Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 13512_28, Duration: 1.697, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 14376_177, Duration: 20.714, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 87, Number of Packets: 875

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11873_94, Duration: 4.195, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10222_199, Duration: 9.317, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 8, Number of Packets: 94

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11317_245, Duration: 1.265, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 46

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11192_136, Duration: 16.838, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 36, Number of Packets: 408

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10078_82, Duration: 0.804, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 57

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10056_70, Duration: 0.212, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 128

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10543_146, Duration: 3.876, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 44

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10506_9, Duration: 0.371, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 61

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10249_72, Duration: 1.545, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 13, Number of Packets: 116

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10244_15, Duration: 3.119, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 11, Number of Packets: 85

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10194_77, Duration: 6.099, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 76

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10150_70, Duration: 1.84, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 12, Number of Packets: 110

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11338_137, Duration: 0.779, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10085_66, Duration: 5.224, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 14, Number of Packets: 163

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 14302_194, Duration: 0.404, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10220_206, Duration: 1.004, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10102_83, Duration: 2.789, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 8, Number of Packets: 87

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10455_2, Duration: 0.839, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 32

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10887_125, Duration: 0.292, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 12141_248, Duration: 4.404, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 7, Number of Packets: 92

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11046_154, Duration: 10.574, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 105

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10143_80, Duration: 6.957, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 10, Number of Packets: 145

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10105_16, Duration: 0.275, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 87

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10870_108, Duration: 0.122, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10074_40, Duration: 5.348, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 44, Number of Packets: 320

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10490_102, Duration: 0.085, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 33

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10110_11, Duration: 0.201, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10535_169, Duration: 0.513, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10901_39, Duration: 1.576, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10571_6, Duration: 3.735, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 11, Number of Packets: 94

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10956_183, Duration: 75.257, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 104, Number of Packets: 3186

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10150_80, Duration: 0.771, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 14202_192, Duration: 0.238, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10218_207, Duration: 4.228, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 59

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10279_34, Duration: 0.872, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10585_220, Duration: 2.926, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10538_95, Duration: 6.09, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10185_51, Duration: 8.261, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 9, Number of Packets: 97

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10046_7, Duration: 2.026, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 5, Number of Packets: 50

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10056_89, Duration: 0.852, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 7, Number of Packets: 894

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 12945_186, Duration: 6.925, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 12, Number of Packets: 566

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 12230_16, Duration: 0.132, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 14036_12, Duration: 0.145, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10056_20, Duration: 0.713, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 134

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10056_169, Duration: 0.066, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10056_96, Duration: 0.442, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 66

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10068_72, Duration: 2.191, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 49

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10056_31, Duration: 3.243, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10056_143, Duration: 0.19, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 14474_107, Duration: 33.322, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 12, Number of Packets: 2302

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 13807_69, Duration: 1.407, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10012_43, Duration: 1.262, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 16, Number of Packets: 171

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10997_243, Duration: 0.099, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10833_103, Duration: 2.073, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 4, Number of Packets: 52

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10056_145, Duration: 0.249, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 253

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10702_91, Duration: 5.498, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 47

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10193_10, Duration: 0.193, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 12566_101, Duration: 4.143, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 47

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10082_147, Duration: 1.518, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 236

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 13375_98, Duration: 0.886, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10022_207, Duration: 0.108, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10179_174, Duration: 0.478, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 192.168.220.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 192.168.210.3, Duration: 0.081, Protocol: 2, Source Port: 3, Destination IP: 3, Destination Port: 3, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11221_98, Duration: 2.559, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 55

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 12782_251, Duration: 3.086, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 85

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10194_74, Duration: 3.131, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 21, Number of Packets: 237

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 12109_60, Duration: 5.969, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 73

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10793_130, Duration: 3.286, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 17, Number of Packets: 195

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10674_228, Duration: 1.796, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10035_234, Duration: 2.412, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 53

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10075_226, Duration: 1.487, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 62

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10249_91, Duration: 0.992, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 12, Number of Packets: 93

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10171_252, Duration: 10.688, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 16, Number of Packets: 150

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10056_95, Duration: 0.534, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 347

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11191_163, Duration: 0.98, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11196_172, Duration: 12.367, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 16, Number of Packets: 2286

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11195_7, Duration: 1.04, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 53

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 12833_84, Duration: 1.184, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11242_170, Duration: 1.306, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 55

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10051_51, Duration: 1.533, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10979_53, Duration: 23.688, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 36, Number of Packets: 1173

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10223_4, Duration: 18.392, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 95, Number of Packets: 1911

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10223_24, Duration: 56.758, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 46, Number of Packets: 1280

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10223_61, Duration: 8.02, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 64, Number of Packets: 733

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10465_186, Duration: 23.765, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 156

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10249_102, Duration: 0.302, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10194_82, Duration: 8.666, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 13, Number of Packets: 189

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 192.168.210.4, Duration: 0.0, Protocol: 2, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10055_190, Duration: 5.783, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 5, Number of Packets: 57

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10506_26, Duration: 1.352, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 17, Number of Packets: 123

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10170_25, Duration: 3.547, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 10, Number of Packets: 92

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10499_34, Duration: 8.602, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 14, Number of Packets: 208

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10571_2, Duration: 1.906, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10840_33, Duration: 0.252, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10782_56, Duration: 22.842, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 24, Number of Packets: 204

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 14241_206, Duration: 0.357, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10506_18, Duration: 0.733, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10181_60, Duration: 2.926, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 52

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10242_82, Duration: 0.37, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10824_135, Duration: 13.698, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 2193

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10825_138, Duration: 1.028, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 384

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10276_216, Duration: 2.53, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 7, Number of Packets: 59

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10827_172, Duration: 4.577, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 12, Number of Packets: 100

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10826_237, Duration: 0.871, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10826_4, Duration: 0.52, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 39

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10826_231, Duration: 2.173, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10106_112, Duration: 14.176, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 181

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10107_215, Duration: 4.871, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 84

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10012_75, Duration: 0.116, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 41

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10163_46, Duration: 4.074, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 27, Number of Packets: 285

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10078_100, Duration: 3.999, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 6, Number of Packets: 85

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10328_25, Duration: 2.808, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 84

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10826_232, Duration: 3.887, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 89

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10825_141, Duration: 0.657, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10068_2, Duration: 9.712, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 8, Number of Packets: 353

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10163_10, Duration: 10.299, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 22, Number of Packets: 289

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10712_206, Duration: 1.448, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10279_223, Duration: 3.06, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 48

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10414_45, Duration: 4.824, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 9, Number of Packets: 90

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10135_249, Duration: 3.934, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 8, Number of Packets: 56

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10506_17, Duration: 0.466, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 53

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10089_53, Duration: 1.029, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10573_115, Duration: 0.751, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 55

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10714_139, Duration: 3.469, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 18, Number of Packets: 127

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10804_251, Duration: 0.834, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10434_207, Duration: 1.031, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10056_61, Duration: 0.698, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 135

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10983_96, Duration: 9.712, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 5, Number of Packets: 78

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10078_71, Duration: 2.395, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 3, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10345_172, Duration: 0.666, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10832_250, Duration: 0.458, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11222_68, Duration: 0.734, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11515_229, Duration: 0.396, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10826_233, Duration: 1.709, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10781_217, Duration: 0.125, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10078_66, Duration: 1.791, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10194_76, Duration: 6.429, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 4, Number of Packets: 75

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10154_233, Duration: 1.751, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10166_29, Duration: 1.267, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11908_42, Duration: 0.402, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10384_186, Duration: 0.037, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10129_10, Duration: 4.256, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 7, Number of Packets: 69

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10135_210, Duration: 0.948, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10170_30, Duration: 0.913, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 90

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10163_60, Duration: 4.594, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 24, Number of Packets: 281

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10163_21, Duration: 7.622, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 40, Number of Packets: 311

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10263_186, Duration: 9.592, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 17, Number of Packets: 150

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10412_239, Duration: 4.73, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 88

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 14240_185, Duration: 1.906, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10135_236, Duration: 2.311, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 7, Number of Packets: 50

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10321_204, Duration: 27.897, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 46, Number of Packets: 772

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10143_90, Duration: 0.734, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 3, Number of Packets: 45

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10012_24, Duration: 0.172, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 6, Number of Packets: 36

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11491_23, Duration: 0.507, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10769_252, Duration: 1.88, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10323_178, Duration: 5.906, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 89

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10150_12, Duration: 3.76, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10240_139, Duration: 0.926, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10336_205, Duration: 4.513, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 83

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10337_11, Duration: 5.795, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 8, Number of Packets: 93

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10406_24, Duration: 0.303, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10330_85, Duration: 4.933, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 4, Number of Packets: 85

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 13776_104, Duration: 0.374, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10521_178, Duration: 3.695, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10252_12, Duration: 6.135, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 5, Number of Packets: 100

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10271_247, Duration: 0.803, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10251_54, Duration: 2.786, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 39

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11711_236, Duration: 3.134, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11582_10, Duration: 0.987, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10270_15, Duration: 2.824, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 7, Number of Packets: 51

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10261_219, Duration: 2.914, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 43

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10227_79, Duration: 1.142, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10102_54, Duration: 3.084, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 6, Number of Packets: 59

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10110_13, Duration: 8.486, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 14, Number of Packets: 92

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 12884_18, Duration: 1.213, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10254_213, Duration: 2.102, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11641_202, Duration: 1.389, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10864_226, Duration: 1.565, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10264_172, Duration: 1.653, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 6, Number of Packets: 36

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10131_235, Duration: 0.466, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 12076_139, Duration: 1.727, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10656_106, Duration: 1.655, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10203_1, Duration: 3.952, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 61

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10679_21, Duration: 1.269, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11156_192, Duration: 10.999, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 11, Number of Packets: 125

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10284_92, Duration: 0.252, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10956_52, Duration: 2.583, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 57

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11238_251, Duration: 0.269, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10281_198, Duration: 0.258, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10158_155, Duration: 18.137, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 8, Number of Packets: 127

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10456_29, Duration: 1.507, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 48

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10205_12, Duration: 8.36, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 44

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10255_143, Duration: 7.022, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 32

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10570_117, Duration: 1.922, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10260_162, Duration: 3.974, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10097_50, Duration: 0.564, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10284_27, Duration: 1.074, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10261_117, Duration: 29.197, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 25, Number of Packets: 1029

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10261_101, Duration: 86.755, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 17, Number of Packets: 5919

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11668_138, Duration: 28.006, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 19, Number of Packets: 818

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10206_7, Duration: 18.866, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 15, Number of Packets: 293

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11232_131, Duration: 34.587, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 14, Number of Packets: 267

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10070_31, Duration: 0.214, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10082_78, Duration: 0.048, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10027_166, Duration: 0.045, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11218_184, Duration: 0.121, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10951_141, Duration: 1.799, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10744_248, Duration: 0.353, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10982_41, Duration: 2.164, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 5, Number of Packets: 62

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11059_32, Duration: 1.186, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 46

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10268_192, Duration: 0.586, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10107_38, Duration: 0.872, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10433_232, Duration: 0.596, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10325_210, Duration: 0.794, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10143_76, Duration: 0.451, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11578_49, Duration: 0.313, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10708_178, Duration: 2.391, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 10, Number of Packets: 72

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10793_162, Duration: 3.225, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 5, Number of Packets: 118

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10022_175, Duration: 4.761, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 12, Number of Packets: 137

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 12487_124, Duration: 1.207, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 46

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11046_147, Duration: 1.09, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10828_20, Duration: 2.139, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 14364_172, Duration: 0.293, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 51

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10838_176, Duration: 6.313, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 81

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11440_62, Duration: 1.421, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11416_216, Duration: 0.218, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10125_12, Duration: 8.796, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 8, Number of Packets: 41

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11231_219, Duration: 10.912, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 330

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 12112_1, Duration: 0.503, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10082_188, Duration: 0.044, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 12675_86, Duration: 4.133, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 11, Number of Packets: 184

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10765_86, Duration: 6.61, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 9, Number of Packets: 59

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10028_175, Duration: 4.565, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 28, Number of Packets: 83

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10261_108, Duration: 7.918, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 327

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10224_176, Duration: 3.144, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 9, Number of Packets: 99

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10082_111, Duration: 0.043, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10261_92, Duration: 1.11, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 32

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10997_254, Duration: 0.64, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10056_129, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 14396_241, Duration: 1.118, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 14, Number of Packets: 72

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10027_175, Duration: 5.361, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 17, Number of Packets: 132

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11439_36, Duration: 2.475, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 6, Number of Packets: 78

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11046_99, Duration: 2.774, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 55

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10056_121, Duration: 1.029, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11386_91, Duration: 0.123, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11382_202, Duration: 0.314, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11479_15, Duration: 3.409, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 10, Number of Packets: 70

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10534_235, Duration: 0.205, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10224_168, Duration: 0.064, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11972_154, Duration: 6.102, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 11, Number of Packets: 78

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11233_247, Duration: 24.927, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 13, Number of Packets: 193

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10138_16, Duration: 0.345, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 12271_34, Duration: 0.804, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 72

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 12272_17, Duration: 0.279, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 39

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 12273_182, Duration: 0.853, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 137

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10069_197, Duration: 1.638, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 12277_36, Duration: 1.205, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 91

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 12276_187, Duration: 1.513, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 145

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 12274_208, Duration: 1.028, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10230_59, Duration: 0.433, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10981_3, Duration: 1.321, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 3, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11441_102, Duration: 6.503, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 9, Number of Packets: 61

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 14402_114, Duration: 18.666, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 10, Number of Packets: 1975

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10012_17, Duration: 1.054, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 8, Number of Packets: 268

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10071_22, Duration: 0.071, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 18, Number of Packets: 70

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10069_75, Duration: 0.035, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 13190_219, Duration: 4.354, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 80

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10001_8, Duration: 1.871, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 17, Number of Packets: 81

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10072_43, Duration: 3.008, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 22, Number of Packets: 56

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10072_42, Duration: 2.278, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 19, Number of Packets: 47

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10193_2, Duration: 9.922, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 18, Number of Packets: 343

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 14401_170, Duration: 4.963, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 5, Number of Packets: 97

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10077_154, Duration: 2.044, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 127

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10080_156, Duration: 4.968, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 88

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10150_42, Duration: 0.641, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10077_156, Duration: 7.164, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 3, Number of Packets: 401

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10082_106, Duration: 0.323, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10084_230, Duration: 9.52, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 90

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10010_37, Duration: 1.144, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 26, Number of Packets: 135

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11541_203, Duration: 5.375, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10083_129, Duration: 4.692, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 6, Number of Packets: 223

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11046_149, Duration: 0.17, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 2, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10090_217, Duration: 1.36, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10086_192, Duration: 10.294, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 333

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10091_132, Duration: 1.783, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 96

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10088_9, Duration: 34.722, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 485

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10093_150, Duration: 1.09, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 59

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10092_103, Duration: 2.748, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10068_163, Duration: 4.014, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10223_122, Duration: 4.979, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 23, Number of Packets: 99

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10056_211, Duration: 3.716, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11552_44, Duration: 1.472, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 8, Number of Packets: 52

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11553_186, Duration: 0.226, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11549_222, Duration: 5.352, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 35

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11554_69, Duration: 0.705, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 35

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10278_106, Duration: 0.578, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10970_157, Duration: 1.502, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10098_126, Duration: 0.359, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10283_80, Duration: 0.299, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10950_54, Duration: 0.229, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10840_35, Duration: 0.206, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10078_76, Duration: 2.752, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 4, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10194_71, Duration: 0.97, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10194_66, Duration: 3.78, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10012_57, Duration: 1.662, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11046_148, Duration: 0.725, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 83

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 10100_133, Duration: 2.742, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 5, Number of Packets: 64

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T12:04:16.953000, End Frame: 2017-03-20T13:04:16.953000, Source IP: 11498_171, Duration: 0.426, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 18

Output: normal