Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10532_180, Duration: 7.584, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 17, Number of Packets: 242

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10637_200, Duration: 11.258, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 7, Number of Packets: 185

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11388_60, Duration: 0.139, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10281_198, Duration: 0.884, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 4, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10199_162, Duration: 33.466, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 23, Number of Packets: 572

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10263_185, Duration: 5.508, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 11, Number of Packets: 111

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10968_14, Duration: 0.147, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10060_27, Duration: 158.03, Protocol: 1, Source Port: 1, Destination IP: 11, Destination Port: 488, Number of Packets: 3359

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10370_33, Duration: 1.289, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 4, Number of Packets: 33

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10194_74, Duration: 0.086, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10448_155, Duration: 0.112, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10129_14, Duration: 24.273, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 31, Number of Packets: 229

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10005_36, Duration: 28.636, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 14, Number of Packets: 1485

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10078_80, Duration: 0.045, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 13318_204, Duration: 0.179, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10632_175, Duration: 0.059, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10194_77, Duration: 1.217, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10633_81, Duration: 0.927, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10107_10, Duration: 0.486, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10967_1, Duration: 0.297, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10450_7, Duration: 0.09, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10635_192, Duration: 0.082, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11244_2, Duration: 0.095, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10638_99, Duration: 0.105, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10629_12, Duration: 0.526, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10638_100, Duration: 0.107, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10786_4, Duration: 7.382, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 8, Number of Packets: 87

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10667_192, Duration: 35.852, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 13, Number of Packets: 1870

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10667_208, Duration: 6.036, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 5, Number of Packets: 696

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10056_234, Duration: 3.799, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 5, Number of Packets: 533

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10049_131, Duration: 3.427, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10056_27, Duration: 1.668, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 9, Number of Packets: 190

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10583_206, Duration: 4.696, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 6, Number of Packets: 72

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 192.168.210.3, Duration: 0.052, Protocol: 3, Source Port: 926, Destination IP: 3, Destination Port: 6, Number of Packets: 1364

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10056_187, Duration: 1.199, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 10, Number of Packets: 163

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10619_191, Duration: 7.929, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 7, Number of Packets: 610

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10620_86, Duration: 0.045, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10527_10, Duration: 21.857, Protocol: 1, Source Port: 2, Destination IP: 8, Destination Port: 37, Number of Packets: 1088

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10047_85, Duration: 1.393, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 33

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10068_74, Duration: 2.553, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 36

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10056_87, Duration: 2.5, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 8, Number of Packets: 1065

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11145_122, Duration: 3.927, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 50

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10056_241, Duration: 2.28, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 5, Number of Packets: 177

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 192.168.210.5, Duration: 79.147, Protocol: 3, Source Port: 250, Destination IP: 59, Destination Port: 76, Number of Packets: 2476

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10014_174, Duration: 0.372, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10184_177, Duration: 4.402, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 7, Number of Packets: 79

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 192.168.200.3, Duration: 0.106, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10056_41, Duration: 3.712, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 7, Number of Packets: 105

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10305_138, Duration: 29.158, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 48, Number of Packets: 1555

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10074_39, Duration: 5.678, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 28, Number of Packets: 214

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11337_108, Duration: 11.606, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 5, Number of Packets: 179

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10305_148, Duration: 16.987, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 64, Number of Packets: 623

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10105_8, Duration: 0.75, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 96

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10305_153, Duration: 5.409, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 14, Number of Packets: 146

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10305_142, Duration: 18.587, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 58, Number of Packets: 833

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10150_27, Duration: 6.475, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 22, Number of Packets: 207

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10951_141, Duration: 2.558, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10117_80, Duration: 30.926, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 93, Number of Packets: 747

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10305_149, Duration: 1.892, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 14, Number of Packets: 142

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10056_151, Duration: 0.917, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 7, Number of Packets: 242

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10022_249, Duration: 11.264, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 35, Number of Packets: 349

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11930_132, Duration: 13.678, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 14, Number of Packets: 183

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10073_65, Duration: 11.04, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 64, Number of Packets: 403

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10081_164, Duration: 160.041, Protocol: 1, Source Port: 2, Destination IP: 8, Destination Port: 88, Number of Packets: 1804

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10193_8, Duration: 0.719, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10085_31, Duration: 10.412, Protocol: 1, Source Port: 2, Destination IP: 8, Destination Port: 79, Number of Packets: 366

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11046_155, Duration: 8.635, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 12, Number of Packets: 309

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10527_1, Duration: 39.925, Protocol: 1, Source Port: 2, Destination IP: 8, Destination Port: 45, Number of Packets: 2457

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10056_152, Duration: 1.383, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 4, Number of Packets: 422

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10163_9, Duration: 8.7, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 31, Number of Packets: 219

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10083_129, Duration: 10.694, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 18, Number of Packets: 209

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10092_100, Duration: 24.888, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 15, Number of Packets: 99

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10087_41, Duration: 21.745, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 41, Number of Packets: 771

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10527_2, Duration: 267.18, Protocol: 1, Source Port: 2, Destination IP: 8, Destination Port: 73, Number of Packets: 7016

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11023_228, Duration: 3.157, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 74

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10090_217, Duration: 1.707, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 7, Number of Packets: 46

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11025_216, Duration: 1.244, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 51

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11028_110, Duration: 0.652, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10117_94, Duration: 6.177, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 14, Number of Packets: 129

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10438_216, Duration: 7.454, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 14, Number of Packets: 127

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10150_39, Duration: 6.494, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 15, Number of Packets: 146

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10095_80, Duration: 9.237, Protocol: 1, Source Port: 2, Destination IP: 8, Destination Port: 22, Number of Packets: 189

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10094_75, Duration: 7.363, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 14, Number of Packets: 115

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10012_58, Duration: 1.885, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 5, Number of Packets: 80

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10085_66, Duration: 5.33, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 12, Number of Packets: 161

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11296_36, Duration: 2.9, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10278_66, Duration: 16.652, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 19, Number of Packets: 381

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11030_206, Duration: 4.618, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 54

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10064_169, Duration: 8.693, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 22, Number of Packets: 380

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10987_129, Duration: 2.529, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 32

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10163_59, Duration: 62.518, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 92, Number of Packets: 1096

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11034_229, Duration: 5.154, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 13, Number of Packets: 138

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10056_138, Duration: 2.241, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 5, Number of Packets: 97

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10437_63, Duration: 117.675, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 9, Number of Packets: 2975

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10573_189, Duration: 35.121, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 126, Number of Packets: 1977

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10578_200, Duration: 2.806, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 12, Number of Packets: 296

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10575_79, Duration: 11.955, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 14, Number of Packets: 788

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10064_217, Duration: 3.54, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 13, Number of Packets: 615

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 12959_197, Duration: 5.328, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 21, Number of Packets: 235

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10012_18, Duration: 17.533, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 22, Number of Packets: 509

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10389_108, Duration: 32.926, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 7, Number of Packets: 676

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10129_10, Duration: 27.053, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 19, Number of Packets: 335

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10580_12, Duration: 262.086, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 21, Number of Packets: 2099

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10132_239, Duration: 11.033, Protocol: 1, Source Port: 1, Destination IP: 9, Destination Port: 86, Number of Packets: 517

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10574_124, Duration: 22.217, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 49, Number of Packets: 515

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 13331_53, Duration: 1.33, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 37

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10126_182, Duration: 4.085, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 33

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10594_53, Duration: 2.707, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 5, Number of Packets: 187

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10150_40, Duration: 0.72, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 7, Number of Packets: 54

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10593_173, Duration: 21.526, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 30, Number of Packets: 535

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10154_42, Duration: 0.584, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 32

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10319_235, Duration: 1.319, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 43

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10429_162, Duration: 10.043, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 24, Number of Packets: 395

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10658_11, Duration: 2.446, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 8, Number of Packets: 84

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10582_68, Duration: 7.803, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 36, Number of Packets: 374

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10433_9, Duration: 1.482, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 57

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10367_98, Duration: 6.686, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 19, Number of Packets: 163

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10886_125, Duration: 0.73, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10150_53, Duration: 5.307, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 13, Number of Packets: 111

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10581_178, Duration: 1.326, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10110_13, Duration: 8.326, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 23, Number of Packets: 142

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10263_186, Duration: 4.237, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 10, Number of Packets: 85

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 13332_109, Duration: 1.172, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10663_157, Duration: 3.052, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 6, Number of Packets: 267

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10585_220, Duration: 13.766, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 20, Number of Packets: 207

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10589_173, Duration: 1.676, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 6, Number of Packets: 96

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10586_14, Duration: 0.561, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10022_67, Duration: 3.594, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 6, Number of Packets: 118

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10595_80, Duration: 8.771, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 17, Number of Packets: 124

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10582_86, Duration: 10.65, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 31, Number of Packets: 336

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10267_102, Duration: 10.105, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 38, Number of Packets: 349

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10584_204, Duration: 4.457, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 8, Number of Packets: 73

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10370_34, Duration: 6.382, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 11, Number of Packets: 126

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10292_140, Duration: 2.184, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 7, Number of Packets: 53

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10220_206, Duration: 7.86, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 10, Number of Packets: 99

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10276_216, Duration: 4.298, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 9, Number of Packets: 86

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10325_11, Duration: 5.353, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 32, Number of Packets: 320

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10012_24, Duration: 2.121, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 15, Number of Packets: 181

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 12007_177, Duration: 0.626, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11421_38, Duration: 2.082, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 4, Number of Packets: 73

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10590_89, Duration: 2.478, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 6, Number of Packets: 103

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10585_221, Duration: 3.125, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 10, Number of Packets: 100

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10056_54, Duration: 0.83, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10914_141, Duration: 2.342, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10102_54, Duration: 6.86, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 16, Number of Packets: 120

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10251_198, Duration: 2.679, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 6, Number of Packets: 104

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10415_65, Duration: 2.013, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 42

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10895_69, Duration: 1.336, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 13333_143, Duration: 14.234, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 109

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 12136_238, Duration: 1.427, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10102_83, Duration: 4.951, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 17, Number of Packets: 141

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10596_26, Duration: 0.769, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 35

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10875_6, Duration: 6.551, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 12, Number of Packets: 160

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10216_9, Duration: 4.461, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 4, Number of Packets: 54

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10056_80, Duration: 4.773, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 8, Number of Packets: 95

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10180_116, Duration: 13.553, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 13, Number of Packets: 163

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10225_200, Duration: 25.518, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 12, Number of Packets: 401

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10223_4, Duration: 41.278, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 195, Number of Packets: 3919

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10223_24, Duration: 91.295, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 118, Number of Packets: 2631

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10223_61, Duration: 15.176, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 154, Number of Packets: 1788

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 12224_106, Duration: 6.012, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 86

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10035_234, Duration: 2.32, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 52

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10843_117, Duration: 7.452, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 388

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10671_110, Duration: 7.603, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 20, Number of Packets: 261

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10979_53, Duration: 57.753, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 74, Number of Packets: 2943

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10605_14, Duration: 2.139, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 7, Number of Packets: 110

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10527_8, Duration: 8.118, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 47, Number of Packets: 501

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10998_36, Duration: 5.238, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 6, Number of Packets: 73

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11204_141, Duration: 2.18, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 60

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10056_129, Duration: 1.949, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 9, Number of Packets: 331

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10022_175, Duration: 9.664, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 45, Number of Packets: 419

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11441_102, Duration: 9.067, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 25, Number of Packets: 158

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11046_157, Duration: 1.86, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 8, Number of Packets: 146

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10230_59, Duration: 2.061, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 91

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10056_184, Duration: 9.131, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 11, Number of Packets: 99

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10228_240, Duration: 4.506, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 36

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10004_7, Duration: 11.325, Protocol: 1, Source Port: 2, Destination IP: 8, Destination Port: 22, Number of Packets: 424

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11404_86, Duration: 2.77, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 190

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10063_205, Duration: 1.615, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 25, Number of Packets: 182

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 12208_169, Duration: 0.313, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10289_238, Duration: 0.204, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10226_187, Duration: 0.893, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10205_12, Duration: 25.351, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 15, Number of Packets: 103

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10187_115, Duration: 2.252, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10183_10, Duration: 0.317, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 443

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 13334_72, Duration: 1.136, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 32

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10028_175, Duration: 13.459, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 75, Number of Packets: 463

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11198_156, Duration: 8.061, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 16, Number of Packets: 104

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10609_250, Duration: 48.675, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 19, Number of Packets: 612

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10465_42, Duration: 2.449, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 45

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 13335_165, Duration: 2.237, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 5, Number of Packets: 224

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10595_68, Duration: 7.609, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 13, Number of Packets: 112

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 192.168.100.3, Duration: 0.001, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 192.168.210.4, Duration: 0.0, Protocol: 3, Source Port: 13, Destination IP: 3, Destination Port: 37, Number of Packets: 61

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10598_125, Duration: 40.141, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 108, Number of Packets: 1721

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10601_223, Duration: 14.447, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 27, Number of Packets: 307

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10056_157, Duration: 1.273, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 256

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10022_230, Duration: 1.456, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 6, Number of Packets: 64

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10037_68, Duration: 3.146, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 17, Number of Packets: 131

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10078_74, Duration: 4.385, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 15, Number of Packets: 147

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10603_25, Duration: 19.304, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 45, Number of Packets: 378

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 13192_26, Duration: 5.807, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 12, Number of Packets: 417

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 12873_76, Duration: 2.488, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 43

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10604_33, Duration: 23.567, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 42, Number of Packets: 351

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 13336_99, Duration: 2.181, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10135_61, Duration: 11.623, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 16, Number of Packets: 152

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10611_36, Duration: 9.27, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 8, Number of Packets: 87

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10610_16, Duration: 2.969, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 15, Number of Packets: 145

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10606_231, Duration: 1.673, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11184_94, Duration: 0.561, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10954_31, Duration: 0.811, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 45

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10868_13, Duration: 1.997, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 54

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10003_194, Duration: 14.896, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 13, Number of Packets: 142

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10004_36, Duration: 9.333, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 11, Number of Packets: 419

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 13337_213, Duration: 2.715, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10194_82, Duration: 1.671, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10075_194, Duration: 37.249, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 17, Number of Packets: 1059

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10386_163, Duration: 0.655, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10107_39, Duration: 5.757, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 6, Number of Packets: 61

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10603_44, Duration: 10.493, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 33, Number of Packets: 269

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 13338_180, Duration: 2.307, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10449_5, Duration: 123.759, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 26, Number of Packets: 3409

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 13018_146, Duration: 11.804, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 6, Number of Packets: 270

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 13081_215, Duration: 1.723, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10252_12, Duration: 4.835, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 9, Number of Packets: 151

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 13210_107, Duration: 1.32, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11109_10, Duration: 0.765, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10273_211, Duration: 1.106, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 7, Number of Packets: 33

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10151_143, Duration: 24.089, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 27, Number of Packets: 242

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10642_42, Duration: 21.054, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 9, Number of Packets: 247

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10251_54, Duration: 32.81, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 28, Number of Packets: 444

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 12973_131, Duration: 7.659, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 6, Number of Packets: 98

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11624_40, Duration: 1.03, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11110_131, Duration: 0.8, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11100_37, Duration: 0.995, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10972_4, Duration: 31.149, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 12, Number of Packets: 398

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10143_90, Duration: 8.657, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 14, Number of Packets: 196

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11856_27, Duration: 1.142, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10082_233, Duration: 3.642, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 6, Number of Packets: 54

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11626_235, Duration: 6.298, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 69

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11094_53, Duration: 10.448, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 33, Number of Packets: 380

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11635_142, Duration: 0.755, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11093_42, Duration: 1.155, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10644_249, Duration: 0.71, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11623_98, Duration: 0.975, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10781_213, Duration: 1.797, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11508_84, Duration: 2.343, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11859_122, Duration: 1.34, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10270_15, Duration: 5.667, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 12, Number of Packets: 114

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10837_134, Duration: 1.42, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10928_34, Duration: 1.574, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11580_207, Duration: 1.029, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11858_147, Duration: 1.632, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 32

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10256_224, Duration: 7.334, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 9, Number of Packets: 138

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10330_85, Duration: 10.617, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 10, Number of Packets: 202

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10279_34, Duration: 6.748, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 7, Number of Packets: 88

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10781_212, Duration: 2.628, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11098_7, Duration: 2.483, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10644_250, Duration: 2.494, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10135_62, Duration: 0.629, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11628_21, Duration: 1.233, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10754_14, Duration: 5.673, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 6, Number of Packets: 51

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11107_155, Duration: 1.553, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11112_43, Duration: 1.28, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11854_138, Duration: 1.654, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11542_161, Duration: 0.399, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 8, Number of Packets: 64

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10056_131, Duration: 4.503, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 8, Number of Packets: 262

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11479_15, Duration: 2.321, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 8, Number of Packets: 53

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11471_173, Duration: 1.272, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 5, Number of Packets: 57

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10595_100, Duration: 10.101, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 15, Number of Packets: 105

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10135_23, Duration: 9.943, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 17, Number of Packets: 128

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11380_11, Duration: 0.056, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10319_216, Duration: 6.631, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 12, Number of Packets: 120

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10591_216, Duration: 2.151, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 12, Number of Packets: 91

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11014_185, Duration: 54.193, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 77, Number of Packets: 4442

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10056_85, Duration: 0.417, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 6, Number of Packets: 248

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10056_78, Duration: 9.212, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 9, Number of Packets: 1195

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11193_139, Duration: 0.966, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11679_19, Duration: 9.539, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 18, Number of Packets: 119

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 12743_186, Duration: 1.67, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 14, Number of Packets: 274

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10223_122, Duration: 3.603, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 75, Number of Packets: 303

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11549_222, Duration: 14.592, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 13, Number of Packets: 49

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11875_193, Duration: 4.488, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 12, Number of Packets: 101

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10004_10, Duration: 8.909, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 11, Number of Packets: 245

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10003_193, Duration: 5.303, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 5, Number of Packets: 62

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10022_166, Duration: 1.314, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 46

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10123_173, Duration: 0.478, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 3, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10194_76, Duration: 4.761, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 8, Number of Packets: 84

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10646_138, Duration: 0.683, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10473_210, Duration: 3.089, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 51

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10455_2, Duration: 3.757, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 4, Number of Packets: 70

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 192.168.200.2, Duration: 0.007, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10050_126, Duration: 0.514, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 12339_13, Duration: 3.878, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 10, Number of Packets: 64

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11251_121, Duration: 18.956, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 31, Number of Packets: 1068

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 12134_126, Duration: 7.301, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 25, Number of Packets: 419

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11551_120, Duration: 8.896, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 25, Number of Packets: 353

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11250_25, Duration: 38.093, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 186, Number of Packets: 1867

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10073_64, Duration: 11.422, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 79, Number of Packets: 591

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10163_10, Duration: 47.65, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 86, Number of Packets: 1241

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11015_151, Duration: 1.788, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 39

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10056_51, Duration: 0.369, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 6, Number of Packets: 216

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10194_100, Duration: 7.154, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 13, Number of Packets: 134

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10106_76, Duration: 21.982, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 122, Number of Packets: 739

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10074_40, Duration: 21.375, Protocol: 1, Source Port: 2, Destination IP: 9, Destination Port: 83, Number of Packets: 592

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11250_15, Duration: 3.766, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 29, Number of Packets: 216

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11250_39, Duration: 9.02, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 66, Number of Packets: 308

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10012_19, Duration: 16.025, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 33, Number of Packets: 745

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 10139_39, Duration: 5.386, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 30, Number of Packets: 80

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T13:01:29.653000, End Frame: 2017-03-16T14:01:29.653000, Source IP: 11379_126, Duration: 6.351, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 17, Number of Packets: 2658

Output: normal