Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10056_131, Duration: 1.087, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10004_36, Duration: 15.043, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 10, Number of Packets: 863

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10228_240, Duration: 0.555, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10841_253, Duration: 6.789, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 84

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11460_163, Duration: 0.483, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 50

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10127_216, Duration: 0.207, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11536_57, Duration: 0.366, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11496_39, Duration: 7.902, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 1153

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10068_74, Duration: 0.601, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 94

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11026_102, Duration: 0.345, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 93

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12278_227, Duration: 0.431, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11385_16, Duration: 0.715, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11218_184, Duration: 0.919, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 4, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10414_11, Duration: 9.085, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 48

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10471_78, Duration: 0.179, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10084_13, Duration: 4.65, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 7, Number of Packets: 43

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10985_250, Duration: 7.524, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 7, Number of Packets: 606

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10527_13, Duration: 2.809, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 259

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12279_85, Duration: 20.973, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 102, Number of Packets: 1042

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10028_175, Duration: 4.029, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 9, Number of Packets: 113

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10014_174, Duration: 1.806, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 4, Number of Packets: 41

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10793_130, Duration: 0.316, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10230_59, Duration: 0.746, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 33

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10224_169, Duration: 2.168, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 42

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10056_99, Duration: 1.99, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11544_178, Duration: 5.169, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 5, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 192.168.220.1, Duration: 0.0, Protocol: 2, Source Port: 1001, Destination IP: 1, Destination Port: 5, Number of Packets: 1412

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10056_125, Duration: 2.448, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 5, Number of Packets: 65

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10781_217, Duration: 0.332, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10782_56, Duration: 23.471, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 23, Number of Packets: 180

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11223_156, Duration: 4.0, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 6, Number of Packets: 101

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10078_66, Duration: 0.693, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10078_76, Duration: 0.04, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10150_27, Duration: 5.822, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 29, Number of Packets: 209

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10279_223, Duration: 0.395, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10319_216, Duration: 1.421, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 9, Number of Packets: 81

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10033_121, Duration: 22.2, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 281

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10576_91, Duration: 0.521, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 42

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10573_189, Duration: 7.788, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 14, Number of Packets: 388

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10575_79, Duration: 5.164, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 6, Number of Packets: 928

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10580_12, Duration: 10.746, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 13, Number of Packets: 209

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12119_49, Duration: 2.742, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 72

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12280_154, Duration: 2.924, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10319_235, Duration: 0.21, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10574_124, Duration: 2.772, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 54

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11565_36, Duration: 0.857, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10129_10, Duration: 9.206, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 12, Number of Packets: 123

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10267_102, Duration: 7.01, Protocol: 1, Source Port: 1, Destination IP: 8, Destination Port: 23, Number of Packets: 143

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10154_234, Duration: 0.639, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11422_53, Duration: 0.524, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 43

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10110_13, Duration: 3.629, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 5, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10593_173, Duration: 4.417, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 10, Number of Packets: 169

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10367_98, Duration: 2.177, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 6, Number of Packets: 56

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10126_185, Duration: 3.338, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10135_77, Duration: 14.759, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 30, Number of Packets: 159

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12011_41, Duration: 0.962, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10582_68, Duration: 1.873, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 12, Number of Packets: 127

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10582_86, Duration: 4.339, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 16, Number of Packets: 155

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10595_80, Duration: 4.04, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 10, Number of Packets: 62

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10581_175, Duration: 1.522, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10274_50, Duration: 0.582, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10658_11, Duration: 0.96, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 4, Number of Packets: 37

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10047_85, Duration: 3.395, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 5, Number of Packets: 67

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12175_157, Duration: 0.933, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 50

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10585_220, Duration: 1.562, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 8, Number of Packets: 85

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10444_140, Duration: 1.175, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10251_198, Duration: 0.371, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 36

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10022_67, Duration: 0.987, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10193_2, Duration: 20.133, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 243

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10254_213, Duration: 0.294, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10584_204, Duration: 1.348, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10590_89, Duration: 1.499, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10415_65, Duration: 0.262, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10370_34, Duration: 0.829, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 32

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11189_13, Duration: 16.928, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 8, Number of Packets: 161

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10741_150, Duration: 0.501, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10585_221, Duration: 0.298, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10596_25, Duration: 2.459, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 41

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10914_141, Duration: 0.385, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12142_80, Duration: 3.188, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10056_129, Duration: 0.345, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10102_54, Duration: 1.447, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 7, Number of Packets: 59

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10795_14, Duration: 2.755, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 57

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10433_232, Duration: 0.441, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10586_63, Duration: 0.102, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10325_11, Duration: 0.502, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 43

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10589_173, Duration: 0.259, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 32

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10840_35, Duration: 0.159, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10296_226, Duration: 102.359, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 38, Number of Packets: 2474

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10605_14, Duration: 1.592, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10012_57, Duration: 1.209, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10194_76, Duration: 1.886, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 6, Number of Packets: 53

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12281_134, Duration: 0.215, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11187_158, Duration: 0.446, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12247_172, Duration: 1.447, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 70

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12282_212, Duration: 0.915, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 49

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10656_106, Duration: 1.33, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10170_26, Duration: 0.113, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10543_146, Duration: 4.255, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 56

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10005_14, Duration: 5.987, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 11, Number of Packets: 775

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10005_11, Duration: 2.801, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5371

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10305_138, Duration: 25.399, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 78, Number of Packets: 2255

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10056_80, Duration: 2.553, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 9, Number of Packets: 163

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10105_20, Duration: 0.885, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 100

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10305_153, Duration: 4.988, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 17, Number of Packets: 172

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10495_108, Duration: 2.039, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 7, Number of Packets: 104

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10305_148, Duration: 14.902, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 70, Number of Packets: 687

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10305_142, Duration: 19.441, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 76, Number of Packets: 1114

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10305_149, Duration: 2.558, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 16, Number of Packets: 160

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10199_168, Duration: 1.573, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 54

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11223_154, Duration: 1.61, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 4, Number of Packets: 87

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10117_94, Duration: 1.306, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 4, Number of Packets: 47

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10107_58, Duration: 0.252, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10291_234, Duration: 1.435, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 50

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11024_86, Duration: 6.829, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 108

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10065_139, Duration: 2.336, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 50

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11023_228, Duration: 4.29, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 109

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11030_206, Duration: 3.152, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 2, Number of Packets: 88

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11034_229, Duration: 2.948, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 11, Number of Packets: 101

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10595_84, Duration: 3.038, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 8, Number of Packets: 49

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10787_163, Duration: 1.287, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10056_127, Duration: 1.783, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 6, Number of Packets: 237

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10135_236, Duration: 2.127, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 9, Number of Packets: 92

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10394_149, Duration: 10.15, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 9, Number of Packets: 155

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10164_230, Duration: 6.981, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 7, Number of Packets: 90

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10214_49, Duration: 0.14, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11337_108, Duration: 0.319, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 9, Number of Packets: 39

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10135_5, Duration: 2.532, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 16, Number of Packets: 147

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10083_129, Duration: 7.17, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 11, Number of Packets: 192

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11338_137, Duration: 1.217, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 35

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10085_66, Duration: 4.247, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 50

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12141_248, Duration: 0.777, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10105_12, Duration: 0.576, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 8, Number of Packets: 160

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10026_249, Duration: 0.111, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10249_121, Duration: 1.328, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 8, Number of Packets: 53

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10001_232, Duration: 91.221, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 46, Number of Packets: 4617

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10003_195, Duration: 3.295, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 7, Number of Packets: 54

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10848_50, Duration: 4.867, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 50

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10061_205, Duration: 2.023, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10712_206, Duration: 3.489, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 5, Number of Packets: 65

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 192.168.100.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10007_19, Duration: 0.175, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10214_33, Duration: 0.299, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 80

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10028_249, Duration: 8.553, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 14, Number of Packets: 101

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12283_37, Duration: 2.778, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 81

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10575_246, Duration: 5.601, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 434

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12284_86, Duration: 0.375, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10621_107, Duration: 1.661, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 33

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10056_190, Duration: 2.2, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 434

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10842_79, Duration: 1.804, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10150_40, Duration: 6.095, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 25, Number of Packets: 203

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10724_102, Duration: 0.084, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10052_14, Duration: 4.629, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 12, Number of Packets: 550

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11551_105, Duration: 0.852, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 201

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11250_25, Duration: 8.348, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 36, Number of Packets: 428

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11551_121, Duration: 4.764, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 215

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11250_15, Duration: 1.168, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 10, Number of Packets: 77

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10163_16, Duration: 0.074, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10106_76, Duration: 7.149, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 37, Number of Packets: 220

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11250_39, Duration: 2.666, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 13, Number of Packets: 58

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10321_204, Duration: 19.468, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 47, Number of Packets: 994

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11014_31, Duration: 7.92, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 12, Number of Packets: 1580

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10118_55, Duration: 0.125, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10082_231, Duration: 0.479, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11256_69, Duration: 0.08, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10306_252, Duration: 2.682, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 55

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10139_39, Duration: 3.884, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 17, Number of Packets: 43

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11263_72, Duration: 4.975, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 103

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11255_183, Duration: 2.118, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 32

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10118_111, Duration: 0.207, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11254_86, Duration: 0.307, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10118_58, Duration: 0.323, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10776_200, Duration: 1.029, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12285_112, Duration: 2.746, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10263_185, Duration: 0.916, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 4, Number of Packets: 36

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10412_239, Duration: 1.491, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10323_178, Duration: 2.541, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 5, Number of Packets: 124

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10336_205, Duration: 2.83, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 5, Number of Packets: 116

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10337_11, Duration: 3.434, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 6, Number of Packets: 85

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10150_42, Duration: 3.022, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 9, Number of Packets: 51

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10330_85, Duration: 4.529, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 5, Number of Packets: 126

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10201_53, Duration: 1.475, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12090_212, Duration: 3.157, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10549_16, Duration: 0.3, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 51

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11331_108, Duration: 0.167, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10214_41, Duration: 0.124, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 39

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11930_132, Duration: 2.34, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 5, Number of Packets: 83

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10109_187, Duration: 2.886, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 7, Number of Packets: 52

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10056_209, Duration: 2.727, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12286_131, Duration: 5.89, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 48

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10117_88, Duration: 1.628, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10174_54, Duration: 0.134, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 6, Number of Packets: 43

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12112_228, Duration: 0.527, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 8, Number of Packets: 48

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11094_53, Duration: 1.347, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 76

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11263_237, Duration: 0.262, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10973_26, Duration: 2.846, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 41

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10800_11, Duration: 0.76, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 42

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10092_101, Duration: 2.134, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10550_115, Duration: 0.944, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11273_188, Duration: 0.648, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12287_120, Duration: 1.205, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10159_81, Duration: 1.108, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10128_221, Duration: 1.413, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 37

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10264_171, Duration: 0.378, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 4, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11274_57, Duration: 1.914, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 49

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10085_100, Duration: 0.62, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 9, Number of Packets: 69

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11276_11, Duration: 0.239, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10121_100, Duration: 2.406, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 41

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10779_30, Duration: 0.119, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11888_224, Duration: 0.309, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10082_60, Duration: 2.899, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11367_122, Duration: 0.332, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11339_118, Duration: 0.039, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10224_175, Duration: 6.8, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 288

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12138_60, Duration: 9.888, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 16, Number of Packets: 1779

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12137_195, Duration: 0.136, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10480_231, Duration: 0.293, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11223_155, Duration: 1.094, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 58

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10056_169, Duration: 1.007, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11853_12, Duration: 1.223, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12288_4, Duration: 2.647, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11394_98, Duration: 2.769, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 7, Number of Packets: 54

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10170_24, Duration: 6.591, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 7, Number of Packets: 69

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11550_77, Duration: 0.95, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10244_14, Duration: 2.694, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 5, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10881_171, Duration: 0.722, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10251_54, Duration: 2.116, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 33

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11279_12, Duration: 2.239, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12289_206, Duration: 0.294, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12288_14, Duration: 0.177, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10528_73, Duration: 2.03, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11963_43, Duration: 0.298, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10139_43, Duration: 3.499, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 23, Number of Packets: 64

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10159_90, Duration: 0.032, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11281_229, Duration: 1.294, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11254_89, Duration: 0.052, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10157_114, Duration: 0.323, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11353_244, Duration: 0.233, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10107_38, Duration: 0.065, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11193_139, Duration: 1.117, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10242_82, Duration: 0.458, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12290_0, Duration: 1.78, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12291_22, Duration: 14.62, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 1827

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10310_200, Duration: 2.971, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 81

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12292_103, Duration: 0.258, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10673_23, Duration: 1.91, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 72

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10145_52, Duration: 1.254, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 37

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12293_1, Duration: 4.235, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 207

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12294_116, Duration: 0.307, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10012_26, Duration: 1.706, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 7, Number of Packets: 55

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11887_133, Duration: 5.142, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11880_74, Duration: 2.661, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10159_170, Duration: 0.024, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10012_80, Duration: 1.022, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11254_90, Duration: 0.071, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10154_48, Duration: 0.306, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11098_7, Duration: 0.322, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10792_144, Duration: 3.341, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 84

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11062_193, Duration: 11.256, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 17, Number of Packets: 680

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11555_193, Duration: 5.926, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 66

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10193_10, Duration: 0.895, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 51

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10983_96, Duration: 3.066, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 54

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12112_100, Duration: 4.22, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12295_85, Duration: 0.267, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10586_20, Duration: 0.2, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10056_118, Duration: 1.263, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10012_8, Duration: 0.077, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 33

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12296_176, Duration: 2.774, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10159_79, Duration: 0.208, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12135_39, Duration: 2.616, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10070_48, Duration: 16.657, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 20, Number of Packets: 255

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12169_105, Duration: 0.684, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12213_134, Duration: 0.055, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12226_11, Duration: 0.225, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10057_20, Duration: 0.112, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10082_30, Duration: 0.092, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11776_253, Duration: 0.206, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12216_180, Duration: 0.211, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10081_16, Duration: 3.729, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 10, Number of Packets: 155

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10012_33, Duration: 0.019, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10431_136, Duration: 3.344, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 9, Number of Packets: 147

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10075_194, Duration: 30.824, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 22, Number of Packets: 696

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10279_58, Duration: 0.133, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11889_144, Duration: 3.374, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 5, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10350_142, Duration: 0.107, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10151_220, Duration: 10.664, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 10, Number of Packets: 148

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12297_231, Duration: 0.041, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10110_11, Duration: 1.077, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 6, Number of Packets: 50

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12298_137, Duration: 0.071, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10369_200, Duration: 0.208, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10151_199, Duration: 0.687, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 2, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10556_108, Duration: 0.276, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10002_114, Duration: 1.928, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 76

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12299_236, Duration: 0.039, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11176_239, Duration: 2.041, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 7, Number of Packets: 66

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10754_14, Duration: 3.849, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 7, Number of Packets: 53

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12300_21, Duration: 0.154, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10240_193, Duration: 0.269, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10333_81, Duration: 4.837, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 3, Number of Packets: 41

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10893_84, Duration: 0.299, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11303_138, Duration: 0.66, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10286_35, Duration: 0.872, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10555_31, Duration: 0.339, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11050_130, Duration: 1.809, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 4, Number of Packets: 49

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10224_172, Duration: 0.031, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10981_3, Duration: 4.409, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 13, Number of Packets: 99

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11978_166, Duration: 0.8, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10189_155, Duration: 0.238, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10205_12, Duration: 11.795, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 9, Number of Packets: 48

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11826_111, Duration: 0.22, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11121_102, Duration: 1.332, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal