Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10082_217, Duration: 2.428, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10081_164, Duration: 71.329, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 50, Number of Packets: 942

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10071_22, Duration: 13.836, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 46, Number of Packets: 716

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10074_40, Duration: 13.394, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 64, Number of Packets: 371

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11365_94, Duration: 0.246, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10135_77, Duration: 1.654, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 11, Number of Packets: 51

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10138_16, Duration: 5.112, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 34, Number of Packets: 116

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10077_154, Duration: 4.564, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 7, Number of Packets: 239

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10072_39, Duration: 5.242, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 32, Number of Packets: 83

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10010_37, Duration: 7.245, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 46, Number of Packets: 248

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10086_192, Duration: 63.025, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 13, Number of Packets: 749

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11923_76, Duration: 1.58, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 6, Number of Packets: 58

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10139_39, Duration: 5.492, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 34, Number of Packets: 90

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10077_156, Duration: 25.158, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 18, Number of Packets: 834

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10073_64, Duration: 3.487, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 29, Number of Packets: 250

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10194_100, Duration: 3.128, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 13, Number of Packets: 124

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10069_75, Duration: 0.111, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 5, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 192.168.100.3, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10088_9, Duration: 9.669, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 23, Number of Packets: 351

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10056_70, Duration: 0.148, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 68

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10296_234, Duration: 23.857, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 39, Number of Packets: 1590

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10998_36, Duration: 4.927, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 52

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10195_190, Duration: 10.351, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 16, Number of Packets: 236

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10104_157, Duration: 9.087, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 100

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10017_40, Duration: 2.288, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 53

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10056_116, Duration: 0.167, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 142

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10085_31, Duration: 12.006, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 59, Number of Packets: 263

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10094_75, Duration: 2.583, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 9, Number of Packets: 76

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10090_196, Duration: 1.878, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 6, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10095_80, Duration: 2.694, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 10, Number of Packets: 88

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10092_102, Duration: 1.089, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10012_25, Duration: 6.585, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 14, Number of Packets: 282

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11376_140, Duration: 0.077, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 12159_104, Duration: 0.023, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10012_81, Duration: 2.862, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 35

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10004_7, Duration: 17.332, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 25, Number of Packets: 2988

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10084_230, Duration: 14.632, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 4, Number of Packets: 72

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10097_117, Duration: 0.583, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10012_51, Duration: 5.707, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 102

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10568_13, Duration: 0.271, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10102_83, Duration: 2.896, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 5, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10393_246, Duration: 0.208, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10098_126, Duration: 1.876, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 2, Number of Packets: 41

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10100_133, Duration: 3.227, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 8, Number of Packets: 104

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 12605_130, Duration: 1.032, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 5, Number of Packets: 48

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10103_253, Duration: 2.627, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 7, Number of Packets: 85

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10106_93, Duration: 13.325, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 32, Number of Packets: 250

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11886_142, Duration: 1.946, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10394_149, Duration: 2.24, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 6, Number of Packets: 54

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10028_68, Duration: 0.109, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10005_36, Duration: 4.923, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 5, Number of Packets: 243

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10092_100, Duration: 2.546, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10072_56, Duration: 0.878, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10124_1, Duration: 66.445, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 129, Number of Packets: 631

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10458_30, Duration: 0.718, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11156_192, Duration: 7.767, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 14, Number of Packets: 167

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10201_53, Duration: 2.598, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 12526_200, Duration: 0.206, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10270_15, Duration: 7.792, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 13, Number of Packets: 118

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10205_12, Duration: 12.048, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 7, Number of Packets: 65

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 192.168.200.3, Duration: 0.001, Protocol: 1, Source Port: 3, Destination IP: 3, Destination Port: 3, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11228_143, Duration: 0.18, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10141_43, Duration: 0.098, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10143_80, Duration: 6.189, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 7, Number of Packets: 96

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 12011_41, Duration: 0.856, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10682_19, Duration: 0.608, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 12685_157, Duration: 2.267, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 7, Number of Packets: 68

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10073_65, Duration: 12.607, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 49, Number of Packets: 310

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10139_43, Duration: 6.389, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 39, Number of Packets: 98

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10151_143, Duration: 33.378, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 30, Number of Packets: 307

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10158_155, Duration: 20.294, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 14, Number of Packets: 168

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 12612_32, Duration: 0.873, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 546

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 12808_156, Duration: 1.563, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 59

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10023_15, Duration: 1.675, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10072_43, Duration: 4.354, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 17, Number of Packets: 44

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10074_39, Duration: 8.839, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 58, Number of Packets: 377

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10199_162, Duration: 0.724, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10461_209, Duration: 7.715, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 5, Number of Packets: 55

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10166_29, Duration: 2.703, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10078_100, Duration: 15.099, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 31, Number of Packets: 267

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 192.168.210.4, Duration: 0.0, Protocol: 2, Source Port: 2, Destination IP: 2, Destination Port: 12, Number of Packets: 16

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 192.168.210.2, Duration: 0.0, Protocol: 1, Source Port: 9, Destination IP: 1, Destination Port: 2, Number of Packets: 9

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10180_116, Duration: 8.746, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 7, Number of Packets: 90

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10004_3, Duration: 11.747, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 243

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10047_85, Duration: 2.892, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 5, Number of Packets: 56

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10055_190, Duration: 6.159, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 7, Number of Packets: 82

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10056_89, Duration: 3.655, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 5, Number of Packets: 510

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10056_87, Duration: 0.835, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 5, Number of Packets: 73

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10056_107, Duration: 0.725, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 10, Number of Packets: 313

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10919_132, Duration: 1.089, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10159_75, Duration: 3.563, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 93

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10191_163, Duration: 2.921, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 36

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10056_212, Duration: 0.102, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10438_216, Duration: 0.604, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 8, Number of Packets: 62

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10131_216, Duration: 2.977, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 9, Number of Packets: 63

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11014_185, Duration: 33.92, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 37, Number of Packets: 1951

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11046_97, Duration: 0.85, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 192.168.200.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10187_115, Duration: 2.04, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 35

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 12586_218, Duration: 0.501, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 158

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10013_97, Duration: 2.26, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 5, Number of Packets: 46

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10712_206, Duration: 1.485, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10051_51, Duration: 1.492, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 192.168.100.6, Duration: 0.981, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 12, Number of Packets: 58

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10056_118, Duration: 1.557, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 5, Number of Packets: 82

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10056_229, Duration: 1.364, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 7, Number of Packets: 602

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10056_251, Duration: 0.121, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 49

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10983_96, Duration: 1.497, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11010_57, Duration: 19.905, Protocol: 2, Source Port: 3, Destination IP: 2, Destination Port: 43, Number of Packets: 652

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11010_59, Duration: 11.111, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 18, Number of Packets: 153

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10012_43, Duration: 2.529, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 47

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11011_87, Duration: 1.596, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 49

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 12255_20, Duration: 2.64, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 13, Number of Packets: 167

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10587_202, Duration: 0.122, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 12256_65, Duration: 1.37, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 72

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10075_234, Duration: 0.12, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10499_67, Duration: 2.599, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 83

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11244_2, Duration: 0.121, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10695_48, Duration: 0.125, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10181_60, Duration: 5.756, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 8, Number of Packets: 98

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10305_148, Duration: 41.37, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 62, Number of Packets: 604

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10305_138, Duration: 121.774, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 64, Number of Packets: 2483

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10305_153, Duration: 7.506, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 17, Number of Packets: 170

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10214_41, Duration: 0.402, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 69

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10495_108, Duration: 2.241, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 8, Number of Packets: 70

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10305_142, Duration: 57.554, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 42, Number of Packets: 876

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10117_80, Duration: 30.788, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 40, Number of Packets: 400

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10305_149, Duration: 12.45, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 22, Number of Packets: 207

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10135_187, Duration: 7.557, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 12, Number of Packets: 132

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10022_249, Duration: 16.065, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 21, Number of Packets: 617

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10793_130, Duration: 75.407, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 1612

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10199_8, Duration: 1.528, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 111

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11046_157, Duration: 2.728, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 64

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10117_94, Duration: 0.542, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10875_6, Duration: 12.699, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 7, Number of Packets: 174

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10107_215, Duration: 6.518, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 11, Number of Packets: 85

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10012_58, Duration: 1.672, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 57

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10092_107, Duration: 30.017, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 4, Number of Packets: 105

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10005_2, Duration: 3.59, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 94

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10793_162, Duration: 33.339, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 322

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11023_228, Duration: 1.849, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11024_86, Duration: 5.379, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 110

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10582_68, Duration: 1.549, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 41

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10434_208, Duration: 2.184, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11017_102, Duration: 0.396, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 39

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11030_206, Duration: 2.89, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 47

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10098_125, Duration: 2.504, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 8, Number of Packets: 151

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10166_58, Duration: 0.428, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11512_117, Duration: 0.715, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10950_54, Duration: 0.535, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10108_7, Duration: 0.706, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 5, Number of Packets: 77

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10384_183, Duration: 0.037, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 12224_102, Duration: 4.079, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 81

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 14514_142, Duration: 3.628, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 8, Number of Packets: 164

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10578_200, Duration: 0.369, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 114

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10609_250, Duration: 0.65, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 14515_55, Duration: 0.22, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 14389_30, Duration: 2.408, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 79

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10605_14, Duration: 0.101, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11204_141, Duration: 0.347, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 12586_200, Duration: 1.287, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 348

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10105_0, Duration: 4.241, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 126

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10511_218, Duration: 5.461, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 8, Number of Packets: 85

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10069_64, Duration: 1.934, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 10, Number of Packets: 62

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10028_249, Duration: 0.755, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 33

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10199_170, Duration: 0.807, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10222_218, Duration: 14.409, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 12, Number of Packets: 138

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10171_237, Duration: 8.316, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 13, Number of Packets: 287

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10318_7, Duration: 0.379, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11311_213, Duration: 1.007, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10315_252, Duration: 4.804, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 29, Number of Packets: 393

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10484_87, Duration: 0.447, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11835_203, Duration: 3.62, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 53

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10335_117, Duration: 2.076, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10501_19, Duration: 29.355, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 26, Number of Packets: 726

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10064_31, Duration: 1.005, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10978_227, Duration: 4.7, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 6, Number of Packets: 93

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11054_192, Duration: 8.952, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 13, Number of Packets: 213

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11297_41, Duration: 3.253, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 8, Number of Packets: 130

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10305_143, Duration: 11.547, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 10, Number of Packets: 422

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10080_156, Duration: 10.098, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 5, Number of Packets: 169

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10135_20, Duration: 12.181, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 12, Number of Packets: 140

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10996_11, Duration: 3.958, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10544_6, Duration: 14.03, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 17, Number of Packets: 171

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11299_235, Duration: 5.11, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 325

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10027_249, Duration: 1.532, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 73

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10109_187, Duration: 12.238, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 9, Number of Packets: 167

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 13882_3, Duration: 4.165, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 39

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10056_46, Duration: 2.544, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 93

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10099_101, Duration: 47.778, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 10, Number of Packets: 238

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10118_56, Duration: 2.181, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11348_110, Duration: 6.485, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 72

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10097_50, Duration: 0.896, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10056_18, Duration: 4.969, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 52

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10326_209, Duration: 0.418, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 12427_68, Duration: 1.933, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10079_58, Duration: 2.954, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 8, Number of Packets: 61

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10118_111, Duration: 4.159, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 11, Number of Packets: 119

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10256_224, Duration: 7.901, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 5, Number of Packets: 87

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10136_71, Duration: 1.398, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 5, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10776_200, Duration: 9.123, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 10, Number of Packets: 131

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10082_54, Duration: 0.708, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10113_140, Duration: 0.66, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 5, Number of Packets: 32

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10130_163, Duration: 0.381, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10901_39, Duration: 2.983, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 37

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11373_43, Duration: 1.552, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11524_188, Duration: 1.379, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10156_162, Duration: 0.541, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 4, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11230_158, Duration: 0.38, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10036_235, Duration: 1.157, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10278_34, Duration: 9.271, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 7, Number of Packets: 238

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 12807_233, Duration: 0.558, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 273

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10025_202, Duration: 1.97, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10105_4, Duration: 2.425, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 12, Number of Packets: 175

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10150_12, Duration: 20.75, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 26, Number of Packets: 273

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10085_66, Duration: 3.706, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 64

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11025_216, Duration: 0.51, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10987_129, Duration: 2.562, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 53

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10870_108, Duration: 0.319, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10996_13, Duration: 1.578, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 43

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10105_20, Duration: 2.922, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 8, Number of Packets: 147

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10150_70, Duration: 19.33, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 32, Number of Packets: 329

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11298_162, Duration: 1.606, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 4, Number of Packets: 52

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10244_16, Duration: 1.03, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10157_114, Duration: 0.851, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10319_216, Duration: 1.515, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 8, Number of Packets: 63

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10475_83, Duration: 5.049, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 25, Number of Packets: 208

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10314_186, Duration: 3.684, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 52

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10292_68, Duration: 1.74, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 5, Number of Packets: 76

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10455_2, Duration: 1.226, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10444_137, Duration: 0.596, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10956_11, Duration: 2.17, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 77

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10292_67, Duration: 1.034, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 10, Number of Packets: 155

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10046_7, Duration: 2.968, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 4, Number of Packets: 51

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10129_10, Duration: 2.853, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 7, Number of Packets: 67

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10384_185, Duration: 0.159, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10135_62, Duration: 0.711, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10105_16, Duration: 1.372, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 59

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10163_21, Duration: 15.564, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 30, Number of Packets: 281

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10163_10, Duration: 13.777, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 32, Number of Packets: 319

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11080_102, Duration: 0.746, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 41

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10286_35, Duration: 0.847, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11073_59, Duration: 1.872, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 12082_255, Duration: 0.587, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11323_107, Duration: 0.757, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10135_5, Duration: 11.987, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 23, Number of Packets: 183

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11494_194, Duration: 3.939, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 7, Number of Packets: 82

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10163_9, Duration: 3.171, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 37

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10089_53, Duration: 6.945, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10135_210, Duration: 3.071, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 50

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10170_29, Duration: 3.134, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 82

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10276_216, Duration: 1.738, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 5, Number of Packets: 55

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10591_216, Duration: 0.543, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11611_5, Duration: 0.355, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11049_33, Duration: 2.547, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 8, Number of Packets: 116

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10170_26, Duration: 3.472, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 6, Number of Packets: 53

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10996_15, Duration: 0.945, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10467_205, Duration: 2.602, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 3, Number of Packets: 42

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10056_119, Duration: 0.489, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11250_25, Duration: 79.75, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 129, Number of Packets: 1757

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10163_60, Duration: 39.107, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 49, Number of Packets: 737

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11551_105, Duration: 0.504, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 136

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11551_121, Duration: 36.35, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 47, Number of Packets: 1532

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10052_14, Duration: 12.073, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 34, Number of Packets: 827

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10106_76, Duration: 17.335, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 88, Number of Packets: 507

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10163_16, Duration: 2.526, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 25, Number of Packets: 62

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11250_15, Duration: 3.251, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 19, Number of Packets: 165

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10056_145, Duration: 3.628, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 387

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10163_54, Duration: 8.467, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 9, Number of Packets: 89

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11250_39, Duration: 16.126, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 43, Number of Packets: 205

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10499_66, Duration: 48.064, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 47, Number of Packets: 758

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10321_204, Duration: 43.999, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 84, Number of Packets: 1572

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10082_128, Duration: 0.019, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10012_19, Duration: 11.435, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 7, Number of Packets: 149

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10163_46, Duration: 6.343, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 23, Number of Packets: 165

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10072_42, Duration: 7.332, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 31, Number of Packets: 82

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 14579_4, Duration: 0.466, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10056_16, Duration: 1.269, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 258

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11256_69, Duration: 0.741, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 39

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10159_149, Duration: 5.255, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 10, Number of Packets: 137

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10118_55, Duration: 7.731, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 12, Number of Packets: 165

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11254_83, Duration: 0.796, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11046_148, Duration: 1.263, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 64

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10004_10, Duration: 3.031, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 80

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10056_233, Duration: 0.319, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10056_183, Duration: 0.505, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 55

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 12287_120, Duration: 3.418, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 7, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10056_120, Duration: 0.576, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 47

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11034_229, Duration: 3.802, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 35

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10193_8, Duration: 1.493, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10118_58, Duration: 1.097, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 36

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10828_25, Duration: 4.648, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 71

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10056_179, Duration: 0.136, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10056_184, Duration: 0.116, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10064_169, Duration: 2.614, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 14, Number of Packets: 296

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10471_80, Duration: 5.691, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 7, Number of Packets: 47

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10471_78, Duration: 6.113, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 7, Number of Packets: 46

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10323_178, Duration: 5.666, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 10, Number of Packets: 210

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10012_24, Duration: 7.813, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 29, Number of Packets: 1486

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10150_80, Duration: 1.235, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 9, Number of Packets: 48

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11284_201, Duration: 0.903, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10549_16, Duration: 0.062, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 13462_81, Duration: 0.637, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10336_205, Duration: 6.435, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 14, Number of Packets: 257

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10872_159, Duration: 1.65, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 12072_172, Duration: 2.011, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10330_85, Duration: 4.72, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 5, Number of Packets: 126

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 13408_175, Duration: 1.183, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10833_103, Duration: 1.666, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10796_85, Duration: 92.599, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 52, Number of Packets: 1727

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10797_253, Duration: 1.014, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 40

Output: normal