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 38, Number of Packets: 131

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10680_137, Duration: 1.448, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 12669_15, Duration: 6.233, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 15, Number of Packets: 91

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10013_97, Duration: 1.596, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11611_4, Duration: 0.827, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10007_207, Duration: 0.174, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10712_206, Duration: 0.691, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10702_91, Duration: 3.974, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10056_7, Duration: 1.034, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 10, Number of Packets: 293

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 192.168.210.3, Duration: 0.116, Protocol: 2, Source Port: 3, Destination IP: 3, Destination Port: 3, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10007_18, Duration: 0.594, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10874_42, Duration: 2.588, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 9, Number of Packets: 218

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10194_100, Duration: 14.358, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 11, Number of Packets: 124

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10278_66, Duration: 49.99, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 33, Number of Packets: 1030

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11923_76, Duration: 0.282, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10150_199, Duration: 3.615, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 15, Number of Packets: 105

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10495_108, Duration: 2.709, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 8, Number of Packets: 91

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10252_4, Duration: 6.005, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 115

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10135_236, Duration: 9.955, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 10, Number of Packets: 94

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10194_67, Duration: 0.174, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10586_56, Duration: 0.129, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10586_52, Duration: 0.055, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10107_22, Duration: 2.419, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 95

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10092_103, Duration: 14.434, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 11, Number of Packets: 66

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 13920_29, Duration: 0.206, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10328_25, Duration: 1.165, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 7, Number of Packets: 77

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10082_199, Duration: 0.018, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10107_7, Duration: 0.603, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 5, Number of Packets: 57

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11908_42, Duration: 1.47, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 4, Number of Packets: 52

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10527_2, Duration: 45.946, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 27, Number of Packets: 957

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10170_24, Duration: 5.295, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 13, Number of Packets: 112

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10374_140, Duration: 5.745, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 23, Number of Packets: 162

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10154_227, Duration: 0.846, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 3, Number of Packets: 84

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10878_27, Duration: 1.984, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10150_208, Duration: 1.57, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 12457_93, Duration: 1.219, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11494_194, Duration: 1.871, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 12420_122, Duration: 0.128, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10879_18, Duration: 12.437, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 34, Number of Packets: 149

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 11975_172, Duration: 2.725, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10717_168, Duration: 2.752, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 56

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10884_137, Duration: 0.259, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10874_22, Duration: 0.161, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 9, Number of Packets: 36

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T12:02:00.804000, End Frame: 2017-03-17T13:02:00.804000, Source IP: 10610_123, Duration: 0.857, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 3, Number of Packets: 38

Output: normal