Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 11254_89, Duration: 0.656, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10072_57, Duration: 6.542, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 10, Number of Packets: 76

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10028_68, Duration: 0.538, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10170_26, Duration: 3.666, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 4, Number of Packets: 39

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10251_252, Duration: 2.668, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 81

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10533_25, Duration: 0.095, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 3, Number of Packets: 54

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10012_26, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10527_35, Duration: 0.101, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 12384_229, Duration: 12.792, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 56

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 13344_108, Duration: 4.589, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 8, Number of Packets: 74

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 12163_8, Duration: 1.948, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 11417_176, Duration: 5.145, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 54

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10433_241, Duration: 2.253, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 11332_89, Duration: 3.049, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 33

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10154_233, Duration: 5.908, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 66

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10587_162, Duration: 20.886, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 7, Number of Packets: 300

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 11150_27, Duration: 0.506, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10269_28, Duration: 0.419, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10461_209, Duration: 1.328, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 12868_123, Duration: 3.681, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 4, Number of Packets: 33

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10562_96, Duration: 1.162, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 12884_18, Duration: 1.042, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 13086_99, Duration: 0.569, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 11319_112, Duration: 0.577, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10082_83, Duration: 3.977, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 11264_50, Duration: 0.198, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 61

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10139_42, Duration: 0.649, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 11263_237, Duration: 0.948, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 11254_88, Duration: 0.343, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10668_138, Duration: 0.133, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 13418_81, Duration: 2.791, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10571_3, Duration: 1.112, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 13431_31, Duration: 4.814, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 11155_159, Duration: 1.479, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10533_50, Duration: 0.681, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 62

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10162_65, Duration: 1.857, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 44

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10068_72, Duration: 1.845, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 42

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 13809_133, Duration: 27.316, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 1255

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 12376_226, Duration: 1.795, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 12129_155, Duration: 3.288, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 36

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 11313_18, Duration: 3.419, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 13265_4, Duration: 1.802, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10222_218, Duration: 2.631, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10078_74, Duration: 0.545, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10653_185, Duration: 1.965, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 11263_66, Duration: 1.493, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10558_18, Duration: 2.93, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 46

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10163_2, Duration: 0.466, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10926_27, Duration: 2.157, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10249_103, Duration: 0.305, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 12857_187, Duration: 57.46, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 9, Number of Packets: 710

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10315_240, Duration: 39.196, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 70, Number of Packets: 1962

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10346_13, Duration: 57.323, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 27, Number of Packets: 1836

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10347_19, Duration: 1.107, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10347_36, Duration: 11.564, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 131

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10651_152, Duration: 3.996, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 110

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10360_51, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10036_235, Duration: 0.627, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 13089_130, Duration: 1.68, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10012_33, Duration: 0.017, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 12406_66, Duration: 0.068, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10154_190, Duration: 0.322, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 84

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10365_53, Duration: 0.162, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 11719_242, Duration: 0.215, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 12921_76, Duration: 0.2, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 12007_177, Duration: 0.263, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10366_145, Duration: 0.429, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10371_32, Duration: 0.516, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 11354_82, Duration: 1.947, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 6, Number of Packets: 47

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 11328_133, Duration: 0.864, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 159

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 11363_233, Duration: 8.67, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 107

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10183_18, Duration: 5.799, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 64

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 11328_150, Duration: 1.144, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 43

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10381_200, Duration: 3.028, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 60

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10143_66, Duration: 0.452, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10383_31, Duration: 1.332, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 43

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10345_172, Duration: 9.092, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 9, Number of Packets: 273

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10384_184, Duration: 0.056, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10129_14, Duration: 8.13, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 66

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10386_163, Duration: 0.097, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10385_155, Duration: 2.622, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 64

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10382_201, Duration: 8.769, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 84

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10350_199, Duration: 1.322, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10347_96, Duration: 0.571, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10622_14, Duration: 2.779, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 11010_59, Duration: 7.36, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 12, Number of Packets: 64

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 11010_57, Duration: 7.159, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 8, Number of Packets: 37

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10361_196, Duration: 6.415, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 17, Number of Packets: 111

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10687_199, Duration: 0.479, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10056_64, Duration: 0.152, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 11057_184, Duration: 0.8, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10729_2, Duration: 0.109, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10588_24, Duration: 0.353, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10688_158, Duration: 0.345, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 5, Number of Packets: 36

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 13810_77, Duration: 4.836, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 10, Number of Packets: 128

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10176_155, Duration: 0.09, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 13094_93, Duration: 4.408, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 12, Number of Packets: 89

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10763_149, Duration: 0.229, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10586_58, Duration: 0.674, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 8, Number of Packets: 51

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10415_65, Duration: 1.434, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 53

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10056_130, Duration: 0.091, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10586_24, Duration: 1.104, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10349_27, Duration: 0.755, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 2, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 11213_10, Duration: 0.544, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10393_246, Duration: 0.694, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10361_88, Duration: 4.841, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 12, Number of Packets: 98

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 12267_139, Duration: 0.118, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10748_128, Duration: 2.036, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 57

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10347_185, Duration: 4.362, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 74

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 11949_118, Duration: 0.179, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 13811_238, Duration: 0.661, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 47

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 12973_50, Duration: 0.014, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10270_32, Duration: 0.127, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10367_115, Duration: 0.897, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 37

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10165_160, Duration: 0.388, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10133_38, Duration: 0.789, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 109

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10686_91, Duration: 0.138, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10465_139, Duration: 3.122, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 65

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 13063_81, Duration: 1.524, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 11876_114, Duration: 1.37, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 37

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 12546_163, Duration: 1.685, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 89

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 11882_220, Duration: 9.664, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 107

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10586_42, Duration: 0.297, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10586_48, Duration: 0.214, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10150_42, Duration: 0.239, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 12057_140, Duration: 0.412, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10535_164, Duration: 0.651, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10300_145, Duration: 1.44, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10237_142, Duration: 0.389, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10248_232, Duration: 0.092, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10280_238, Duration: 0.652, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10499_72, Duration: 0.207, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 13080_205, Duration: 0.85, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10377_118, Duration: 0.655, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10361_87, Duration: 1.479, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 13246_76, Duration: 0.507, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 11113_245, Duration: 1.315, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10706_192, Duration: 1.899, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 43

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 13228_113, Duration: 0.345, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10613_199, Duration: 0.183, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10377_172, Duration: 0.926, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 12061_41, Duration: 0.179, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10670_52, Duration: 0.436, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10379_22, Duration: 1.051, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 48

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 11319_107, Duration: 2.837, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 58

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10848_50, Duration: 1.335, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 13416_225, Duration: 0.073, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10586_44, Duration: 0.282, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10586_63, Duration: 0.099, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10527_10, Duration: 0.913, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10951_141, Duration: 1.426, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 192.168.200.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 12787_221, Duration: 0.328, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 12247_172, Duration: 1.077, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 12102_86, Duration: 1.263, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 13703_185, Duration: 1.429, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 13057_122, Duration: 0.219, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 11330_25, Duration: 2.517, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10075_194, Duration: 0.654, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 11327_191, Duration: 0.327, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10078_82, Duration: 0.294, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T08:01:59.362000, End Frame: 2017-03-17T09:01:59.362000, Source IP: 10176_157, Duration: 0.079, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10786_4, Duration: 1.338, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 192.168.220.11, Duration: 422.271, Protocol: 2, Source Port: 1349, Destination IP: 182, Destination Port: 7, Number of Packets: 40035

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10060_27, Duration: 51.878, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 143, Number of Packets: 994

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10056_83, Duration: 0.581, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 42

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 192.168.220.4, Duration: 632.354, Protocol: 2, Source Port: 2455, Destination IP: 373, Destination Port: 7, Number of Packets: 24235

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10056_241, Duration: 0.363, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 6, Number of Packets: 126

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10970_157, Duration: 0.7, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10081_164, Duration: 23.468, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 29, Number of Packets: 400

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10143_90, Duration: 2.222, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 6, Number of Packets: 78

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10058_155, Duration: 3.984, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 6, Number of Packets: 60

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 11184_35, Duration: 32.878, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 79, Number of Packets: 21231

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 192.168.100.5, Duration: 516.033, Protocol: 2, Source Port: 3, Destination IP: 19, Destination Port: 20, Number of Packets: 796166

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 192.168.200.4, Duration: 0.635, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 140

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 192.168.220.15, Duration: 380.779, Protocol: 2, Source Port: 650, Destination IP: 143, Destination Port: 7, Number of Packets: 235012

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 192.168.220.7, Duration: 0.598, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 131

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10012_25, Duration: 37.324, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 67, Number of Packets: 1089

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10001_232, Duration: 49.575, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 63, Number of Packets: 2117

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10056_147, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10062_127, Duration: 6.664, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 6, Number of Packets: 56

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 12247_172, Duration: 0.019, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 12102_86, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: EXT_SERVER, Duration: 31.406, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 156, Number of Packets: 7196

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 192.168.200.9, Duration: 81.349, Protocol: 2, Source Port: 147, Destination IP: 18, Destination Port: 7, Number of Packets: 5784

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10056_40, Duration: 0.206, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 111

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 11330_25, Duration: 0.42, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 13703_185, Duration: 0.376, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10712_206, Duration: 4.367, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 7, Number of Packets: 76

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10185_51, Duration: 5.198, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 9, Number of Packets: 108

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 11190_51, Duration: 0.674, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 11353_244, Duration: 0.514, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10429_162, Duration: 4.485, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 36, Number of Packets: 386

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10194_74, Duration: 0.962, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 10, Number of Packets: 105

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 11327_191, Duration: 0.034, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10078_82, Duration: 1.432, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 77

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10296_238, Duration: 90.181, Protocol: 1, Source Port: 2, Destination IP: 8, Destination Port: 75, Number of Packets: 2619

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: DNS, Duration: 32.824, Protocol: 1, Source Port: 1, Destination IP: 9, Destination Port: 3454, Number of Packets: 6075

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 11192_136, Duration: 5.295, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 19, Number of Packets: 200

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10003_195, Duration: 1.651, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 6, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10056_133, Duration: 2.847, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 8, Number of Packets: 140

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10056_232, Duration: 0.231, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 295

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10051_51, Duration: 1.244, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10574_124, Duration: 5.284, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 10, Number of Packets: 173

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10064_217, Duration: 0.646, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 5, Number of Packets: 194

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10437_63, Duration: 14.1, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 5, Number of Packets: 191

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 13699_120, Duration: 6.891, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 40, Number of Packets: 882

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10954_31, Duration: 0.139, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 192.168.220.14, Duration: 0.192, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 137

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 12125_3, Duration: 0.212, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10575_79, Duration: 6.727, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 14, Number of Packets: 714

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10609_250, Duration: 19.233, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 12, Number of Packets: 253

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10447_157, Duration: 15.191, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 8, Number of Packets: 172

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10057_29, Duration: 56.711, Protocol: 1, Source Port: 1, Destination IP: 8, Destination Port: 65, Number of Packets: 451

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10004_10, Duration: 5.609, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 69

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10384_186, Duration: 0.036, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10129_10, Duration: 12.762, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 15, Number of Packets: 166

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10181_60, Duration: 4.365, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 6, Number of Packets: 77

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 13192_26, Duration: 7.22, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 12, Number of Packets: 488

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10180_116, Duration: 10.783, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 10, Number of Packets: 128

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10056_41, Duration: 1.329, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 7, Number of Packets: 113

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10601_223, Duration: 3.671, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 56

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 12280_154, Duration: 0.583, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 192.168.100.4, Duration: 19.032, Protocol: 2, Source Port: 77, Destination IP: 4, Destination Port: 6, Number of Packets: 175

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 192.168.200.8, Duration: 1334.125, Protocol: 2, Source Port: 1993, Destination IP: 349, Destination Port: 10, Number of Packets: 196156

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 192.168.220.9, Duration: 0.181, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 129

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10325_11, Duration: 3.347, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 22, Number of Packets: 338

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10595_64, Duration: 1.646, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 192.168.220.10, Duration: 1.208, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 142

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 192.168.200.5, Duration: 0.189, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 138

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10056_184, Duration: 1.539, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 10, Number of Packets: 297

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10274_205, Duration: 2.254, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 192.168.220.5, Duration: 0.212, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 139

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10497_233, Duration: 0.471, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 192.168.220.6, Duration: 82.13, Protocol: 2, Source Port: 244, Destination IP: 79, Destination Port: 7, Number of Packets: 3562

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 11314_240, Duration: 1.801, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 11313_18, Duration: 0.52, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 11197_133, Duration: 1.473, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10075_194, Duration: 6.998, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 7, Number of Packets: 147

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10244_14, Duration: 8.324, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 15, Number of Packets: 127

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10046_7, Duration: 1.556, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10056_168, Duration: 0.691, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 323

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10583_206, Duration: 3.037, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10075_226, Duration: 47.061, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 19, Number of Packets: 1052

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10506_26, Duration: 0.484, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 44

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10132_239, Duration: 3.798, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 30, Number of Packets: 171

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10296_228, Duration: 33.959, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 21, Number of Packets: 698

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10296_227, Duration: 31.522, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 32, Number of Packets: 1427

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10078_77, Duration: 1.604, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 6, Number of Packets: 124

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 11191_163, Duration: 2.77, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 85

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10222_210, Duration: 5.569, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 23, Number of Packets: 160

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10249_121, Duration: 1.314, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 7, Number of Packets: 56

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10124_1, Duration: 30.505, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 70, Number of Packets: 334

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 192.168.220.8, Duration: 0.193, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 140

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10506_9, Duration: 0.097, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10176_157, Duration: 0.027, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 192.168.220.13, Duration: 345.173, Protocol: 2, Source Port: 493, Destination IP: 129, Destination Port: 7, Number of Packets: 270598

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 192.168.220.12, Duration: 0.193, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 134

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10007_17, Duration: 1.415, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 6, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10012_66, Duration: 2.543, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1457

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 192.168.220.16, Duration: 313.326, Protocol: 3, Source Port: 810, Destination IP: 132, Destination Port: 8, Number of Packets: 12184

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 192.168.200.3, Duration: 0.074, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10005_36, Duration: 13.346, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 6, Number of Packets: 361

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 192.168.220.3, Duration: 0.0, Protocol: 1, Source Port: 3, Destination IP: 3, Destination Port: 3, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10571_2, Duration: 0.724, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 52

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10194_82, Duration: 0.521, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 72

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10595_96, Duration: 3.927, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 7, Number of Packets: 59

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10249_91, Duration: 2.311, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 9, Number of Packets: 67

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10191_163, Duration: 2.77, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 4, Number of Packets: 47

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10117_88, Duration: 1.352, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 20, Number of Packets: 86

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10077_156, Duration: 3.852, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 13, Number of Packets: 256

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10587_194, Duration: 9.362, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 8, Number of Packets: 221

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10092_109, Duration: 13.049, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 8, Number of Packets: 54

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10874_23, Duration: 0.737, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 15, Number of Packets: 84

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10252_4, Duration: 8.412, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 152

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 11924_154, Duration: 2.166, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 6, Number of Packets: 65

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10874_41, Duration: 4.023, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 10, Number of Packets: 221

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10315_252, Duration: 0.191, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 11, Number of Packets: 73

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10194_100, Duration: 1.627, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10077_154, Duration: 1.563, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 114

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10074_39, Duration: 0.961, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 13, Number of Packets: 97

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10251_54, Duration: 19.537, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 25, Number of Packets: 290

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10296_226, Duration: 72.522, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 29, Number of Packets: 1967

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10195_190, Duration: 4.03, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 14, Number of Packets: 160

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10073_65, Duration: 1.724, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 12, Number of Packets: 91

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10316_201, Duration: 0.79, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 41

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10399_39, Duration: 0.856, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10085_31, Duration: 4.502, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 17, Number of Packets: 101

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10495_108, Duration: 0.182, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 6, Number of Packets: 36

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10150_210, Duration: 1.4, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 10, Number of Packets: 52

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10252_2, Duration: 0.102, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10150_53, Duration: 6.477, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 5, Number of Packets: 51

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10078_67, Duration: 0.102, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 192.168.100.3, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10870_108, Duration: 0.523, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 47

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10056_131, Duration: 1.256, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 6, Number of Packets: 91

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10252_12, Duration: 1.762, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 5, Number of Packets: 64

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10150_207, Duration: 1.084, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10056_199, Duration: 1.511, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 5, Number of Packets: 440

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10374_141, Duration: 6.422, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 22, Number of Packets: 160

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10586_65, Duration: 0.147, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10078_76, Duration: 0.833, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 2, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10279_199, Duration: 0.912, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 2, Number of Packets: 87

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10220_207, Duration: 11.367, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 14, Number of Packets: 145

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 12011_89, Duration: 0.204, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10082_66, Duration: 1.747, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10146_130, Duration: 0.127, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10498_124, Duration: 1.267, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 41

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10833_103, Duration: 0.971, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 12454_222, Duration: 1.738, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T09:01:59.603000, End Frame: 2017-03-17T10:01:59.603000, Source IP: 10877_146, Duration: 1.174, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 29

Output: normal