Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10163_53, Duration: 0.028, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10106_66, Duration: 0.531, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10106_67, Duration: 0.558, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 192.168.100.6, Duration: 0.835, Protocol: 1, Source Port: 220, Destination IP: 2, Destination Port: 32, Number of Packets: 275

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 192.168.220.16, Duration: 20.244, Protocol: 2, Source Port: 149, Destination IP: 32, Destination Port: 225, Number of Packets: 2365

Output: attacker


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 192.168.200.4, Duration: 0.168, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 144

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 192.168.200.5, Duration: 0.163, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 140

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 192.168.100.3, Duration: 0.0, Protocol: 2, Source Port: 220, Destination IP: 2, Destination Port: 24, Number of Packets: 250

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 192.168.100.5, Duration: 4.611, Protocol: 2, Source Port: 221, Destination IP: 17, Destination Port: 43, Number of Packets: 1246

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 192.168.220.12, Duration: 0.16, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 134

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 192.168.220.13, Duration: 0.136, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 130

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 192.168.100.1, Duration: 0.0, Protocol: 1, Source Port: 218, Destination IP: 1, Destination Port: 23, Number of Packets: 239

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: EXT_SERVER, Duration: 9.537, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 158, Number of Packets: 1385

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 192.168.200.8, Duration: 45.051, Protocol: 2, Source Port: 101, Destination IP: 10, Destination Port: 7, Number of Packets: 831

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 192.168.100.2, Duration: 0.0, Protocol: 1, Source Port: 218, Destination IP: 1, Destination Port: 23, Number of Packets: 239

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 192.168.100.4, Duration: 19.036, Protocol: 2, Source Port: 289, Destination IP: 5, Destination Port: 33, Number of Packets: 510

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 192.168.200.9, Duration: 32.494, Protocol: 2, Source Port: 93, Destination IP: 10, Destination Port: 7, Number of Packets: 756

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 13567_81, Duration: 2.831, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 13, Number of Packets: 112

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 192.168.220.6, Duration: 0.153, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 134

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 192.168.220.14, Duration: 0.153, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 133

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 192.168.220.11, Duration: 0.175, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 151

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 192.168.220.10, Duration: 0.153, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 132

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 192.168.220.4, Duration: 0.133, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 131

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 192.168.220.5, Duration: 0.19, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 148

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 192.168.220.15, Duration: 14.991, Protocol: 3, Source Port: 48, Destination IP: 11, Destination Port: 8, Number of Packets: 559

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 192.168.220.9, Duration: 0.145, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 130

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 192.168.200.3, Duration: 0.048, Protocol: 1, Source Port: 3, Destination IP: 3, Destination Port: 3, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 192.168.200.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 192.168.220.7, Duration: 14.885, Protocol: 3, Source Port: 51, Destination IP: 12, Destination Port: 9, Number of Packets: 522

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 192.168.220.8, Duration: 0.154, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 128

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: DNS, Duration: 0.93, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 327, Number of Packets: 396

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10833_103, Duration: 0.72, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10032_128, Duration: 0.536, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10051_51, Duration: 1.496, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 192.168.210.5, Duration: 171.028, Protocol: 2, Source Port: 375, Destination IP: 81, Destination Port: 7, Number of Packets: 4711

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10057_29, Duration: 4.808, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10055_190, Duration: 1.204, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10180_116, Duration: 0.947, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10056_20, Duration: 0.064, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10023_14, Duration: 0.689, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 12547_248, Duration: 1.509, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 50

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10025_202, Duration: 1.953, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10022_204, Duration: 2.758, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 173

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 192.168.220.3, Duration: 0.0, Protocol: 1, Source Port: 3, Destination IP: 2, Destination Port: 3, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 192.168.220.2, Duration: 0.019, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 0.0.0.0, Duration: 0.008, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10043_254, Duration: 2.2, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 50, Number of Packets: 200

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10187_115, Duration: 0.411, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10183_10, Duration: 0.171, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 185

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 11442_143, Duration: 0.624, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10786_4, Duration: 1.161, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10185_51, Duration: 1.534, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10056_41, Duration: 0.052, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10060_27, Duration: 0.781, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 10, Number of Packets: 61

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10063_33, Duration: 8.864, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 16, Number of Packets: 961

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10064_217, Duration: 0.423, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 51

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 11865_50, Duration: 1.02, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10206_7, Duration: 0.069, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10071_22, Duration: 0.027, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10139_39, Duration: 0.255, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10296_226, Duration: 7.946, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 7, Number of Packets: 167

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 11861_34, Duration: 0.651, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10072_39, Duration: 0.25, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10074_39, Duration: 1.04, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10001_8, Duration: 2.77, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 44

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10076_237, Duration: 3.627, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 5, Number of Packets: 80

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10296_234, Duration: 0.355, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 52

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10027_249, Duration: 0.69, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 48

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 11930_132, Duration: 0.835, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10077_156, Duration: 0.087, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 37

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10296_230, Duration: 2.382, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 5, Number of Packets: 113

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10081_164, Duration: 0.523, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 32

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10194_100, Duration: 0.076, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10077_154, Duration: 0.042, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10082_209, Duration: 0.266, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10069_64, Duration: 0.244, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10083_129, Duration: 0.976, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 3, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10010_37, Duration: 1.041, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 11, Number of Packets: 51

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10085_31, Duration: 0.198, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10084_230, Duration: 1.961, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 3, Number of Packets: 47

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10135_77, Duration: 0.31, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10094_75, Duration: 0.75, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10088_9, Duration: 3.214, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 64

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10296_225, Duration: 0.705, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 3, Number of Packets: 66

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10090_217, Duration: 0.068, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10089_53, Duration: 0.94, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10087_41, Duration: 0.134, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10074_40, Duration: 1.14, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10296_238, Duration: 13.362, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 9, Number of Packets: 422

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10095_80, Duration: 0.459, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10315_252, Duration: 0.05, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10169_169, Duration: 0.356, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10325_253, Duration: 3.681, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 145

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10091_132, Duration: 0.033, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10717_168, Duration: 0.117, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10092_106, Duration: 1.294, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 11359_51, Duration: 1.65, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 192.168.210.3, Duration: 0.091, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10182_24, Duration: 0.577, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10012_25, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10172_229, Duration: 6.918, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10012_56, Duration: 11.95, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 316

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10921_136, Duration: 0.088, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10174_64, Duration: 4.645, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 10, Number of Packets: 98

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10173_139, Duration: 1.277, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10082_168, Duration: 2.387, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 3, Number of Packets: 56

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10082_14, Duration: 6.099, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10296_227, Duration: 0.72, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 33

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10124_1, Duration: 3.614, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 11223_154, Duration: 0.179, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10082_252, Duration: 1.325, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 12549_184, Duration: 0.339, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10296_228, Duration: 0.709, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 13415_225, Duration: 0.871, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 11893_148, Duration: 2.547, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10022_207, Duration: 0.054, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10179_173, Duration: 0.675, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10073_65, Duration: 1.163, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10073_64, Duration: 0.98, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 33

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10296_229, Duration: 0.403, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 11617_88, Duration: 0.286, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10838_176, Duration: 0.628, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 192.168.210.4, Duration: 0.0, Protocol: 2, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10174_98, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10017_40, Duration: 0.562, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10013_97, Duration: 0.551, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10621_107, Duration: 0.367, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 11404_86, Duration: 0.122, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 11500_126, Duration: 0.502, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10437_63, Duration: 0.288, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10012_33, Duration: 3.002, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10034_8, Duration: 0.542, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10712_206, Duration: 0.907, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10020_73, Duration: 0.529, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10018_62, Duration: 1.201, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 11460_163, Duration: 0.329, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10075_194, Duration: 0.749, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10229_197, Duration: 0.164, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10035_234, Duration: 0.366, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10036_235, Duration: 0.369, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10984_40, Duration: 0.23, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10047_85, Duration: 0.545, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 11193_139, Duration: 0.56, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10919_132, Duration: 0.538, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 11973_234, Duration: 0.089, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10012_8, Duration: 0.021, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 12741_118, Duration: 0.432, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10012_24, Duration: 0.129, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10012_32, Duration: 0.019, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10012_11, Duration: 0.397, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 11478_252, Duration: 0.45, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T19:01:34.158000, End Frame: 2017-03-16T20:01:34.158000, Source IP: 10068_98, Duration: 0.685, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 192.168.100.4, Duration: 15.98, Protocol: 2, Source Port: 146, Destination IP: 4, Destination Port: 13, Number of Packets: 184

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 192.168.220.16, Duration: 27.14, Protocol: 3, Source Port: 147, Destination IP: 31, Destination Port: 91, Number of Packets: 2102

Output: attacker


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 192.168.100.1, Duration: 0.0, Protocol: 1, Source Port: 81, Destination IP: 1, Destination Port: 8, Number of Packets: 87

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 192.168.220.14, Duration: 0.124, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 111

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 192.168.220.5, Duration: 0.138, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 116

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 192.168.100.5, Duration: 2.483, Protocol: 2, Source Port: 84, Destination IP: 19, Destination Port: 30, Number of Packets: 861

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 192.168.100.2, Duration: 0.0, Protocol: 2, Source Port: 82, Destination IP: 2, Destination Port: 9, Number of Packets: 88

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: EXT_SERVER, Duration: 9.548, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 158, Number of Packets: 1335

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 192.168.200.8, Duration: 44.434, Protocol: 2, Source Port: 102, Destination IP: 11, Destination Port: 8, Number of Packets: 828

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 192.168.200.9, Duration: 30.317, Protocol: 2, Source Port: 80, Destination IP: 3, Destination Port: 4, Number of Packets: 678

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 192.168.220.12, Duration: 0.147, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 116

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 192.168.220.13, Duration: 0.119, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 112

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 192.168.100.3, Duration: 0.0, Protocol: 2, Source Port: 81, Destination IP: 2, Destination Port: 9, Number of Packets: 96

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 192.168.100.6, Duration: 0.0, Protocol: 2, Source Port: 81, Destination IP: 2, Destination Port: 9, Number of Packets: 87

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 192.168.220.6, Duration: 0.127, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 119

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 192.168.220.15, Duration: 0.121, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 109

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 192.168.200.4, Duration: 0.129, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 114

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 192.168.220.7, Duration: 0.125, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 110

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 192.168.220.10, Duration: 0.142, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 115

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 192.168.220.11, Duration: 0.146, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 117

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 192.168.200.5, Duration: 0.127, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 116

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 192.168.220.4, Duration: 0.123, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 112

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 192.168.220.9, Duration: 0.134, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 109

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 192.168.220.8, Duration: 0.124, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 112

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: DNS, Duration: 0.674, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 131, Number of Packets: 173

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 10013_97, Duration: 1.45, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 10051_51, Duration: 0.559, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 10712_206, Duration: 0.918, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 13567_81, Duration: 1.875, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 8, Number of Packets: 57

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 11386_91, Duration: 0.175, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 192.168.220.3, Duration: 0.001, Protocol: 1, Source Port: 3, Destination IP: 2, Destination Port: 3, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 192.168.210.5, Duration: 0.0, Protocol: 2, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 192.168.210.3, Duration: 0.049, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 192.168.210.4, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 192.168.200.3, Duration: 0.06, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 10034_8, Duration: 0.548, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 10621_107, Duration: 0.536, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 11478_252, Duration: 0.357, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 11548_192, Duration: 0.086, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 10648_199, Duration: 0.765, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 10036_235, Duration: 0.375, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 11550_77, Duration: 0.085, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 10296_238, Duration: 2.598, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 56

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 10068_2, Duration: 0.603, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 192.168.200.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 12741_121, Duration: 0.431, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 10437_63, Duration: 0.199, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 10012_11, Duration: 2.907, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 11973_234, Duration: 0.221, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 10022_204, Duration: 0.681, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 228

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 10019_14, Duration: 0.604, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 12808_156, Duration: 1.079, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 39

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 10024_215, Duration: 2.33, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 233

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 10025_202, Duration: 0.19, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 192.168.220.2, Duration: 0.004, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 0.0.0.0, Duration: 0.001, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 10043_254, Duration: 1.017, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 25, Number of Packets: 100

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T20:01:35.067000, End Frame: 2017-03-16T21:01:35.067000, Source IP: 10499_34, Duration: 0.349, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T21:01:40.057000, End Frame: 2017-03-16T22:01:40.057000, Source IP: EXT_SERVER, Duration: 9.724, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 157, Number of Packets: 1264

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T21:01:40.057000, End Frame: 2017-03-16T22:01:40.057000, Source IP: 192.168.200.8, Duration: 45.28, Protocol: 2, Source Port: 103, Destination IP: 10, Destination Port: 7, Number of Packets: 810

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T21:01:40.057000, End Frame: 2017-03-16T22:01:40.057000, Source IP: 192.168.200.9, Duration: 29.512, Protocol: 2, Source Port: 79, Destination IP: 2, Destination Port: 3, Number of Packets: 671

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T21:01:40.057000, End Frame: 2017-03-16T22:01:40.057000, Source IP: 192.168.220.14, Duration: 0.126, Protocol: 2, Source Port: 5, Destination IP: 4, Destination Port: 5, Number of Packets: 95

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T21:01:40.057000, End Frame: 2017-03-16T22:01:40.057000, Source IP: 192.168.220.5, Duration: 0.11, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 91

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T21:01:40.057000, End Frame: 2017-03-16T22:01:40.057000, Source IP: 192.168.100.5, Duration: 0.0, Protocol: 2, Source Port: 3, Destination IP: 17, Destination Port: 18, Number of Packets: 579

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T21:01:40.057000, End Frame: 2017-03-16T22:01:40.057000, Source IP: 192.168.220.12, Duration: 0.118, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 93

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T21:01:40.057000, End Frame: 2017-03-16T22:01:40.057000, Source IP: 192.168.220.13, Duration: 0.1, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 88

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T21:01:40.057000, End Frame: 2017-03-16T22:01:40.057000, Source IP: 192.168.220.16, Duration: 0.098, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 89

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T21:01:40.057000, End Frame: 2017-03-16T22:01:40.057000, Source IP: 192.168.220.15, Duration: 0.12, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 94

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T21:01:40.057000, End Frame: 2017-03-16T22:01:40.057000, Source IP: 192.168.200.4, Duration: 0.123, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 92

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T21:01:40.057000, End Frame: 2017-03-16T22:01:40.057000, Source IP: 192.168.220.7, Duration: 0.1, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 93

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T21:01:40.057000, End Frame: 2017-03-16T22:01:40.057000, Source IP: 192.168.220.10, Duration: 0.108, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 93

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T21:01:40.057000, End Frame: 2017-03-16T22:01:40.057000, Source IP: 192.168.220.11, Duration: 0.108, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 95

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T21:01:40.057000, End Frame: 2017-03-16T22:01:40.057000, Source IP: 192.168.200.5, Duration: 0.097, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 92

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T21:01:40.057000, End Frame: 2017-03-16T22:01:40.057000, Source IP: 192.168.220.4, Duration: 0.094, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 91

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T21:01:40.057000, End Frame: 2017-03-16T22:01:40.057000, Source IP: 192.168.220.6, Duration: 0.104, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 90

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T21:01:40.057000, End Frame: 2017-03-16T22:01:40.057000, Source IP: 192.168.220.9, Duration: 0.125, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 93

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T21:01:40.057000, End Frame: 2017-03-16T22:01:40.057000, Source IP: 192.168.220.8, Duration: 0.105, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 88

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T21:01:40.057000, End Frame: 2017-03-16T22:01:40.057000, Source IP: DNS, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 73, Number of Packets: 73

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T21:01:40.057000, End Frame: 2017-03-16T22:01:40.057000, Source IP: 192.168.100.4, Duration: 19.009, Protocol: 2, Source Port: 78, Destination IP: 3, Destination Port: 4, Number of Packets: 111

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T21:01:40.057000, End Frame: 2017-03-16T22:01:40.057000, Source IP: 192.168.220.3, Duration: 0.002, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T21:01:40.057000, End Frame: 2017-03-16T22:01:40.057000, Source IP: 192.168.210.5, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T21:01:40.057000, End Frame: 2017-03-16T22:01:40.057000, Source IP: 192.168.210.3, Duration: 0.047, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T21:01:40.057000, End Frame: 2017-03-16T22:01:40.057000, Source IP: 192.168.210.4, Duration: 0.0, Protocol: 2, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T21:01:40.057000, End Frame: 2017-03-16T22:01:40.057000, Source IP: 192.168.200.3, Duration: 0.046, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T21:01:40.057000, End Frame: 2017-03-16T22:01:40.057000, Source IP: 192.168.100.3, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T21:01:40.057000, End Frame: 2017-03-16T22:01:40.057000, Source IP: 10296_238, Duration: 3.038, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 50

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T21:01:40.057000, End Frame: 2017-03-16T22:01:40.057000, Source IP: 10296_226, Duration: 0.351, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T21:01:40.057000, End Frame: 2017-03-16T22:01:40.057000, Source IP: 192.168.220.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T21:01:40.057000, End Frame: 2017-03-16T22:01:40.057000, Source IP: 192.168.200.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T21:01:40.057000, End Frame: 2017-03-16T22:01:40.057000, Source IP: 10015_251, Duration: 0.573, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T21:01:40.057000, End Frame: 2017-03-16T22:01:40.057000, Source IP: 10437_63, Duration: 0.581, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T21:01:40.057000, End Frame: 2017-03-16T22:01:40.057000, Source IP: 10012_11, Duration: 3.612, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T21:01:40.057000, End Frame: 2017-03-16T22:01:40.057000, Source IP: 10068_66, Duration: 0.543, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T22:01:40.059000, End Frame: 2017-03-16T23:01:40.059000, Source IP: EXT_SERVER, Duration: 9.679, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 157, Number of Packets: 1263

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T22:01:40.059000, End Frame: 2017-03-16T23:01:40.059000, Source IP: 192.168.200.8, Duration: 40.319, Protocol: 2, Source Port: 95, Destination IP: 7, Destination Port: 6, Number of Packets: 797

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T22:01:40.059000, End Frame: 2017-03-16T23:01:40.059000, Source IP: 192.168.200.9, Duration: 30.435, Protocol: 2, Source Port: 80, Destination IP: 3, Destination Port: 4, Number of Packets: 680

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T22:01:40.059000, End Frame: 2017-03-16T23:01:40.059000, Source IP: 192.168.100.4, Duration: 21.965, Protocol: 2, Source Port: 90, Destination IP: 3, Destination Port: 4, Number of Packets: 127

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T22:01:40.059000, End Frame: 2017-03-16T23:01:40.059000, Source IP: 192.168.220.8, Duration: 0.095, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 91

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T22:01:40.059000, End Frame: 2017-03-16T23:01:40.059000, Source IP: 192.168.100.5, Duration: 4.606, Protocol: 2, Source Port: 3, Destination IP: 19, Destination Port: 20, Number of Packets: 598

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T22:01:40.059000, End Frame: 2017-03-16T23:01:40.059000, Source IP: 192.168.220.12, Duration: 0.117, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 95

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T22:01:40.059000, End Frame: 2017-03-16T23:01:40.059000, Source IP: 192.168.220.13, Duration: 0.118, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 95

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T22:01:40.059000, End Frame: 2017-03-16T23:01:40.059000, Source IP: 192.168.220.16, Duration: 0.124, Protocol: 2, Source Port: 6, Destination IP: 4, Destination Port: 5, Number of Packets: 96

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T22:01:40.059000, End Frame: 2017-03-16T23:01:40.059000, Source IP: 192.168.200.4, Duration: 0.254, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 97

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T22:01:40.059000, End Frame: 2017-03-16T23:01:40.059000, Source IP: 192.168.220.15, Duration: 0.123, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 96

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T22:01:40.059000, End Frame: 2017-03-16T23:01:40.059000, Source IP: 192.168.220.7, Duration: 0.106, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 96

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T22:01:40.059000, End Frame: 2017-03-16T23:01:40.059000, Source IP: 192.168.220.14, Duration: 0.121, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 96

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T22:01:40.059000, End Frame: 2017-03-16T23:01:40.059000, Source IP: 192.168.220.10, Duration: 0.116, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 94

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T22:01:40.059000, End Frame: 2017-03-16T23:01:40.059000, Source IP: 192.168.220.5, Duration: 3.147, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 92

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T22:01:40.059000, End Frame: 2017-03-16T23:01:40.059000, Source IP: 192.168.220.11, Duration: 1.539, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 98

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T22:01:40.059000, End Frame: 2017-03-16T23:01:40.059000, Source IP: 192.168.200.5, Duration: 0.109, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 94

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T22:01:40.059000, End Frame: 2017-03-16T23:01:40.059000, Source IP: 192.168.220.4, Duration: 0.093, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 92

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T22:01:40.059000, End Frame: 2017-03-16T23:01:40.059000, Source IP: 192.168.220.6, Duration: 0.117, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 92

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T22:01:40.059000, End Frame: 2017-03-16T23:01:40.059000, Source IP: 192.168.220.9, Duration: 0.101, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 89

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T22:01:40.059000, End Frame: 2017-03-16T23:01:40.059000, Source IP: DNS, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 76, Number of Packets: 76

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T22:01:40.059000, End Frame: 2017-03-16T23:01:40.059000, Source IP: 192.168.220.3, Duration: 0.001, Protocol: 1, Source Port: 3, Destination IP: 3, Destination Port: 3, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T22:01:40.059000, End Frame: 2017-03-16T23:01:40.059000, Source IP: 192.168.210.5, Duration: 0.0, Protocol: 2, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T22:01:40.059000, End Frame: 2017-03-16T23:01:40.059000, Source IP: 192.168.210.3, Duration: 0.074, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T22:01:40.059000, End Frame: 2017-03-16T23:01:40.059000, Source IP: 192.168.210.4, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T22:01:40.059000, End Frame: 2017-03-16T23:01:40.059000, Source IP: 192.168.200.3, Duration: 0.003, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T22:01:40.059000, End Frame: 2017-03-16T23:01:40.059000, Source IP: 192.168.100.3, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T22:01:40.059000, End Frame: 2017-03-16T23:01:40.059000, Source IP: 10296_238, Duration: 2.586, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 57

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T22:01:40.059000, End Frame: 2017-03-16T23:01:40.059000, Source IP: 10068_2, Duration: 0.566, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T22:01:40.059000, End Frame: 2017-03-16T23:01:40.059000, Source IP: 192.168.220.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T22:01:40.059000, End Frame: 2017-03-16T23:01:40.059000, Source IP: 10068_66, Duration: 0.337, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T23:01:40.062000, End Frame: 2017-03-17T00:01:40.062000, Source IP: EXT_SERVER, Duration: 9.81, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 159, Number of Packets: 1289

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T23:01:40.062000, End Frame: 2017-03-17T00:01:40.062000, Source IP: 192.168.200.8, Duration: 47.391, Protocol: 3, Source Port: 110, Destination IP: 16, Destination Port: 10, Number of Packets: 854

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T23:01:40.062000, End Frame: 2017-03-17T00:01:40.062000, Source IP: 192.168.200.9, Duration: 32.72, Protocol: 3, Source Port: 89, Destination IP: 10, Destination Port: 9, Number of Packets: 721

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T23:01:40.062000, End Frame: 2017-03-17T00:01:40.062000, Source IP: 192.168.100.5, Duration: 14.273, Protocol: 2, Source Port: 3, Destination IP: 17, Destination Port: 18, Number of Packets: 606

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T23:01:40.062000, End Frame: 2017-03-17T00:01:40.062000, Source IP: 192.168.220.10, Duration: 3.939, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 98

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T23:01:40.062000, End Frame: 2017-03-17T00:01:40.062000, Source IP: 192.168.200.5, Duration: 2.442, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 94

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T23:01:40.062000, End Frame: 2017-03-17T00:01:40.062000, Source IP: 192.168.100.3, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T23:01:40.062000, End Frame: 2017-03-17T00:01:40.062000, Source IP: 192.168.220.4, Duration: 0.109, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 96

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T23:01:40.062000, End Frame: 2017-03-17T00:01:40.062000, Source IP: 192.168.220.5, Duration: 0.101, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 90

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T23:01:40.062000, End Frame: 2017-03-17T00:01:40.062000, Source IP: 192.168.220.6, Duration: 3.143, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 98

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T23:01:40.062000, End Frame: 2017-03-17T00:01:40.062000, Source IP: 192.168.220.9, Duration: 0.103, Protocol: 2, Source Port: 5, Destination IP: 4, Destination Port: 5, Number of Packets: 94

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T23:01:40.062000, End Frame: 2017-03-17T00:01:40.062000, Source IP: 192.168.220.8, Duration: 0.124, Protocol: 2, Source Port: 5, Destination IP: 4, Destination Port: 5, Number of Packets: 95

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T23:01:40.062000, End Frame: 2017-03-17T00:01:40.062000, Source IP: 192.168.100.4, Duration: 17.989, Protocol: 2, Source Port: 74, Destination IP: 3, Destination Port: 4, Number of Packets: 107

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T23:01:40.062000, End Frame: 2017-03-17T00:01:40.062000, Source IP: 192.168.220.12, Duration: 5.133, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 97

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T23:01:40.062000, End Frame: 2017-03-17T00:01:40.062000, Source IP: 192.168.220.16, Duration: 0.108, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 92

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T23:01:40.062000, End Frame: 2017-03-17T00:01:40.062000, Source IP: 192.168.200.4, Duration: 0.105, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 92

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T23:01:40.062000, End Frame: 2017-03-17T00:01:40.062000, Source IP: 192.168.220.15, Duration: 0.114, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 91

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T23:01:40.062000, End Frame: 2017-03-17T00:01:40.062000, Source IP: 192.168.220.7, Duration: 0.11, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 93

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T23:01:40.062000, End Frame: 2017-03-17T00:01:40.062000, Source IP: 192.168.220.14, Duration: 0.112, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 90

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T23:01:40.062000, End Frame: 2017-03-17T00:01:40.062000, Source IP: 192.168.220.13, Duration: 0.097, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 93

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T23:01:40.062000, End Frame: 2017-03-17T00:01:40.062000, Source IP: 192.168.220.11, Duration: 1.737, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 85

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T23:01:40.062000, End Frame: 2017-03-17T00:01:40.062000, Source IP: DNS, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 76, Number of Packets: 76

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T23:01:40.062000, End Frame: 2017-03-17T00:01:40.062000, Source IP: 192.168.220.3, Duration: 0.004, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T23:01:40.062000, End Frame: 2017-03-17T00:01:40.062000, Source IP: 192.168.210.5, Duration: 0.11, Protocol: 2, Source Port: 4, Destination IP: 4, Destination Port: 4, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T23:01:40.062000, End Frame: 2017-03-17T00:01:40.062000, Source IP: 192.168.210.3, Duration: 0.032, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T23:01:40.062000, End Frame: 2017-03-17T00:01:40.062000, Source IP: 192.168.210.4, Duration: 0.573, Protocol: 3, Source Port: 5, Destination IP: 5, Destination Port: 5, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T23:01:40.062000, End Frame: 2017-03-17T00:01:40.062000, Source IP: 192.168.200.3, Duration: 0.043, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T23:01:40.062000, End Frame: 2017-03-17T00:01:40.062000, Source IP: 192.168.220.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T23:01:40.062000, End Frame: 2017-03-17T00:01:40.062000, Source IP: 10296_238, Duration: 1.42, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T23:01:40.062000, End Frame: 2017-03-17T00:01:40.062000, Source IP: 10296_226, Duration: 0.332, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T23:01:40.062000, End Frame: 2017-03-17T00:01:40.062000, Source IP: 192.168.210.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T23:01:40.062000, End Frame: 2017-03-17T00:01:40.062000, Source IP: 192.168.200.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T23:01:40.062000, End Frame: 2017-03-17T00:01:40.062000, Source IP: 13697_62, Duration: 0.345, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal