Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10072_57, Duration: 2.519, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 43

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10272_184, Duration: 0.324, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10483_126, Duration: 6.364, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 12, Number of Packets: 7186

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10726_242, Duration: 1.992, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 3, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11051_137, Duration: 0.465, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10682_19, Duration: 0.458, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10159_99, Duration: 2.475, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 44

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10335_117, Duration: 0.536, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 44

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11279_11, Duration: 0.203, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11264_50, Duration: 0.106, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 64

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11868_243, Duration: 1.261, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 12333_71, Duration: 1.124, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10082_46, Duration: 1.403, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10913_67, Duration: 2.541, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11428_30, Duration: 1.061, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10417_68, Duration: 2.076, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11557_41, Duration: 0.248, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 12624_90, Duration: 1.356, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 13406_174, Duration: 1.8, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 12112_161, Duration: 0.186, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 12152_108, Duration: 0.091, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10545_49, Duration: 0.09, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10105_12, Duration: 0.316, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 78

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10535_182, Duration: 0.546, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11702_23, Duration: 0.747, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 13407_156, Duration: 0.346, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10991_177, Duration: 0.345, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10159_75, Duration: 0.439, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10326_209, Duration: 0.249, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 12908_207, Duration: 0.516, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11049_33, Duration: 0.593, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 8, Number of Packets: 170

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10414_10, Duration: 1.173, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 67

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 12480_108, Duration: 0.482, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 44

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10002_113, Duration: 0.776, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10075_226, Duration: 14.518, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 12, Number of Packets: 259

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10082_87, Duration: 0.122, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 32

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10104_157, Duration: 1.987, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10091_2, Duration: 0.673, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 5, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10093_150, Duration: 0.715, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 5, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10402_47, Duration: 0.774, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 36

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10324_67, Duration: 1.854, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10052_62, Duration: 1.621, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 84

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11254_86, Duration: 0.137, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10082_203, Duration: 2.993, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 12971_183, Duration: 3.036, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 36

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10970_157, Duration: 4.274, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10056_64, Duration: 0.106, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10056_175, Duration: 0.04, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10056_197, Duration: 0.268, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11283_249, Duration: 2.326, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 44

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10068_40, Duration: 1.539, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 65

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10139_58, Duration: 1.883, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11488_161, Duration: 0.429, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 48

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 13408_175, Duration: 0.342, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10296_226, Duration: 1.999, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 5, Number of Packets: 80

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11978_166, Duration: 0.346, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10115_42, Duration: 0.209, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10870_108, Duration: 0.141, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 13409_15, Duration: 1.298, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 4, Number of Packets: 63

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11357_182, Duration: 1.655, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10543_146, Duration: 1.287, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 13410_38, Duration: 0.051, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10545_219, Duration: 1.69, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10380_23, Duration: 1.558, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10706_192, Duration: 3.42, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 12, Number of Packets: 43

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 13410_49, Duration: 17.765, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 17, Number of Packets: 1992

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10437_40, Duration: 2.348, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 13228_113, Duration: 2.38, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 13411_135, Duration: 2.225, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10068_106, Duration: 0.581, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 12768_253, Duration: 2.15, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10082_133, Duration: 4.905, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 4, Number of Packets: 103

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 13412_13, Duration: 2.406, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10174_64, Duration: 10.763, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 8, Number of Packets: 147

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 13413_146, Duration: 5.142, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 132

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 13414_2, Duration: 0.187, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 12112_27, Duration: 0.106, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10172_229, Duration: 3.745, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10173_139, Duration: 0.755, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10082_245, Duration: 2.521, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 3, Number of Packets: 37

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10082_185, Duration: 1.958, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 13415_225, Duration: 0.441, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 13416_225, Duration: 1.065, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10470_18, Duration: 0.362, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 13413_155, Duration: 1.363, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 12135_39, Duration: 1.689, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10214_41, Duration: 0.266, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 67

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 12134_30, Duration: 0.557, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10082_13, Duration: 1.001, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10171_234, Duration: 0.231, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10249_102, Duration: 0.491, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10259_214, Duration: 0.449, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11414_45, Duration: 2.2, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11961_143, Duration: 1.342, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10159_90, Duration: 0.046, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10223_2, Duration: 0.075, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 12169_105, Duration: 0.709, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 12492_103, Duration: 4.273, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10069_75, Duration: 0.042, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10135_93, Duration: 0.108, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10082_209, Duration: 0.247, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10068_34, Duration: 1.522, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10107_58, Duration: 0.052, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10082_190, Duration: 0.04, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10052_62, Duration: 2.475, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 16, Number of Packets: 449

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10069_198, Duration: 2.093, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 15, Number of Packets: 62

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10074_39, Duration: 6.537, Protocol: 1, Source Port: 2, Destination IP: 10, Destination Port: 64, Number of Packets: 404

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10163_60, Duration: 9.594, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 41, Number of Packets: 457

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10164_230, Duration: 6.968, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 6, Number of Packets: 87

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10159_75, Duration: 3.225, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 4, Number of Packets: 65

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10057_29, Duration: 148.505, Protocol: 1, Source Port: 1, Destination IP: 13, Destination Port: 140, Number of Packets: 1090

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10022_68, Duration: 0.614, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 6, Number of Packets: 67

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10076_237, Duration: 2.782, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 31, Number of Packets: 234

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 192.168.220.15, Duration: 305.008, Protocol: 2, Source Port: 947, Destination IP: 141, Destination Port: 9, Number of Packets: 20098

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 192.168.220.16, Duration: 4727.86, Protocol: 3, Source Port: 4526, Destination IP: 381, Destination Port: 1005, Number of Packets: 73606

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 192.168.210.5, Duration: 1888.352, Protocol: 2, Source Port: 2704, Destination IP: 446, Destination Port: 207, Number of Packets: 177096

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 192.168.220.12, Duration: 315.547, Protocol: 2, Source Port: 611, Destination IP: 124, Destination Port: 7, Number of Packets: 277568

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10251_252, Duration: 1.334, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 5, Number of Packets: 149

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10012_72, Duration: 4.306, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 11, Number of Packets: 101

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 13408_175, Duration: 0.046, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10068_34, Duration: 5.82, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 19, Number of Packets: 205

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10402_47, Duration: 0.702, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 11001_207, Duration: 0.102, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10214_41, Duration: 0.734, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 10, Number of Packets: 141

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10223_4, Duration: 37.647, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 135, Number of Packets: 2704

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10066_79, Duration: 27.372, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 38, Number of Packets: 227

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10063_33, Duration: 33.201, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 66, Number of Packets: 3514

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 12799_245, Duration: 3.146, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 10, Number of Packets: 127

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10171_234, Duration: 3.049, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 7, Number of Packets: 113

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10060_27, Duration: 97.259, Protocol: 1, Source Port: 1, Destination IP: 11, Destination Port: 360, Number of Packets: 2247

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10064_217, Duration: 3.541, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 7, Number of Packets: 411

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10058_155, Duration: 17.247, Protocol: 1, Source Port: 1, Destination IP: 11, Destination Port: 18, Number of Packets: 233

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10075_226, Duration: 5.761, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 8, Number of Packets: 193

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10028_175, Duration: 5.006, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 14, Number of Packets: 51

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10305_138, Duration: 101.206, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 149, Number of Packets: 4832

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10074_40, Duration: 16.349, Protocol: 1, Source Port: 2, Destination IP: 8, Destination Port: 84, Number of Packets: 504

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 11024_86, Duration: 14.409, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 228

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 11250_39, Duration: 5.969, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 18, Number of Packets: 95

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10071_22, Duration: 10.326, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 40, Number of Packets: 660

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10244_15, Duration: 14.149, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 13, Number of Packets: 91

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10072_56, Duration: 1.362, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 192.168.200.4, Duration: 951.27, Protocol: 3, Source Port: 2300, Destination IP: 346, Destination Port: 8, Number of Packets: 45611

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 192.168.200.8, Duration: 312.726, Protocol: 2, Source Port: 505, Destination IP: 92, Destination Port: 11, Number of Packets: 139586

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10082_13, Duration: 1.001, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10481_6, Duration: 17.244, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 52, Number of Packets: 380

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: DNS, Duration: 97.146, Protocol: 1, Source Port: 1, Destination IP: 16, Destination Port: 8256, Number of Packets: 16987

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10163_9, Duration: 18.598, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 43, Number of Packets: 325

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10527_6, Duration: 138.074, Protocol: 1, Source Port: 2, Destination IP: 12, Destination Port: 71, Number of Packets: 4862

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10325_253, Duration: 9.852, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 12, Number of Packets: 1161

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10117_80, Duration: 31.599, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 101, Number of Packets: 1008

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10082_245, Duration: 0.0, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 2, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10305_142, Duration: 103.218, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 158, Number of Packets: 6734

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10527_14, Duration: 1392.492, Protocol: 1, Source Port: 2, Destination IP: 13, Destination Port: 195, Number of Packets: 13453

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10495_108, Duration: 4.207, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 17, Number of Packets: 151

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10527_2, Duration: 267.619, Protocol: 1, Source Port: 2, Destination IP: 11, Destination Port: 46, Number of Packets: 8191

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10296_232, Duration: 0.214, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10085_31, Duration: 15.303, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 92, Number of Packets: 473

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10047_85, Duration: 2.321, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 5, Number of Packets: 53

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 192.168.100.5, Duration: 262.298, Protocol: 2, Source Port: 6, Destination IP: 19, Destination Port: 22, Number of Packets: 610100

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10139_43, Duration: 3.766, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 24, Number of Packets: 60

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10056_51, Duration: 0.935, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 6, Number of Packets: 220

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10139_42, Duration: 2.357, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 18, Number of Packets: 45

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10527_4, Duration: 137.18, Protocol: 1, Source Port: 2, Destination IP: 12, Destination Port: 59, Number of Packets: 2365

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 192.168.220.1, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 83

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 192.168.220.7, Duration: 1252.634, Protocol: 2, Source Port: 2744, Destination IP: 456, Destination Port: 9, Number of Packets: 35550

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10104_157, Duration: 10.155, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 6, Number of Packets: 68

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10875_6, Duration: 4.089, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 5, Number of Packets: 93

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 11280_164, Duration: 0.693, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 192.168.220.11, Duration: 664.638, Protocol: 2, Source Port: 1181, Destination IP: 194, Destination Port: 7, Number of Packets: 182388

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10090_217, Duration: 0.756, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 4, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10086_192, Duration: 44.316, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 17, Number of Packets: 902

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 11414_45, Duration: 2.999, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 35

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 11263_66, Duration: 1.005, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10095_80, Duration: 10.379, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 17, Number of Packets: 195

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10527_8, Duration: 8.37, Protocol: 1, Source Port: 2, Destination IP: 11, Destination Port: 71, Number of Packets: 674

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10527_3, Duration: 72.465, Protocol: 1, Source Port: 2, Destination IP: 12, Destination Port: 104, Number of Packets: 4409

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10028_249, Duration: 15.964, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 42, Number of Packets: 557

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10249_102, Duration: 4.13, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 10, Number of Packets: 85

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10551_202, Duration: 0.135, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10072_39, Duration: 5.681, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 26, Number of Packets: 72

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10106_76, Duration: 7.178, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 43, Number of Packets: 255

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10022_249, Duration: 31.198, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 39, Number of Packets: 572

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10793_130, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 43

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10527_1, Duration: 40.748, Protocol: 1, Source Port: 2, Destination IP: 12, Destination Port: 52, Number of Packets: 3222

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10183_96, Duration: 0.613, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 7, Number of Packets: 471

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10527_10, Duration: 17.4, Protocol: 1, Source Port: 2, Destination IP: 11, Destination Port: 60, Number of Packets: 1410

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10305_148, Duration: 51.148, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 150, Number of Packets: 1450

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 11250_25, Duration: 22.534, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 66, Number of Packets: 692

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10296_226, Duration: 25.618, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 21, Number of Packets: 538

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10356_112, Duration: 2.633, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 4, Number of Packets: 57

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10081_164, Duration: 111.127, Protocol: 1, Source Port: 2, Destination IP: 10, Destination Port: 62, Number of Packets: 1473

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 11254_87, Duration: 0.358, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 11818_88, Duration: 2.784, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10315_252, Duration: 6.252, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 62, Number of Packets: 616

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10089_53, Duration: 7.222, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 19, Number of Packets: 124

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10012_43, Duration: 5.921, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 12, Number of Packets: 138

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 11336_23, Duration: 1.774, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10082_209, Duration: 4.152, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 11924_154, Duration: 14.588, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 9, Number of Packets: 239

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10087_41, Duration: 45.392, Protocol: 1, Source Port: 1, Destination IP: 9, Destination Port: 90, Number of Packets: 1377

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 11263_67, Duration: 0.166, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10078_100, Duration: 4.087, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 7, Number of Packets: 81

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10077_154, Duration: 9.874, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 8, Number of Packets: 293

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10077_156, Duration: 43.238, Protocol: 1, Source Port: 2, Destination IP: 8, Destination Port: 31, Number of Packets: 1336

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 11046_154, Duration: 3.035, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 7, Number of Packets: 150

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10028_68, Duration: 1.609, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 60

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 12135_39, Duration: 0.659, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10979_53, Duration: 45.789, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 41, Number of Packets: 1399

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10093_150, Duration: 8.622, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 10, Number of Packets: 123

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10109_187, Duration: 10.045, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 8, Number of Packets: 161

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10786_4, Duration: 8.092, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 11, Number of Packets: 135

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10314_186, Duration: 6.025, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 13, Number of Packets: 114

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10010_37, Duration: 7.514, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 55, Number of Packets: 236

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10591_216, Duration: 0.32, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 12, Number of Packets: 93

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10259_214, Duration: 0.378, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10163_16, Duration: 0.059, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 9, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10064_169, Duration: 6.599, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 22, Number of Packets: 488

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10088_9, Duration: 8.782, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 7, Number of Packets: 227

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10163_59, Duration: 6.084, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 30, Number of Packets: 320

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10056_147, Duration: 2.103, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 6, Number of Packets: 87

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 11283_249, Duration: 6.884, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 13, Number of Packets: 196

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10402_46, Duration: 5.073, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 83

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 12169_105, Duration: 0.006, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10056_187, Duration: 1.967, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 9, Number of Packets: 137

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10094_75, Duration: 8.025, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 15, Number of Packets: 154

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10082_252, Duration: 0.315, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 44

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10180_116, Duration: 16.536, Protocol: 1, Source Port: 1, Destination IP: 11, Destination Port: 19, Number of Packets: 245

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10022_207, Duration: 0.937, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 6, Number of Packets: 55

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10012_11, Duration: 0.189, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 9, Number of Packets: 84

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10090_196, Duration: 2.026, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 10, Number of Packets: 68

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 13415_225, Duration: 0.035, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 11961_143, Duration: 6.124, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 39

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10056_78, Duration: 0.686, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 5, Number of Packets: 560

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10528_73, Duration: 8.351, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 69

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10012_19, Duration: 36.773, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 48, Number of Packets: 3093

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 11193_139, Duration: 2.836, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 4, Number of Packets: 45

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 12480_108, Duration: 7.909, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 52

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10926_27, Duration: 2.707, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 67

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 11156_192, Duration: 10.6, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 10, Number of Packets: 104

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 11930_132, Duration: 9.299, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 10, Number of Packets: 153

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10069_64, Duration: 2.483, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 16, Number of Packets: 101

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10555_33, Duration: 3.761, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 6, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10414_80, Duration: 20.777, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 45, Number of Packets: 432

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 11432_206, Duration: 8.752, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 11, Number of Packets: 172

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10056_85, Duration: 0.734, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 6, Number of Packets: 184

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10027_249, Duration: 0.618, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 10, Number of Packets: 70

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10056_71, Duration: 2.716, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 72

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 11353_244, Duration: 1.013, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 5, Number of Packets: 48

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 12154_220, Duration: 5.392, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 5, Number of Packets: 53

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10107_58, Duration: 13.843, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 36, Number of Packets: 255

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10091_2, Duration: 1.11, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 57

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10998_36, Duration: 0.37, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10173_139, Duration: 0.984, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 11923_76, Duration: 5.178, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 6, Number of Packets: 115

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10001_8, Duration: 5.217, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 39, Number of Packets: 177

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10082_190, Duration: 0.004, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10151_143, Duration: 48.824, Protocol: 1, Source Port: 2, Destination IP: 11, Destination Port: 76, Number of Packets: 622

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10319_235, Duration: 0.444, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10223_61, Duration: 13.445, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 117, Number of Packets: 1593

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10195_190, Duration: 19.407, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 19, Number of Packets: 491

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10084_230, Duration: 8.576, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 3, Number of Packets: 106

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10438_216, Duration: 1.438, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 8, Number of Packets: 67

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10056_113, Duration: 0.978, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10754_14, Duration: 11.823, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 14, Number of Packets: 107

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10159_90, Duration: 0.47, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10225_200, Duration: 15.392, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 11, Number of Packets: 204

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 12339_13, Duration: 4.942, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 11, Number of Packets: 64

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 11670_8, Duration: 5.246, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 7, Number of Packets: 82

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 13416_225, Duration: 1.221, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 12134_30, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 11263_72, Duration: 1.257, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10055_190, Duration: 4.269, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 6, Number of Packets: 69

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 11551_120, Duration: 0.011, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10082_185, Duration: 0.136, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 12004_159, Duration: 0.71, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10470_18, Duration: 2.411, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 73

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10098_126, Duration: 6.206, Protocol: 1, Source Port: 2, Destination IP: 8, Destination Port: 14, Number of Packets: 243

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 11460_163, Duration: 1.462, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 61

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10056_232, Duration: 1.5, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 5, Number of Packets: 598

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10585_220, Duration: 4.897, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 18, Number of Packets: 187

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10224_173, Duration: 3.149, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 109

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10223_24, Duration: 88.275, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 96, Number of Packets: 3096

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: EXT_SERVER, Duration: 15.009, Protocol: 1, Source Port: 3, Destination IP: 5, Destination Port: 160, Number of Packets: 1626

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10004_36, Duration: 22.255, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 9, Number of Packets: 328

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 192.168.200.9, Duration: 30.496, Protocol: 2, Source Port: 79, Destination IP: 2, Destination Port: 3, Number of Packets: 680

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10063_205, Duration: 5.44, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 29, Number of Packets: 236

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10056_99, Duration: 2.611, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10068_40, Duration: 0.221, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 36

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10174_64, Duration: 0.746, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 192.168.220.4, Duration: 558.937, Protocol: 2, Source Port: 1341, Destination IP: 202, Destination Port: 7, Number of Packets: 69434

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10305_153, Duration: 24.04, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 40, Number of Packets: 407

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10587_162, Duration: 51.153, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 11, Number of Packets: 635

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10305_149, Duration: 8.3, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 41, Number of Packets: 410

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10092_104, Duration: 31.572, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 5, Number of Packets: 105

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10124_1, Duration: 115.655, Protocol: 1, Source Port: 1, Destination IP: 12, Destination Port: 213, Number of Packets: 1007

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 11888_224, Duration: 2.183, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 192.168.220.5, Duration: 191.062, Protocol: 2, Source Port: 395, Destination IP: 91, Destination Port: 10, Number of Packets: 7677

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10706_192, Duration: 0.513, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10172_229, Duration: 3.732, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10538_95, Duration: 13.211, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 15, Number of Packets: 265

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 192.168.220.6, Duration: 1381.704, Protocol: 2, Source Port: 3409, Destination IP: 407, Destination Port: 9, Number of Packets: 75483

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 192.168.100.4, Duration: 28.705, Protocol: 3, Source Port: 86, Destination IP: 9, Destination Port: 31, Number of Packets: 952

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10555_32, Duration: 0.565, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 192.168.220.10, Duration: 16.726, Protocol: 2, Source Port: 57, Destination IP: 12, Destination Port: 7, Number of Packets: 426

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10222_199, Duration: 10.968, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 16, Number of Packets: 129

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10073_64, Duration: 8.266, Protocol: 1, Source Port: 2, Destination IP: 8, Destination Port: 70, Number of Packets: 477

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10206_7, Duration: 23.578, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 34, Number of Packets: 302

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10135_93, Duration: 1.337, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 9, Number of Packets: 69

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10072_43, Duration: 3.594, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 17, Number of Packets: 45

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T14:01:29.905000, End Frame: 2017-03-16T15:01:29.905000, Source IP: 10287_42, Duration: 5.66, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 8, Number of Packets: 50

Output: normal