Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 10135_170, Duration: 3.206, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 12908_207, Duration: 7.224, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 67

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 11582_10, Duration: 0.092, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 11051_137, Duration: 0.126, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 10160_39, Duration: 0.995, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 400

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 12796_52, Duration: 2.011, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 11237_137, Duration: 0.352, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 10096_86, Duration: 0.242, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 41

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 10138_16, Duration: 0.075, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 10091_132, Duration: 0.424, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 54

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 12089_179, Duration: 0.325, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 10135_77, Duration: 0.085, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 10107_59, Duration: 0.082, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 10642_43, Duration: 0.022, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 10258_183, Duration: 0.956, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 10199_2, Duration: 0.577, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 6, Number of Packets: 81

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 10093_150, Duration: 1.305, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 13190_219, Duration: 0.435, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 10082_34, Duration: 0.998, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 10195_190, Duration: 0.79, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 12082_255, Duration: 0.572, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 10181_60, Duration: 0.872, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 10056_126, Duration: 0.04, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 11865_68, Duration: 1.216, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 10051_51, Duration: 2.131, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 11365_94, Duration: 1.432, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 10983_96, Duration: 2.348, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 10082_49, Duration: 1.92, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 42

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 10092_102, Duration: 2.734, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 12017_208, Duration: 0.198, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 11029_41, Duration: 0.383, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 12808_156, Duration: 0.78, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 12807_233, Duration: 0.658, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 316

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 10022_204, Duration: 1.187, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 111

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 10018_62, Duration: 1.364, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 12829_116, Duration: 0.219, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 11841_214, Duration: 1.56, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 10793_130, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 10150_40, Duration: 0.092, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T18:02:47.908000, End Frame: 2017-03-18T19:02:47.908000, Source IP: 10920_178, Duration: 0.021, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: DNS, Duration: 6.202, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 509, Number of Packets: 890

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10762_88, Duration: 3.172, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10125_12, Duration: 1.039, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10124_1, Duration: 0.163, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 192.168.220.7, Duration: 158.388, Protocol: 3, Source Port: 714, Destination IP: 111, Destination Port: 9, Number of Packets: 5274

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 12526_40, Duration: 0.103, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10077_156, Duration: 6.616, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 3, Number of Packets: 182

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10793_130, Duration: 0.492, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 5, Number of Packets: 39

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10091_2, Duration: 0.028, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10082_46, Duration: 1.101, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10093_150, Duration: 1.057, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 35

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10202_254, Duration: 1.157, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 192.168.100.4, Duration: 10.996, Protocol: 2, Source Port: 49, Destination IP: 3, Destination Port: 4, Number of Packets: 78

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10085_31, Duration: 0.056, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 192.168.220.2, Duration: 0.019, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10088_9, Duration: 14.502, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 9, Number of Packets: 160

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10296_228, Duration: 0.93, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 192.168.220.11, Duration: 0.107, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 101

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10203_1, Duration: 0.114, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 11865_68, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10296_238, Duration: 8.434, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 18, Number of Packets: 308

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10296_225, Duration: 0.265, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10296_227, Duration: 0.116, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 192.168.220.16, Duration: 1.749, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 114

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 192.168.220.15, Duration: 0.124, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 112

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 0.0.0.0, Duration: 0.006, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10296_230, Duration: 2.564, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 84

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10022_249, Duration: 3.237, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 88

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10098_125, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10199_2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 192.168.200.8, Duration: 41.097, Protocol: 2, Source Port: 102, Destination IP: 12, Destination Port: 9, Number of Packets: 813

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10063_33, Duration: 17.043, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 13, Number of Packets: 433

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10001_8, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 8, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 192.168.100.5, Duration: 12.608, Protocol: 2, Source Port: 3, Destination IP: 18, Destination Port: 20, Number of Packets: 768

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 192.168.220.14, Duration: 8.473, Protocol: 3, Source Port: 38, Destination IP: 6, Destination Port: 7, Number of Packets: 334

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 192.168.200.5, Duration: 0.401, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 111

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10010_37, Duration: 0.118, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10100_133, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10084_230, Duration: 2.325, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 4, Number of Packets: 35

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: EXT_SERVER, Duration: 9.309, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 157, Number of Packets: 1270

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10499_34, Duration: 0.357, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10103_126, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10087_41, Duration: 0.429, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 12829_116, Duration: 0.127, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 192.168.220.3, Duration: 0.001, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 192.168.200.9, Duration: 32.112, Protocol: 3, Source Port: 95, Destination IP: 11, Destination Port: 9, Number of Packets: 770

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 11744_152, Duration: 0.026, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10108_7, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10082_49, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10043_254, Duration: 2.099, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 50, Number of Packets: 200

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10920_178, Duration: 0.037, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10122_64, Duration: 0.372, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10875_6, Duration: 0.7, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10081_164, Duration: 3.024, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 4, Number of Packets: 123

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 11930_132, Duration: 0.742, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10109_187, Duration: 0.722, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 2, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10077_154, Duration: 0.762, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 51

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10194_100, Duration: 0.185, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 46

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 192.168.220.13, Duration: 2.099, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 115

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 192.168.220.9, Duration: 0.148, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 112

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 192.168.220.8, Duration: 0.142, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 113

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10162_129, Duration: 7.907, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 321

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 192.168.220.12, Duration: 1.259, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 104

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 192.168.210.5, Duration: 20.087, Protocol: 3, Source Port: 48, Destination IP: 10, Destination Port: 8, Number of Packets: 441

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 192.168.220.4, Duration: 0.133, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 113

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 192.168.220.6, Duration: 2.895, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 110

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 192.168.200.4, Duration: 0.132, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 104

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 192.168.220.10, Duration: 1.076, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 102

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10064_217, Duration: 0.464, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 192.168.200.3, Duration: 0.0, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 192.168.220.5, Duration: 0.125, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 106

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10296_226, Duration: 4.552, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 66

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10086_192, Duration: 11.772, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 16, Number of Packets: 152

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 14115_253, Duration: 0.502, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10076_237, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10060_27, Duration: 0.03, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10066_125, Duration: 3.971, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10206_7, Duration: 0.078, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 14193_169, Duration: 0.125, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 11424_121, Duration: 0.734, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10074_39, Duration: 0.159, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 4, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10072_39, Duration: 0.323, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10072_43, Duration: 0.262, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10139_39, Duration: 0.248, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10139_42, Duration: 0.616, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10070_48, Duration: 0.213, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 192.168.210.4, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10004_7, Duration: 1.681, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 6, Number of Packets: 92

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10276_216, Duration: 0.031, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10073_65, Duration: 0.066, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 11285_234, Duration: 0.053, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10511_218, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10107_215, Duration: 1.57, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10918_114, Duration: 1.614, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10107_199, Duration: 0.082, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10082_105, Duration: 2.638, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10057_29, Duration: 0.741, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 192.168.100.3, Duration: 0.001, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 12797_54, Duration: 0.082, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 13201_231, Duration: 0.625, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10143_80, Duration: 0.031, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10004_36, Duration: 1.259, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10056_48, Duration: 2.032, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 14193_154, Duration: 0.025, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10902_202, Duration: 3.049, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 6, Number of Packets: 75

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10213_54, Duration: 0.153, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10071_22, Duration: 0.029, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10468_98, Duration: 0.1, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10022_68, Duration: 0.115, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10072_47, Duration: 0.279, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10104_157, Duration: 2.418, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10073_64, Duration: 0.062, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10296_234, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10158_155, Duration: 6.868, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10151_143, Duration: 0.884, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10091_132, Duration: 0.06, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10169_169, Duration: 0.178, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10096_86, Duration: 0.371, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 11718_97, Duration: 0.99, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10074_40, Duration: 0.074, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10139_43, Duration: 0.467, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10135_187, Duration: 0.263, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10227_79, Duration: 0.026, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 11065_164, Duration: 2.18, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 14241_206, Duration: 0.844, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 11027_34, Duration: 0.099, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 11744_144, Duration: 0.339, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 59

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10072_42, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10394_149, Duration: 0.113, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10018_62, Duration: 1.135, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 12547_248, Duration: 0.868, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10022_204, Duration: 0.92, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 85

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10018_63, Duration: 2.628, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 193

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 13266_230, Duration: 0.402, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 11323_107, Duration: 0.565, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 192.168.210.3, Duration: 0.086, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10075_226, Duration: 0.533, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 192.168.200.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 12741_121, Duration: 0.553, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10437_63, Duration: 0.484, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 11744_163, Duration: 0.259, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 192.168.210.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T19:02:48.122000, End Frame: 2017-03-18T20:02:48.122000, Source IP: 10278_34, Duration: 0.538, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: EXT_SERVER, Duration: 9.091, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 158, Number of Packets: 1275

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: 192.168.200.9, Duration: 31.697, Protocol: 2, Source Port: 92, Destination IP: 8, Destination Port: 6, Number of Packets: 756

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: 192.168.200.8, Duration: 38.77, Protocol: 2, Source Port: 94, Destination IP: 6, Destination Port: 5, Number of Packets: 781

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: 192.168.100.5, Duration: 5.47, Protocol: 2, Source Port: 3, Destination IP: 18, Destination Port: 19, Number of Packets: 665

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: 192.168.220.11, Duration: 0.113, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 98

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: 192.168.200.4, Duration: 0.115, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 98

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: 192.168.200.5, Duration: 0.095, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 99

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: 192.168.220.14, Duration: 0.111, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 97

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: 192.168.220.15, Duration: 0.126, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 102

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: 192.168.220.16, Duration: 1.255, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 97

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: 192.168.220.7, Duration: 0.103, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 97

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: 10296_238, Duration: 5.514, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 12, Number of Packets: 195

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: 192.168.210.5, Duration: 15.492, Protocol: 2, Source Port: 32, Destination IP: 5, Destination Port: 3, Number of Packets: 332

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: 192.168.220.13, Duration: 3.197, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 97

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: 192.168.220.9, Duration: 0.11, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 103

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: 192.168.220.8, Duration: 0.56, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 105

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: 192.168.220.12, Duration: 0.122, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 102

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: 192.168.220.4, Duration: 0.899, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 105

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: 192.168.220.10, Duration: 0.126, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 99

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: 192.168.220.5, Duration: 0.121, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 99

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: 192.168.200.3, Duration: 0.0, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: 192.168.210.4, Duration: 0.104, Protocol: 3, Source Port: 6, Destination IP: 6, Destination Port: 6, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: DNS, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 76, Number of Packets: 76

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: 10162_129, Duration: 6.163, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 244

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: 192.168.100.3, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: 192.168.220.6, Duration: 0.116, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 97

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: 11046_136, Duration: 0.181, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: 10199_2, Duration: 0.333, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: 192.168.100.4, Duration: 12.982, Protocol: 2, Source Port: 54, Destination IP: 3, Destination Port: 4, Number of Packets: 81

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: 192.168.210.3, Duration: 0.052, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: 192.168.220.3, Duration: 0.053, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: 10068_2, Duration: 0.744, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: 192.168.210.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: 10793_130, Duration: 0.089, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: 14241_206, Duration: 0.421, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T20:02:48.610000, End Frame: 2017-03-18T21:02:48.610000, Source IP: 10075_226, Duration: 0.526, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 192.168.100.5, Duration: 5.113, Protocol: 2, Source Port: 3, Destination IP: 18, Destination Port: 19, Number of Packets: 667

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 192.168.220.5, Duration: 0.112, Protocol: 2, Source Port: 5, Destination IP: 4, Destination Port: 5, Number of Packets: 104

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 192.168.220.16, Duration: 0.122, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 100

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 10162_129, Duration: 6.688, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 296

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 192.168.210.5, Duration: 18.021, Protocol: 2, Source Port: 37, Destination IP: 6, Destination Port: 4, Number of Packets: 392

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 192.168.220.15, Duration: 5.219, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 105

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 192.168.200.8, Duration: 39.916, Protocol: 2, Source Port: 101, Destination IP: 11, Destination Port: 8, Number of Packets: 802

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: EXT_SERVER, Duration: 9.383, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 156, Number of Packets: 1268

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 192.168.100.4, Duration: 15.98, Protocol: 2, Source Port: 66, Destination IP: 3, Destination Port: 4, Number of Packets: 97

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 192.168.220.11, Duration: 0.108, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 98

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 192.168.200.5, Duration: 0.109, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 100

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 192.168.220.9, Duration: 0.121, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 104

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 192.168.220.14, Duration: 0.106, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 101

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 192.168.200.9, Duration: 31.585, Protocol: 2, Source Port: 91, Destination IP: 6, Destination Port: 5, Number of Packets: 755

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 192.168.220.7, Duration: 0.111, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 101

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 192.168.220.13, Duration: 0.102, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 97

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 192.168.220.8, Duration: 0.104, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 97

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 192.168.220.12, Duration: 0.127, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 104

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 192.168.220.4, Duration: 0.103, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 98

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 192.168.220.6, Duration: 0.119, Protocol: 2, Source Port: 5, Destination IP: 4, Destination Port: 5, Number of Packets: 97

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 192.168.200.4, Duration: 0.115, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 98

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 192.168.210.4, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 192.168.200.3, Duration: 0.0, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 192.168.100.3, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 192.168.220.10, Duration: 0.107, Protocol: 2, Source Port: 5, Destination IP: 4, Destination Port: 5, Number of Packets: 102

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: DNS, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 92, Number of Packets: 92

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 10296_238, Duration: 4.932, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 13, Number of Packets: 223

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 10499_34, Duration: 0.101, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 192.168.220.3, Duration: 0.003, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 192.168.210.3, Duration: 0.052, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 14241_206, Duration: 2.556, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 32

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 192.168.100.6, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 192.168.100.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 10199_162, Duration: 0.118, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 192.168.220.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 192.168.200.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 10050_186, Duration: 0.546, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 11744_137, Duration: 0.275, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 10437_63, Duration: 0.029, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 10068_66, Duration: 0.317, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T21:02:51.877000, End Frame: 2017-03-18T22:02:51.877000, Source IP: 10278_66, Duration: 0.55, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T22:02:52.072000, End Frame: 2017-03-18T23:02:52.072000, Source IP: 192.168.220.10, Duration: 0.123, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 109

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T22:02:52.072000, End Frame: 2017-03-18T23:02:52.072000, Source IP: 192.168.220.6, Duration: 0.126, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 109

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T22:02:52.072000, End Frame: 2017-03-18T23:02:52.072000, Source IP: 192.168.220.11, Duration: 0.123, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 107

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T22:02:52.072000, End Frame: 2017-03-18T23:02:52.072000, Source IP: EXT_SERVER, Duration: 9.141, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 157, Number of Packets: 1271

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T22:02:52.072000, End Frame: 2017-03-18T23:02:52.072000, Source IP: 192.168.200.8, Duration: 39.802, Protocol: 2, Source Port: 95, Destination IP: 7, Destination Port: 5, Number of Packets: 801

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T22:02:52.072000, End Frame: 2017-03-18T23:02:52.072000, Source IP: 192.168.200.4, Duration: 0.125, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 109

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T22:02:52.072000, End Frame: 2017-03-18T23:02:52.072000, Source IP: 192.168.100.5, Duration: 1.976, Protocol: 2, Source Port: 3, Destination IP: 18, Destination Port: 19, Number of Packets: 715

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T22:02:52.072000, End Frame: 2017-03-18T23:02:52.072000, Source IP: 192.168.220.5, Duration: 0.137, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 111

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T22:02:52.072000, End Frame: 2017-03-18T23:02:52.072000, Source IP: 192.168.220.16, Duration: 0.146, Protocol: 2, Source Port: 5, Destination IP: 4, Destination Port: 5, Number of Packets: 112

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T22:02:52.072000, End Frame: 2017-03-18T23:02:52.072000, Source IP: 192.168.220.15, Duration: 0.127, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 105

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T22:02:52.072000, End Frame: 2017-03-18T23:02:52.072000, Source IP: 10162_129, Duration: 7.439, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 305

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T22:02:52.072000, End Frame: 2017-03-18T23:02:52.072000, Source IP: 192.168.210.5, Duration: 17.758, Protocol: 2, Source Port: 43, Destination IP: 4, Destination Port: 3, Number of Packets: 437

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T22:02:52.072000, End Frame: 2017-03-18T23:02:52.072000, Source IP: 192.168.200.9, Duration: 31.505, Protocol: 2, Source Port: 92, Destination IP: 7, Destination Port: 6, Number of Packets: 767

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T22:02:52.072000, End Frame: 2017-03-18T23:02:52.072000, Source IP: 10296_238, Duration: 4.057, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 17, Number of Packets: 275

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T22:02:52.072000, End Frame: 2017-03-18T23:02:52.072000, Source IP: 192.168.200.5, Duration: 0.136, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 110

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T22:02:52.072000, End Frame: 2017-03-18T23:02:52.072000, Source IP: 192.168.220.14, Duration: 0.135, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 110

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T22:02:52.072000, End Frame: 2017-03-18T23:02:52.072000, Source IP: 192.168.220.9, Duration: 2.08, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 108

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T22:02:52.072000, End Frame: 2017-03-18T23:02:52.072000, Source IP: 192.168.220.7, Duration: 0.145, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 110

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T22:02:52.072000, End Frame: 2017-03-18T23:02:52.072000, Source IP: 192.168.220.13, Duration: 0.103, Protocol: 2, Source Port: 5, Destination IP: 4, Destination Port: 5, Number of Packets: 101

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T22:02:52.072000, End Frame: 2017-03-18T23:02:52.072000, Source IP: 192.168.220.8, Duration: 0.118, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 108

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T22:02:52.072000, End Frame: 2017-03-18T23:02:52.072000, Source IP: 192.168.220.12, Duration: 0.152, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 111

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T22:02:52.072000, End Frame: 2017-03-18T23:02:52.072000, Source IP: 192.168.220.4, Duration: 0.133, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 107

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T22:02:52.072000, End Frame: 2017-03-18T23:02:52.072000, Source IP: 192.168.210.4, Duration: 0.0, Protocol: 2, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T22:02:52.072000, End Frame: 2017-03-18T23:02:52.072000, Source IP: 192.168.100.4, Duration: 22.976, Protocol: 2, Source Port: 94, Destination IP: 3, Destination Port: 4, Number of Packets: 132

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T22:02:52.072000, End Frame: 2017-03-18T23:02:52.072000, Source IP: DNS, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 115, Number of Packets: 115

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T22:02:52.072000, End Frame: 2017-03-18T23:02:52.072000, Source IP: 192.168.200.3, Duration: 0.0, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T22:02:52.072000, End Frame: 2017-03-18T23:02:52.072000, Source IP: 192.168.100.3, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T22:02:52.072000, End Frame: 2017-03-18T23:02:52.072000, Source IP: 10527_2, Duration: 0.323, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T22:02:52.072000, End Frame: 2017-03-18T23:02:52.072000, Source IP: 192.168.210.3, Duration: 0.082, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T22:02:52.072000, End Frame: 2017-03-18T23:02:52.072000, Source IP: 192.168.220.3, Duration: 0.121, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T22:02:52.072000, End Frame: 2017-03-18T23:02:52.072000, Source IP: 192.168.220.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T22:02:52.072000, End Frame: 2017-03-18T23:02:52.072000, Source IP: 10793_162, Duration: 0.612, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T22:02:52.072000, End Frame: 2017-03-18T23:02:52.072000, Source IP: 10193_2, Duration: 0.108, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T22:02:52.072000, End Frame: 2017-03-18T23:02:52.072000, Source IP: 14241_206, Duration: 0.822, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T22:02:52.072000, End Frame: 2017-03-18T23:02:52.072000, Source IP: 10068_98, Duration: 0.549, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T23:02:52.134000, End Frame: 2017-03-19T00:02:52.134000, Source IP: 192.168.100.5, Duration: 0.0, Protocol: 2, Source Port: 3, Destination IP: 18, Destination Port: 19, Number of Packets: 658

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T23:02:52.134000, End Frame: 2017-03-19T00:02:52.134000, Source IP: 192.168.220.4, Duration: 0.143, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 102

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T23:02:52.134000, End Frame: 2017-03-19T00:02:52.134000, Source IP: 10162_129, Duration: 7.744, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 314

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T23:02:52.134000, End Frame: 2017-03-19T00:02:52.134000, Source IP: 192.168.210.5, Duration: 19.641, Protocol: 2, Source Port: 35, Destination IP: 6, Destination Port: 4, Number of Packets: 378

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T23:02:52.134000, End Frame: 2017-03-19T00:02:52.134000, Source IP: 192.168.220.6, Duration: 0.114, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 100

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T23:02:52.134000, End Frame: 2017-03-19T00:02:52.134000, Source IP: 192.168.200.4, Duration: 0.137, Protocol: 2, Source Port: 5, Destination IP: 4, Destination Port: 5, Number of Packets: 102

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T23:02:52.134000, End Frame: 2017-03-19T00:02:52.134000, Source IP: 192.168.220.11, Duration: 0.126, Protocol: 2, Source Port: 5, Destination IP: 4, Destination Port: 5, Number of Packets: 101

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T23:02:52.134000, End Frame: 2017-03-19T00:02:52.134000, Source IP: 192.168.220.10, Duration: 0.129, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 103

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T23:02:52.134000, End Frame: 2017-03-19T00:02:52.134000, Source IP: EXT_SERVER, Duration: 9.152, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 157, Number of Packets: 1269

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T23:02:52.134000, End Frame: 2017-03-19T00:02:52.134000, Source IP: 192.168.200.9, Duration: 31.338, Protocol: 2, Source Port: 91, Destination IP: 6, Destination Port: 5, Number of Packets: 752

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T23:02:52.134000, End Frame: 2017-03-19T00:02:52.134000, Source IP: 192.168.220.5, Duration: 0.13, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 102

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T23:02:52.134000, End Frame: 2017-03-19T00:02:52.134000, Source IP: 192.168.220.16, Duration: 0.122, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 103

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T23:02:52.134000, End Frame: 2017-03-19T00:02:52.134000, Source IP: 192.168.220.15, Duration: 0.11, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 99

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T23:02:52.134000, End Frame: 2017-03-19T00:02:52.134000, Source IP: DNS, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 96, Number of Packets: 96

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T23:02:52.134000, End Frame: 2017-03-19T00:02:52.134000, Source IP: 10296_238, Duration: 4.749, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 12, Number of Packets: 218

Output: normal