Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T20:02:03.517000, End Frame: 2017-03-17T21:02:03.517000, Source IP: 192.168.210.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T20:02:03.517000, End Frame: 2017-03-17T21:02:03.517000, Source IP: 10199_2, Duration: 0.609, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 10296_238, Duration: 6.866, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 13, Number of Packets: 221

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 192.168.210.5, Duration: 17.466, Protocol: 3, Source Port: 37, Destination IP: 8, Destination Port: 7, Number of Packets: 371

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 192.168.200.9, Duration: 30.996, Protocol: 3, Source Port: 95, Destination IP: 10, Destination Port: 9, Number of Packets: 761

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: EXT_SERVER, Duration: 10.753, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 157, Number of Packets: 1259

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 192.168.100.5, Duration: 4.744, Protocol: 2, Source Port: 3, Destination IP: 18, Destination Port: 19, Number of Packets: 699

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 192.168.220.11, Duration: 0.138, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 107

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 192.168.200.5, Duration: 0.135, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 105

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 192.168.200.8, Duration: 42.812, Protocol: 3, Source Port: 105, Destination IP: 15, Destination Port: 11, Number of Packets: 815

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 192.168.220.14, Duration: 0.127, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 106

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 192.168.220.15, Duration: 0.133, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 107

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 192.168.220.9, Duration: 0.122, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 102

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 192.168.220.8, Duration: 0.115, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 103

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 192.168.220.12, Duration: 0.108, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 105

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: DNS, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 97, Number of Packets: 98

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 192.168.220.4, Duration: 0.131, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 105

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 192.168.100.4, Duration: 17.998, Protocol: 2, Source Port: 72, Destination IP: 3, Destination Port: 4, Number of Packets: 107

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 192.168.220.6, Duration: 0.133, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 108

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 192.168.200.4, Duration: 0.135, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 108

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 192.168.220.10, Duration: 0.129, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 108

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 192.168.220.7, Duration: 4.864, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 112

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 192.168.220.5, Duration: 0.155, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 108

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 192.168.220.16, Duration: 0.11, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 104

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 10162_129, Duration: 7.364, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 329

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 192.168.210.3, Duration: 0.057, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 192.168.210.4, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 192.168.220.13, Duration: 0.123, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 102

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 10199_2, Duration: 0.323, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 192.168.200.3, Duration: 0.001, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 192.168.100.3, Duration: 0.0, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 192.168.220.3, Duration: 0.001, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 192.168.210.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 192.168.100.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 192.168.200.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 12787_221, Duration: 0.549, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 10587_162, Duration: 0.527, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 10012_33, Duration: 0.271, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 10437_63, Duration: 0.233, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 10193_2, Duration: 0.11, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T21:02:04.789000, End Frame: 2017-03-17T22:02:04.789000, Source IP: 10278_98, Duration: 0.575, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 192.168.100.5, Duration: 5.617, Protocol: 2, Source Port: 4, Destination IP: 19, Destination Port: 20, Number of Packets: 669

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 192.168.200.4, Duration: 2.609, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 105

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 10296_238, Duration: 9.841, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 14, Number of Packets: 248

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 192.168.210.5, Duration: 17.998, Protocol: 2, Source Port: 34, Destination IP: 5, Destination Port: 3, Number of Packets: 383

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 192.168.220.10, Duration: 0.124, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 104

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 192.168.220.7, Duration: 0.124, Protocol: 2, Source Port: 5, Destination IP: 4, Destination Port: 5, Number of Packets: 103

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: EXT_SERVER, Duration: 8.874, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 157, Number of Packets: 1259

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 192.168.200.9, Duration: 31.267, Protocol: 2, Source Port: 92, Destination IP: 7, Destination Port: 6, Number of Packets: 766

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 192.168.220.5, Duration: 2.515, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 107

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 192.168.220.16, Duration: 0.116, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 104

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 192.168.220.9, Duration: 0.108, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 100

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 192.168.220.6, Duration: 0.128, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 102

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 192.168.220.15, Duration: 0.127, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 105

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 192.168.200.8, Duration: 41.152, Protocol: 2, Source Port: 103, Destination IP: 10, Destination Port: 7, Number of Packets: 809

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 192.168.220.11, Duration: 0.88, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 104

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 192.168.200.5, Duration: 0.107, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 99

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: DNS, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 91, Number of Packets: 91

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 192.168.100.4, Duration: 15.969, Protocol: 2, Source Port: 66, Destination IP: 3, Destination Port: 4, Number of Packets: 97

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 192.168.220.14, Duration: 0.136, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 102

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 192.168.220.8, Duration: 0.115, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 101

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 192.168.220.12, Duration: 0.136, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 104

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 192.168.220.4, Duration: 0.1, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 101

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 10162_129, Duration: 6.461, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 282

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 192.168.210.3, Duration: 0.064, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 192.168.210.4, Duration: 0.105, Protocol: 3, Source Port: 5, Destination IP: 5, Destination Port: 5, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 192.168.220.13, Duration: 0.133, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 102

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 10499_34, Duration: 0.33, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 192.168.200.3, Duration: 0.002, Protocol: 1, Source Port: 3, Destination IP: 3, Destination Port: 3, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 192.168.100.3, Duration: 0.002, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 192.168.220.3, Duration: 0.001, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 192.168.100.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 10587_194, Duration: 0.912, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 192.168.220.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 10296_226, Duration: 0.111, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 192.168.200.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 10921_142, Duration: 0.395, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 192.168.210.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 12741_123, Duration: 0.455, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 10012_11, Duration: 0.241, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 10437_63, Duration: 1.239, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T22:02:04.971000, End Frame: 2017-03-17T23:02:04.971000, Source IP: 10793_162, Duration: 0.728, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T23:02:06.093000, End Frame: 2017-03-18T00:02:06.093000, Source IP: 10296_238, Duration: 3.714, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 14, Number of Packets: 212

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T23:02:06.093000, End Frame: 2017-03-18T00:02:06.093000, Source IP: EXT_SERVER, Duration: 9.358, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 156, Number of Packets: 1263

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T23:02:06.093000, End Frame: 2017-03-18T00:02:06.093000, Source IP: 192.168.200.9, Duration: 31.896, Protocol: 2, Source Port: 91, Destination IP: 6, Destination Port: 5, Number of Packets: 757

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T23:02:06.093000, End Frame: 2017-03-18T00:02:06.093000, Source IP: 192.168.100.5, Duration: 10.836, Protocol: 2, Source Port: 3, Destination IP: 18, Destination Port: 19, Number of Packets: 688

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T23:02:06.093000, End Frame: 2017-03-18T00:02:06.093000, Source IP: 192.168.220.6, Duration: 3.963, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 109

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T23:02:06.093000, End Frame: 2017-03-18T00:02:06.093000, Source IP: 192.168.220.14, Duration: 0.136, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 105

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T23:02:06.093000, End Frame: 2017-03-18T00:02:06.093000, Source IP: 192.168.200.4, Duration: 0.107, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 98

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T23:02:06.093000, End Frame: 2017-03-18T00:02:06.093000, Source IP: 192.168.220.10, Duration: 1.867, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 106

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T23:02:06.093000, End Frame: 2017-03-18T00:02:06.093000, Source IP: 192.168.200.8, Duration: 39.765, Protocol: 2, Source Port: 100, Destination IP: 10, Destination Port: 8, Number of Packets: 801

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T23:02:06.093000, End Frame: 2017-03-18T00:02:06.093000, Source IP: 192.168.220.7, Duration: 0.127, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 106

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T23:02:06.093000, End Frame: 2017-03-18T00:02:06.093000, Source IP: 192.168.220.5, Duration: 0.127, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 102

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T23:02:06.093000, End Frame: 2017-03-18T00:02:06.093000, Source IP: 192.168.220.16, Duration: 0.125, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 106

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T23:02:06.093000, End Frame: 2017-03-18T00:02:06.093000, Source IP: 192.168.220.9, Duration: 0.146, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 105

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T23:02:06.093000, End Frame: 2017-03-18T00:02:06.093000, Source IP: 192.168.220.11, Duration: 2.295, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 101

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T23:02:06.093000, End Frame: 2017-03-18T00:02:06.093000, Source IP: 192.168.200.5, Duration: 0.122, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 105

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T23:02:06.093000, End Frame: 2017-03-18T00:02:06.093000, Source IP: DNS, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 82, Number of Packets: 82

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T23:02:06.093000, End Frame: 2017-03-18T00:02:06.093000, Source IP: 192.168.100.4, Duration: 14.005, Protocol: 2, Source Port: 58, Destination IP: 3, Destination Port: 4, Number of Packets: 87

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T23:02:06.093000, End Frame: 2017-03-18T00:02:06.093000, Source IP: 192.168.220.13, Duration: 0.147, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 106

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T23:02:06.093000, End Frame: 2017-03-18T00:02:06.093000, Source IP: 192.168.220.8, Duration: 0.12, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 103

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T23:02:06.093000, End Frame: 2017-03-18T00:02:06.093000, Source IP: 192.168.220.15, Duration: 0.1, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 104

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T23:02:06.093000, End Frame: 2017-03-18T00:02:06.093000, Source IP: 192.168.220.12, Duration: 3.176, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 105

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T23:02:06.093000, End Frame: 2017-03-18T00:02:06.093000, Source IP: 192.168.220.4, Duration: 0.109, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 103

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T23:02:06.093000, End Frame: 2017-03-18T00:02:06.093000, Source IP: 10162_129, Duration: 6.54, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 264

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T23:02:06.093000, End Frame: 2017-03-18T00:02:06.093000, Source IP: 192.168.210.5, Duration: 13.742, Protocol: 2, Source Port: 33, Destination IP: 5, Destination Port: 4, Number of Packets: 325

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T23:02:06.093000, End Frame: 2017-03-18T00:02:06.093000, Source IP: 192.168.210.4, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T23:02:06.093000, End Frame: 2017-03-18T00:02:06.093000, Source IP: 192.168.210.3, Duration: 0.071, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T23:02:06.093000, End Frame: 2017-03-18T00:02:06.093000, Source IP: 10075_194, Duration: 0.332, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T23:02:06.093000, End Frame: 2017-03-18T00:02:06.093000, Source IP: 192.168.200.3, Duration: 0.0, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T23:02:06.093000, End Frame: 2017-03-18T00:02:06.093000, Source IP: 192.168.100.3, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T23:02:06.093000, End Frame: 2017-03-18T00:02:06.093000, Source IP: 192.168.220.3, Duration: 0.002, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T23:02:06.093000, End Frame: 2017-03-18T00:02:06.093000, Source IP: 10068_66, Duration: 2.259, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 64

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T23:02:06.093000, End Frame: 2017-03-18T00:02:06.093000, Source IP: 192.168.200.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T23:02:06.093000, End Frame: 2017-03-18T00:02:06.093000, Source IP: 10011_183, Duration: 0.372, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T23:02:06.093000, End Frame: 2017-03-18T00:02:06.093000, Source IP: 10012_33, Duration: 0.239, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T23:02:06.093000, End Frame: 2017-03-18T00:02:06.093000, Source IP: 10437_63, Duration: 0.017, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 192.168.100.5, Duration: 11.387, Protocol: 2, Source Port: 9, Destination IP: 22, Destination Port: 21, Number of Packets: 740

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 192.168.220.12, Duration: 0.116, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 103

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 192.168.220.4, Duration: 0.137, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 108

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: EXT_SERVER, Duration: 8.841, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 156, Number of Packets: 1262

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 192.168.200.8, Duration: 39.255, Protocol: 2, Source Port: 97, Destination IP: 8, Destination Port: 6, Number of Packets: 791

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 10012_33, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 192.168.220.6, Duration: 0.1, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 101

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 192.168.220.10, Duration: 0.101, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 99

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 192.168.220.14, Duration: 0.132, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 107

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 192.168.200.4, Duration: 0.121, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 103

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 192.168.220.7, Duration: 0.138, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 108

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 192.168.220.5, Duration: 0.145, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 106

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 192.168.220.16, Duration: 3.155, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 110

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 192.168.220.15, Duration: 0.128, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 108

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 10162_129, Duration: 6.453, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 241

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 192.168.220.9, Duration: 0.137, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 108

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 192.168.200.9, Duration: 32.858, Protocol: 2, Source Port: 100, Destination IP: 11, Destination Port: 8, Number of Packets: 785

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 192.168.210.5, Duration: 25.051, Protocol: 2, Source Port: 33, Destination IP: 8, Destination Port: 3, Number of Packets: 375

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: DNS, Duration: 0.067, Protocol: 1, Source Port: 1, Destination IP: 9, Destination Port: 105, Number of Packets: 123

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 192.168.100.4, Duration: 14.395, Protocol: 2, Source Port: 64, Destination IP: 6, Destination Port: 5, Number of Packets: 275

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 192.168.220.11, Duration: 0.139, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 106

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 192.168.200.5, Duration: 5.691, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 110

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 192.168.220.13, Duration: 2.581, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 109

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 192.168.220.8, Duration: 0.125, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 108

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 10296_238, Duration: 5.773, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 10, Number of Packets: 183

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 192.168.210.4, Duration: 0.0, Protocol: 2, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 192.168.210.3, Duration: 0.448, Protocol: 2, Source Port: 8, Destination IP: 6, Destination Port: 4, Number of Packets: 110

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 10199_2, Duration: 0.1, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 192.168.200.3, Duration: 0.353, Protocol: 2, Source Port: 8, Destination IP: 6, Destination Port: 4, Number of Packets: 201

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 192.168.100.3, Duration: 1.842, Protocol: 2, Source Port: 7, Destination IP: 5, Destination Port: 3, Number of Packets: 554

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 192.168.220.3, Duration: 7.276, Protocol: 2, Source Port: 8, Destination IP: 6, Destination Port: 4, Number of Packets: 625

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 11046_139, Duration: 0.578, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 10296_226, Duration: 0.432, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 11046_100, Duration: 0.124, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 10068_66, Duration: 0.076, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 11046_138, Duration: 0.124, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 10921_142, Duration: 3.544, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 192.168.200.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 12826_190, Duration: 0.352, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 10437_63, Duration: 0.056, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 10012_11, Duration: 0.285, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 10278_66, Duration: 0.609, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 10021_4, Duration: 0.258, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 12613_89, Duration: 0.614, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 327

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 12612_32, Duration: 0.466, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 354

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 12807_233, Duration: 0.117, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 10022_204, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 10018_62, Duration: 0.109, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 12612_250, Duration: 0.146, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 65

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 10028_204, Duration: 0.012, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 10025_202, Duration: 3.57, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 10019_14, Duration: 0.799, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 10027_204, Duration: 3.164, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 98

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T00:02:07.252000, End Frame: 2017-03-18T01:02:07.252000, Source IP: 10026_204, Duration: 0.301, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 78

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: EXT_SERVER, Duration: 8.878, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 157, Number of Packets: 1272

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 192.168.200.8, Duration: 40.685, Protocol: 2, Source Port: 107, Destination IP: 12, Destination Port: 8, Number of Packets: 816

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 192.168.200.4, Duration: 0.117, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 104

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 192.168.100.5, Duration: 11.28, Protocol: 2, Source Port: 3, Destination IP: 18, Destination Port: 19, Number of Packets: 685

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 192.168.220.4, Duration: 1.766, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 105

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 192.168.220.10, Duration: 0.108, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 101

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 192.168.200.9, Duration: 31.515, Protocol: 2, Source Port: 91, Destination IP: 6, Destination Port: 5, Number of Packets: 762

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 192.168.220.14, Duration: 4.666, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 109

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 192.168.220.7, Duration: 0.136, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 106

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 192.168.220.5, Duration: 0.13, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 103

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 192.168.220.16, Duration: 0.109, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 104

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 192.168.220.15, Duration: 4.87, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 111

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 192.168.220.6, Duration: 0.121, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 99

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 192.168.220.9, Duration: 0.129, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 104

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 192.168.220.11, Duration: 0.115, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 103

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 192.168.200.5, Duration: 0.108, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 100

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 192.168.220.13, Duration: 0.094, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 97

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 192.168.220.8, Duration: 2.407, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 104

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 192.168.220.12, Duration: 0.115, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 99

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 192.168.210.4, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 10162_129, Duration: 6.718, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 284

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 192.168.210.5, Duration: 17.034, Protocol: 2, Source Port: 33, Destination IP: 5, Destination Port: 4, Number of Packets: 362

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 10296_238, Duration: 4.607, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 13, Number of Packets: 232

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: DNS, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 82, Number of Packets: 82

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 192.168.210.3, Duration: 0.098, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 192.168.100.4, Duration: 11.978, Protocol: 2, Source Port: 50, Destination IP: 3, Destination Port: 4, Number of Packets: 76

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 10199_162, Duration: 0.537, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 192.168.200.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 12826_190, Duration: 0.363, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 10012_33, Duration: 0.239, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 10437_63, Duration: 0.725, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 192.168.200.3, Duration: 0.0, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 192.168.220.3, Duration: 0.0, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 192.168.100.3, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 12741_189, Duration: 0.512, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 10793_162, Duration: 0.529, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 10499_34, Duration: 0.078, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T01:02:07.985000, End Frame: 2017-03-18T02:02:07.985000, Source IP: 10587_194, Duration: 0.547, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 192.168.100.5, Duration: 3.557, Protocol: 2, Source Port: 3, Destination IP: 18, Destination Port: 19, Number of Packets: 690

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 192.168.200.5, Duration: 0.106, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 102

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 192.168.100.4, Duration: 11.994, Protocol: 2, Source Port: 50, Destination IP: 3, Destination Port: 4, Number of Packets: 77

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 192.168.220.9, Duration: 3.675, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 105

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 192.168.220.8, Duration: 0.112, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 98

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 192.168.200.9, Duration: 35.006, Protocol: 2, Source Port: 102, Destination IP: 12, Destination Port: 8, Number of Packets: 808

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: EXT_SERVER, Duration: 9.189, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 156, Number of Packets: 1268

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 192.168.220.12, Duration: 0.127, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 104

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 192.168.200.8, Duration: 38.101, Protocol: 2, Source Port: 92, Destination IP: 6, Destination Port: 5, Number of Packets: 790

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 192.168.220.4, Duration: 0.114, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 97

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 192.168.220.6, Duration: 0.118, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 104

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: DNS, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 93, Number of Packets: 93

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 192.168.220.14, Duration: 0.132, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 107

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 192.168.220.15, Duration: 0.105, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 99

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 192.168.200.4, Duration: 0.117, Protocol: 2, Source Port: 5, Destination IP: 4, Destination Port: 5, Number of Packets: 107

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 192.168.210.4, Duration: 20.808, Protocol: 3, Source Port: 17, Destination IP: 11, Destination Port: 10, Number of Packets: 793

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 192.168.220.16, Duration: 0.121, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 105

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 192.168.220.10, Duration: 0.123, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 108

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 192.168.220.7, Duration: 0.119, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 108

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 192.168.220.5, Duration: 0.139, Protocol: 2, Source Port: 5, Destination IP: 4, Destination Port: 5, Number of Packets: 109

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 10162_129, Duration: 7.044, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 301

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 192.168.210.5, Duration: 44.811, Protocol: 3, Source Port: 52, Destination IP: 13, Destination Port: 9, Number of Packets: 960

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 192.168.220.11, Duration: 0.144, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 106

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 192.168.220.13, Duration: 0.102, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 98

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 192.168.210.3, Duration: 0.097, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 10296_238, Duration: 4.899, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 14, Number of Packets: 241

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 10193_2, Duration: 0.103, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 192.168.220.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 192.168.200.3, Duration: 0.0, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 192.168.220.3, Duration: 0.001, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 192.168.100.3, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 10068_34, Duration: 0.545, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 192.168.210.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 10012_24, Duration: 1.879, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 10011_183, Duration: 2.438, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 10012_8, Duration: 1.684, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 427

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 10012_11, Duration: 0.292, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 10278_98, Duration: 0.115, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 192.168.100.6, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 192.168.100.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 192.168.200.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 11500_157, Duration: 3.255, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 10437_63, Duration: 0.073, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 10793_162, Duration: 0.573, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 10016_50, Duration: 0.339, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 390

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T02:02:08.108000, End Frame: 2017-03-18T03:02:08.108000, Source IP: 10012_33, Duration: 0.015, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 192.168.220.11, Duration: 0.134, Protocol: 2, Source Port: 5, Destination IP: 4, Destination Port: 5, Number of Packets: 107

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 192.168.200.5, Duration: 0.13, Protocol: 2, Source Port: 5, Destination IP: 4, Destination Port: 5, Number of Packets: 107

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 192.168.100.5, Duration: 2.356, Protocol: 2, Source Port: 3, Destination IP: 18, Destination Port: 19, Number of Packets: 678

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: EXT_SERVER, Duration: 9.255, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 156, Number of Packets: 1268

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 192.168.200.9, Duration: 38.866, Protocol: 2, Source Port: 103, Destination IP: 13, Destination Port: 7, Number of Packets: 879

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 192.168.220.9, Duration: 0.093, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 99

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 192.168.220.8, Duration: 0.127, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 106

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 192.168.200.8, Duration: 39.826, Protocol: 2, Source Port: 102, Destination IP: 11, Destination Port: 8, Number of Packets: 815

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 10162_129, Duration: 6.99, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 298

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 192.168.210.5, Duration: 18.487, Protocol: 2, Source Port: 35, Destination IP: 5, Destination Port: 4, Number of Packets: 366

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 192.168.220.12, Duration: 0.121, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 105

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 192.168.220.4, Duration: 0.116, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 103

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: DNS, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 92, Number of Packets: 92

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 192.168.100.4, Duration: 13.979, Protocol: 2, Source Port: 58, Destination IP: 3, Destination Port: 4, Number of Packets: 86

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 192.168.220.6, Duration: 0.115, Protocol: 2, Source Port: 5, Destination IP: 4, Destination Port: 5, Number of Packets: 106

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 192.168.220.14, Duration: 0.133, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 102

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 192.168.200.4, Duration: 0.128, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 105

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 192.168.220.10, Duration: 0.14, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 106

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 192.168.220.7, Duration: 2.497, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 108

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 192.168.220.5, Duration: 0.138, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 105

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 192.168.220.16, Duration: 0.125, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 106

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 192.168.220.15, Duration: 0.116, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 100

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 10296_238, Duration: 7.411, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 13, Number of Packets: 243

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 192.168.220.13, Duration: 0.116, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 102

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 192.168.210.4, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 192.168.210.3, Duration: 0.114, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 10012_24, Duration: 0.629, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 13697_62, Duration: 5.88, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 92

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 10587_194, Duration: 0.105, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 192.168.200.3, Duration: 0.0, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 192.168.220.3, Duration: 0.001, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 192.168.100.3, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 192.168.200.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 12741_189, Duration: 0.503, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 10437_63, Duration: 0.243, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 10012_11, Duration: 0.239, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 10193_2, Duration: 0.673, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 192.168.220.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 10921_142, Duration: 0.22, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 10199_162, Duration: 0.1, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 10609_250, Duration: 0.239, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 10012_33, Duration: 0.093, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T03:02:16.843000, End Frame: 2017-03-18T04:02:16.843000, Source IP: 10068_66, Duration: 0.542, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T04:02:17.678000, End Frame: 2017-03-18T05:02:17.678000, Source IP: EXT_SERVER, Duration: 9.352, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 156, Number of Packets: 1269

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T04:02:17.678000, End Frame: 2017-03-18T05:02:17.678000, Source IP: 192.168.200.9, Duration: 31.682, Protocol: 2, Source Port: 92, Destination IP: 7, Destination Port: 6, Number of Packets: 756

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T04:02:17.678000, End Frame: 2017-03-18T05:02:17.678000, Source IP: 192.168.100.5, Duration: 0.0, Protocol: 2, Source Port: 3, Destination IP: 18, Destination Port: 19, Number of Packets: 676

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T04:02:17.678000, End Frame: 2017-03-18T05:02:17.678000, Source IP: 192.168.220.10, Duration: 0.124, Protocol: 2, Source Port: 5, Destination IP: 4, Destination Port: 5, Number of Packets: 108

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T04:02:17.678000, End Frame: 2017-03-18T05:02:17.678000, Source IP: 192.168.220.11, Duration: 0.125, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 106

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T04:02:17.678000, End Frame: 2017-03-18T05:02:17.678000, Source IP: 192.168.200.5, Duration: 0.105, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 103

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T04:02:17.678000, End Frame: 2017-03-18T05:02:17.678000, Source IP: 192.168.200.8, Duration: 50.553, Protocol: 2, Source Port: 120, Destination IP: 14, Destination Port: 7, Number of Packets: 880

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T04:02:17.678000, End Frame: 2017-03-18T05:02:17.678000, Source IP: 192.168.100.4, Duration: 9.982, Protocol: 2, Source Port: 51, Destination IP: 4, Destination Port: 5, Number of Packets: 76

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T04:02:17.678000, End Frame: 2017-03-18T05:02:17.678000, Source IP: 192.168.220.9, Duration: 0.12, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 103

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-18T04:02:17.678000, End Frame: 2017-03-18T05:02:17.678000, Source IP: 192.168.220.8, Duration: 0.114, Protocol: 2, Source Port: 5, Destination IP: 4, Destination Port: 5, Number of Packets: 104

Output: normal