Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10107_199, Duration: 4.582, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 48

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11968_149, Duration: 1.246, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 13728_156, Duration: 1.524, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10884_177, Duration: 1.904, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10660_133, Duration: 1.764, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 12432_151, Duration: 2.306, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11135_22, Duration: 1.313, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10684_227, Duration: 1.382, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11303_138, Duration: 0.483, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 12101_104, Duration: 1.153, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10595_68, Duration: 3.5, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 61

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 14401_170, Duration: 1.903, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 8, Number of Packets: 100

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 14402_114, Duration: 14.385, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 14, Number of Packets: 1402

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11718_205, Duration: 0.371, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10104_157, Duration: 6.022, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10092_106, Duration: 2.12, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10847_122, Duration: 2.549, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10091_132, Duration: 0.027, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 13954_169, Duration: 0.316, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10012_72, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 14411_230, Duration: 0.54, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10595_84, Duration: 0.467, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10578_48, Duration: 2.672, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 8, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10893_84, Duration: 0.209, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10199_162, Duration: 3.913, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 4, Number of Packets: 84

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10133_131, Duration: 4.612, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 35

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11262_92, Duration: 0.316, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10072_39, Duration: 2.376, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 18, Number of Packets: 45

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11613_158, Duration: 0.883, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 55

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10012_51, Duration: 2.846, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 72

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10101_145, Duration: 5.881, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 8, Number of Packets: 145

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10012_33, Duration: 3.284, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 1461

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10012_64, Duration: 0.615, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 13950_179, Duration: 4.496, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 48

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10214_48, Duration: 4.636, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 46

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 12526_226, Duration: 0.208, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10521_178, Duration: 2.723, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10113_140, Duration: 0.517, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10012_81, Duration: 2.602, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11520_96, Duration: 0.093, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 12568_212, Duration: 2.766, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 3, Number of Packets: 37

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10744_248, Duration: 1.288, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 2, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10126_184, Duration: 0.255, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10152_104, Duration: 0.152, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10135_210, Duration: 0.53, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10699_88, Duration: 5.468, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 466

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 13076_27, Duration: 0.046, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10106_85, Duration: 0.159, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11620_89, Duration: 0.302, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10163_55, Duration: 0.889, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11621_105, Duration: 0.301, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10824_113, Duration: 0.285, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11109_10, Duration: 0.337, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11622_101, Duration: 1.055, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 119

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11635_142, Duration: 0.939, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 12599_29, Duration: 0.825, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11098_4, Duration: 1.137, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 14617_248, Duration: 0.787, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11094_53, Duration: 1.122, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11112_43, Duration: 1.531, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11931_215, Duration: 4.306, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10675_8, Duration: 1.403, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11100_37, Duration: 1.175, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11104_109, Duration: 3.193, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 35

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11107_155, Duration: 1.484, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11856_27, Duration: 1.215, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 14618_41, Duration: 1.529, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11624_40, Duration: 1.245, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11626_236, Duration: 0.764, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11741_251, Duration: 1.36, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11115_55, Duration: 0.605, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11110_137, Duration: 1.607, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11189_13, Duration: 1.218, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 14018_78, Duration: 0.489, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11101_15, Duration: 2.299, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11632_165, Duration: 1.467, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 52

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10220_185, Duration: 1.012, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10369_237, Duration: 1.211, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 12186_28, Duration: 0.588, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10220_182, Duration: 1.019, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10368_151, Duration: 0.388, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11078_73, Duration: 1.558, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10220_183, Duration: 1.021, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11113_242, Duration: 1.12, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10220_184, Duration: 1.373, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11636_92, Duration: 1.544, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11046_94, Duration: 0.152, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10166_58, Duration: 0.21, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10793_170, Duration: 0.666, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10012_74, Duration: 0.18, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 12602_63, Duration: 0.251, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11416_211, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10156_162, Duration: 0.548, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 14194_198, Duration: 0.442, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 76

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10082_193, Duration: 1.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11230_158, Duration: 0.551, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 14394_238, Duration: 0.277, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 2, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10315_240, Duration: 0.164, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 4, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10361_196, Duration: 0.187, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10377_192, Duration: 0.639, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10495_140, Duration: 5.617, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 4, Number of Packets: 542

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11337_140, Duration: 0.599, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10870_140, Duration: 2.263, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11655_144, Duration: 0.233, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11331_140, Duration: 0.353, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11851_34, Duration: 2.256, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 7, Number of Packets: 68

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10278_104, Duration: 0.759, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10586_12, Duration: 0.584, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10586_40, Duration: 0.287, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10068_66, Duration: 25.551, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 15, Number of Packets: 371

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10354_208, Duration: 2.238, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 59

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10057_187, Duration: 0.038, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 12312_24, Duration: 3.599, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 83

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 12318_206, Duration: 0.211, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 14549_161, Duration: 0.206, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 48

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10248_222, Duration: 0.322, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 12326_116, Duration: 1.571, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 78

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 13725_10, Duration: 1.057, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11116_54, Duration: 2.197, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10758_154, Duration: 0.388, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11803_48, Duration: 3.594, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 71

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 12619_199, Duration: 5.404, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 137

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11475_111, Duration: 0.316, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11051_137, Duration: 0.501, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11802_28, Duration: 3.287, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 12, Number of Packets: 176

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10352_165, Duration: 0.917, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 14556_159, Duration: 1.974, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10535_169, Duration: 1.163, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 12317_41, Duration: 5.065, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 72

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10730_152, Duration: 1.443, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 14619_89, Duration: 2.719, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 12268_248, Duration: 4.791, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 8, Number of Packets: 64

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 14620_73, Duration: 1.021, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 14621_88, Duration: 0.475, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 12859_133, Duration: 0.888, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10056_13, Duration: 0.181, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 96

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 14622_38, Duration: 13.085, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 170

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10564_161, Duration: 0.568, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11071_111, Duration: 7.154, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10264_171, Duration: 1.222, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11116_58, Duration: 1.654, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11440_62, Duration: 0.744, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 14623_180, Duration: 0.865, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 14624_196, Duration: 1.164, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 14625_120, Duration: 0.881, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 12086_95, Duration: 0.47, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 14344_130, Duration: 0.373, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11547_169, Duration: 1.206, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 12472_28, Duration: 1.978, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 60

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 14626_156, Duration: 0.783, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 58

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 12381_154, Duration: 2.535, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 13861_6, Duration: 1.736, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11807_40, Duration: 8.009, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 9, Number of Packets: 67

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 13731_130, Duration: 0.292, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10536_155, Duration: 2.696, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 32

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 12086_87, Duration: 5.159, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 49

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 13733_107, Duration: 1.021, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 14627_145, Duration: 2.186, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10128_221, Duration: 0.854, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11038_71, Duration: 2.168, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 13223_109, Duration: 1.614, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 14628_134, Duration: 6.923, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 70

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10118_58, Duration: 0.944, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 14062_182, Duration: 1.815, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 13900_71, Duration: 0.956, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10149_148, Duration: 1.614, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1168

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10801_121, Duration: 7.743, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 8, Number of Packets: 79

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10056_166, Duration: 3.36, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 32

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10013_97, Duration: 0.564, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 12311_55, Duration: 1.796, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 74

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11784_65, Duration: 2.042, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 50

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 12688_60, Duration: 0.059, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 41

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 12129_155, Duration: 0.925, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 84

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11781_37, Duration: 0.119, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10532_180, Duration: 3.6, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 55

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10887_125, Duration: 8.637, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 6, Number of Packets: 137

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11413_15, Duration: 0.297, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 12687_21, Duration: 6.565, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 88

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10813_109, Duration: 7.966, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 80

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10082_155, Duration: 4.817, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 44

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 12681_54, Duration: 2.698, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 35

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11055_195, Duration: 1.936, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10643_146, Duration: 2.115, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11046_149, Duration: 1.148, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 66

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11046_148, Duration: 4.32, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 281

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11962_211, Duration: 3.24, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 33

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 12778_226, Duration: 1.897, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11158_215, Duration: 1.052, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11676_219, Duration: 1.654, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10092_99, Duration: 5.794, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11970_209, Duration: 0.095, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10459_33, Duration: 1.079, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10457_208, Duration: 0.348, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11611_5, Duration: 0.299, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10064_31, Duration: 0.577, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 50

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 13975_154, Duration: 1.374, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 14629_46, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 12545_69, Duration: 2.229, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11353_244, Duration: 0.856, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 14406_194, Duration: 0.001, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 14, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10027_68, Duration: 0.394, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10535_180, Duration: 0.689, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 12682_199, Duration: 0.229, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 12573_99, Duration: 0.615, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10840_33, Duration: 0.191, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11779_121, Duration: 0.33, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 12079_141, Duration: 0.254, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10163_2, Duration: 0.649, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10586_31, Duration: 0.284, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 12299_236, Duration: 0.259, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11845_138, Duration: 0.705, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10174_54, Duration: 0.23, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 67

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10791_44, Duration: 1.342, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 58

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10788_89, Duration: 24.561, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 41, Number of Packets: 495

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 14458_207, Duration: 0.78, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 44

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10792_144, Duration: 1.14, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10015_248, Duration: 0.177, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11661_76, Duration: 0.703, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10056_175, Duration: 0.095, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10586_42, Duration: 0.503, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10586_52, Duration: 0.302, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10075_200, Duration: 0.106, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10066_134, Duration: 0.047, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 11503_93, Duration: 0.189, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10237_137, Duration: 0.432, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 12625_210, Duration: 3.338, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 10534_122, Duration: 1.033, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T16:04:17.183000, End Frame: 2017-03-20T17:04:17.183000, Source IP: 14630_123, Duration: 0.481, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10056_242, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 192.168.220.14, Duration: 1927.527, Protocol: 2, Source Port: 4665, Destination IP: 535, Destination Port: 10, Number of Packets: 72347

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10087_41, Duration: 15.23, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 40, Number of Packets: 560

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10841_253, Duration: 6.244, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11851_34, Duration: 1.761, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10296_238, Duration: 147.339, Protocol: 1, Source Port: 2, Destination IP: 8, Destination Port: 111, Number of Packets: 4638

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10056_71, Duration: 0.362, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 280

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: DNS, Duration: 72.111, Protocol: 1, Source Port: 1, Destination IP: 12, Destination Port: 5891, Number of Packets: 10995

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11046_155, Duration: 13.077, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 135

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 192.168.220.10, Duration: 31.867, Protocol: 3, Source Port: 82, Destination IP: 13, Destination Port: 9, Number of Packets: 1686

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 192.168.100.5, Duration: 186.21, Protocol: 2, Source Port: 4, Destination IP: 18, Destination Port: 23, Number of Packets: 449788

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 13385_244, Duration: 4.108, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 337

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10321_101, Duration: 2.785, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 17, Number of Packets: 180

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 192.168.220.7, Duration: 0.173, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 143

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 192.168.220.16, Duration: 54.228, Protocol: 2, Source Port: 181, Destination IP: 25, Destination Port: 85, Number of Packets: 2187

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11143_130, Duration: 0.895, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 6, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 12324_27, Duration: 56.85, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 229, Number of Packets: 1737

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10621_107, Duration: 1.466, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 4, Number of Packets: 35

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10758_154, Duration: 1.697, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10360_23, Duration: 10.331, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 18, Number of Packets: 220

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10206_7, Duration: 24.305, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 42, Number of Packets: 297

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11511_2, Duration: 0.102, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 12625_210, Duration: 0.688, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10066_125, Duration: 29.301, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 35, Number of Packets: 187

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10296_225, Duration: 32.283, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 68, Number of Packets: 1870

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10296_228, Duration: 75.168, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 35, Number of Packets: 1396

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10296_226, Duration: 176.031, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 38, Number of Packets: 3847

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 192.168.220.12, Duration: 17.837, Protocol: 3, Source Port: 48, Destination IP: 11, Destination Port: 8, Number of Packets: 1011

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 192.168.220.13, Duration: 487.835, Protocol: 4, Source Port: 1216, Destination IP: 147, Destination Port: 12, Number of Packets: 25183

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 14630_123, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10071_247, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10499_34, Duration: 4.405, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 8, Number of Packets: 122

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10066_134, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10022_204, Duration: 4.194, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 236

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10018_62, Duration: 3.017, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10143_90, Duration: 2.482, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 6, Number of Packets: 82

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10056_22, Duration: 0.39, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 5, Number of Packets: 74

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10062_127, Duration: 2.483, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 41

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10296_232, Duration: 2.225, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 6, Number of Packets: 170

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10058_155, Duration: 11.742, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 11, Number of Packets: 118

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 192.168.220.9, Duration: 853.257, Protocol: 2, Source Port: 1860, Destination IP: 282, Destination Port: 7, Number of Packets: 41024

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 192.168.220.8, Duration: 1.833, Protocol: 2, Source Port: 7, Destination IP: 5, Destination Port: 7, Number of Packets: 170

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 12547_248, Duration: 1.388, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 51

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 192.168.100.4, Duration: 18.223, Protocol: 2, Source Port: 71, Destination IP: 8, Destination Port: 20, Number of Packets: 512

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 192.168.210.5, Duration: 765.191, Protocol: 2, Source Port: 1593, Destination IP: 253, Destination Port: 19, Number of Packets: 25538

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: EXT_SERVER, Duration: 14.701, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 147, Number of Packets: 1816

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 192.168.200.8, Duration: 1680.386, Protocol: 2, Source Port: 2456, Destination IP: 324, Destination Port: 9, Number of Packets: 34732

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10075_200, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10023_14, Duration: 3.019, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 266

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10575_79, Duration: 0.649, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 37

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11046_136, Duration: 0.386, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11015_151, Duration: 2.667, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 5, Number of Packets: 59

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10162_65, Duration: 34.33, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 1427

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10296_227, Duration: 36.141, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 54, Number of Packets: 1659

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 192.168.220.15, Duration: 533.034, Protocol: 3, Source Port: 1090, Destination IP: 165, Destination Port: 8, Number of Packets: 260689

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 192.168.220.5, Duration: 0.291, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 152

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 192.168.220.11, Duration: 0.181, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 146

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 192.168.220.6, Duration: 20.83, Protocol: 3, Source Port: 48, Destination IP: 11, Destination Port: 8, Number of Packets: 1022

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 192.168.220.4, Duration: 349.284, Protocol: 2, Source Port: 809, Destination IP: 146, Destination Port: 10, Number of Packets: 199353

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 192.168.220.3, Duration: 0.001, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10648_199, Duration: 1.439, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 192.168.200.4, Duration: 0.17, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 138

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11027_34, Duration: 12.729, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 15, Number of Packets: 310

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10296_230, Duration: 94.946, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 57, Number of Packets: 2943

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 192.168.200.9, Duration: 33.867, Protocol: 2, Source Port: 72, Destination IP: 2, Destination Port: 3, Number of Packets: 870

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 192.168.220.2, Duration: 0.03, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 0.0.0.0, Duration: 0.006, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10043_254, Duration: 4.633, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 100, Number of Packets: 400

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 192.168.210.3, Duration: 0.117, Protocol: 2, Source Port: 16, Destination IP: 3, Destination Port: 5, Number of Packets: 28

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10586_42, Duration: 0.074, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10586_52, Duration: 0.537, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10056_175, Duration: 1.335, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10495_140, Duration: 1.819, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 11661_76, Duration: 1.267, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 192.168.210.1, Duration: 0.0, Protocol: 1, Source Port: 59, Destination IP: 1, Destination Port: 6, Number of Packets: 63

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 192.168.200.5, Duration: 0.256, Protocol: 2, Source Port: 5, Destination IP: 4, Destination Port: 5, Number of Packets: 145

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10184_177, Duration: 2.787, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 43

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10057_29, Duration: 76.055, Protocol: 1, Source Port: 1, Destination IP: 8, Destination Port: 79, Number of Packets: 595

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10056_76, Duration: 0.996, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 37

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 14402_114, Duration: 82.916, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 75, Number of Packets: 5851

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10064_217, Duration: 0.984, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 9, Number of Packets: 215

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 10001_8, Duration: 20.368, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 47, Number of Packets: 349

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-20T17:04:17.493000, End Frame: 2017-03-20T18:04:17.493000, Source IP: 14401_170, Duration: 14.805, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 36, Number of Packets: 430

Output: normal