Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 11719_242, Duration: 0.553, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 14774_226, Duration: 0.087, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10257_147, Duration: 0.312, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10026_134, Duration: 0.296, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 12577_213, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 14774_228, Duration: 0.062, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10143_41, Duration: 0.205, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 14874_129, Duration: 0.359, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 13571_154, Duration: 2.554, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 77

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 11171_138, Duration: 0.335, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 11046_156, Duration: 0.136, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 14875_67, Duration: 0.369, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10294_187, Duration: 0.207, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 12684_245, Duration: 0.588, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 14335_166, Duration: 0.626, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10756_66, Duration: 0.195, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 14876_176, Duration: 0.255, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 13571_157, Duration: 4.728, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 75

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 11670_8, Duration: 2.506, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 44

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 13571_155, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10068_104, Duration: 1.341, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 13075_108, Duration: 0.213, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 14252_92, Duration: 1.192, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10828_20, Duration: 1.106, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 12341_101, Duration: 3.521, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 64

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 11472_105, Duration: 5.261, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 9, Number of Packets: 72

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 11542_161, Duration: 0.481, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 45

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 12018_4, Duration: 0.419, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 11440_62, Duration: 0.493, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 11035_104, Duration: 0.21, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 11679_19, Duration: 0.629, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10223_122, Duration: 2.254, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 30, Number of Packets: 130

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 11552_44, Duration: 0.442, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 9, Number of Packets: 61

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 11553_186, Duration: 0.196, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 11549_222, Duration: 4.815, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10708_178, Duration: 1.714, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 6, Number of Packets: 42

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10621_107, Duration: 0.564, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 12455_152, Duration: 0.44, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10282_194, Duration: 0.822, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 12339_13, Duration: 0.125, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10224_176, Duration: 1.348, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 11551_69, Duration: 13.635, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 18, Number of Packets: 679

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 12592_175, Duration: 4.941, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 111

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10603_25, Duration: 0.929, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10249_77, Duration: 3.419, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 8, Number of Packets: 79

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10986_192, Duration: 22.777, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 5507

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10163_2, Duration: 5.78, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 14, Number of Packets: 118

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 11046_155, Duration: 1.487, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 72

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10989_56, Duration: 2.008, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 52

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10135_20, Duration: 1.251, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 11293_96, Duration: 0.634, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10274_205, Duration: 2.745, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10065_139, Duration: 2.723, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10135_94, Duration: 0.269, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 14837_217, Duration: 0.171, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10092_117, Duration: 1.611, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10182_24, Duration: 0.726, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 12586_218, Duration: 0.111, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 71

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 11401_199, Duration: 0.235, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10793_162, Duration: 0.163, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 3, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10092_106, Duration: 1.051, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 11376_108, Duration: 0.106, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10521_178, Duration: 1.779, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10068_98, Duration: 4.492, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 163

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 11300_24, Duration: 0.234, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 13375_100, Duration: 0.489, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10296_234, Duration: 0.147, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 13375_98, Duration: 1.638, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 13392_179, Duration: 0.107, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 12941_224, Duration: 1.922, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 192.168.200.1, Duration: 0.0, Protocol: 2, Source Port: 639, Destination IP: 1, Destination Port: 11, Number of Packets: 810

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 12611_102, Duration: 0.607, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 12044_138, Duration: 0.745, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 12465_140, Duration: 1.41, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 47

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10092_107, Duration: 0.251, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10987_129, Duration: 1.328, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 44

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10150_42, Duration: 1.168, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 35

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10126_183, Duration: 0.043, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 12080_109, Duration: 1.771, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 39

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10311_105, Duration: 0.793, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 14400_192, Duration: 0.593, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 12043_247, Duration: 0.505, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 14254_104, Duration: 0.992, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 14201_175, Duration: 0.792, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 14387_68, Duration: 1.582, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 51

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 11353_244, Duration: 1.406, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 12672_222, Duration: 0.211, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 12055_99, Duration: 1.498, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 50

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 12802_237, Duration: 1.971, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10194_82, Duration: 0.295, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10800_19, Duration: 0.103, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 11241_169, Duration: 2.333, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10194_77, Duration: 1.71, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 14810_62, Duration: 0.726, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10349_35, Duration: 0.316, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 12586_217, Duration: 0.824, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 54

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10705_38, Duration: 1.029, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 3, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 14877_91, Duration: 0.754, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 61

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 14327_65, Duration: 0.109, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10005_51, Duration: 0.444, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 33

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10986_193, Duration: 0.136, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 11196_172, Duration: 0.061, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 12210_161, Duration: 0.278, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 11196_175, Duration: 4.936, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 766

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10067_79, Duration: 0.571, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 12551_157, Duration: 1.613, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10499_66, Duration: 0.313, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 14330_26, Duration: 32.172, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 33, Number of Packets: 1321

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10347_14, Duration: 0.571, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 10057_97, Duration: 4.879, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 231

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T12:04:30.988000, End Frame: 2017-03-21T13:04:30.988000, Source IP: 13425_35, Duration: 0.309, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 33

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 192.168.220.16, Duration: 1920.169, Protocol: 3, Source Port: 5301, Destination IP: 1068, Destination Port: 842, Number of Packets: 71496

Output: attacker


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 192.168.200.4, Duration: 1392.761, Protocol: 3, Source Port: 3627, Destination IP: 470, Destination Port: 160, Number of Packets: 145725

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 192.168.200.2, Duration: 0.238, Protocol: 3, Source Port: 332, Destination IP: 4, Destination Port: 6, Number of Packets: 471

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 192.168.200.9, Duration: 338.917, Protocol: 4, Source Port: 670, Destination IP: 85, Destination Port: 65, Number of Packets: 12974

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 192.168.200.5, Duration: 501.978, Protocol: 3, Source Port: 1311, Destination IP: 162, Destination Port: 12, Number of Packets: 13062

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 192.168.200.3, Duration: 0.246, Protocol: 3, Source Port: 239, Destination IP: 3, Destination Port: 6, Number of Packets: 386

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 192.168.200.1, Duration: 0.0, Protocol: 2, Source Port: 364, Destination IP: 1, Destination Port: 4, Number of Packets: 452

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10199_14, Duration: 358.144, Protocol: 1, Source Port: 2, Destination IP: 14, Destination Port: 304, Number of Packets: 8552

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 14252_7, Duration: 4.021, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 8, Number of Packets: 980

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 192.168.220.5, Duration: 531.337, Protocol: 3, Source Port: 1177, Destination IP: 219, Destination Port: 10, Number of Packets: 205232

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 14330_26, Duration: 30.196, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 40, Number of Packets: 467

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10315_240, Duration: 0.167, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 12, Number of Packets: 108

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10046_7, Duration: 1.306, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 14394_238, Duration: 3.227, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 3, Number of Packets: 50

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10067_79, Duration: 3.003, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 45

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 12324_27, Duration: 182.138, Protocol: 1, Source Port: 1, Destination IP: 15, Destination Port: 590, Number of Packets: 4632

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 192.168.210.4, Duration: 522.274, Protocol: 4, Source Port: 940, Destination IP: 193, Destination Port: 156, Number of Packets: 11272

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 192.168.220.8, Duration: 1151.741, Protocol: 3, Source Port: 2655, Destination IP: 375, Destination Port: 8, Number of Packets: 50610

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 192.168.200.8, Duration: 793.621, Protocol: 3, Source Port: 1762, Destination IP: 221, Destination Port: 9, Number of Packets: 33820

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10956_183, Duration: 78.034, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 69, Number of Packets: 34105

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10057_97, Duration: 7.455, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 43, Number of Packets: 184

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10347_19, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 14387_68, Duration: 5.87, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 13, Number of Packets: 227

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10106_93, Duration: 38.032, Protocol: 1, Source Port: 2, Destination IP: 13, Destination Port: 107, Number of Packets: 904

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: DNS, Duration: 127.526, Protocol: 1, Source Port: 1, Destination IP: 16, Destination Port: 10741, Number of Packets: 23267

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10078_74, Duration: 3.703, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 21, Number of Packets: 211

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 192.168.100.5, Duration: 307.573, Protocol: 2, Source Port: 3, Destination IP: 17, Destination Port: 18, Number of Packets: 735338

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 14376_177, Duration: 12.571, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 43, Number of Packets: 591

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 192.168.210.5, Duration: 793.55, Protocol: 4, Source Port: 1583, Destination IP: 223, Destination Port: 82, Number of Packets: 118548

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 11197_133, Duration: 0.503, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 12551_157, Duration: 2.253, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 33

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10087_185, Duration: 6.7, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 15, Number of Packets: 202

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 14252_147, Duration: 1.791, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 18, Number of Packets: 433

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 192.168.220.7, Duration: 0.978, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 153

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10179_174, Duration: 3.72, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 5, Number of Packets: 463

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 12586_217, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 54

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10194_82, Duration: 1.655, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 9, Number of Packets: 107

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10986_192, Duration: 38.388, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 6349

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10541_251, Duration: 94.881, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 215, Number of Packets: 2215

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 11196_175, Duration: 18.901, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 65, Number of Packets: 1416

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 11191_163, Duration: 0.038, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10705_38, Duration: 0.018, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 14877_91, Duration: 0.023, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 14810_62, Duration: 1.419, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 180

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10194_77, Duration: 1.259, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 47

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10650_134, Duration: 1.462, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10346_13, Duration: 0.102, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 22, Number of Packets: 192

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10064_217, Duration: 4.997, Protocol: 1, Source Port: 2, Destination IP: 10, Destination Port: 19, Number of Packets: 805

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10193_2, Duration: 60.184, Protocol: 1, Source Port: 2, Destination IP: 11, Destination Port: 61, Number of Packets: 1307

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10022_249, Duration: 28.495, Protocol: 1, Source Port: 2, Destination IP: 8, Destination Port: 57, Number of Packets: 621

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10199_6, Duration: 143.899, Protocol: 1, Source Port: 2, Destination IP: 14, Destination Port: 115, Number of Packets: 4895

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 13425_35, Duration: 4.657, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 11, Number of Packets: 91

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10276_235, Duration: 10.393, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 6, Number of Packets: 136

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10199_2, Duration: 323.666, Protocol: 1, Source Port: 2, Destination IP: 13, Destination Port: 100, Number of Packets: 8866

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10068_98, Duration: 30.86, Protocol: 1, Source Port: 2, Destination IP: 9, Destination Port: 24, Number of Packets: 788

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10110_13, Duration: 11.804, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 27, Number of Packets: 166

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10370_34, Duration: 3.952, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 11, Number of Packets: 123

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10651_152, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 11323_107, Duration: 0.21, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10131_235, Duration: 2.509, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 7, Number of Packets: 61

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10349_27, Duration: 2.978, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 58

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 13510_197, Duration: 0.391, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 14252_122, Duration: 8.678, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 22, Number of Packets: 588

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10756_68, Duration: 0.642, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10800_19, Duration: 1.22, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 6, Number of Packets: 78

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10591_235, Duration: 8.153, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 93

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10499_66, Duration: 131.297, Protocol: 1, Source Port: 2, Destination IP: 13, Destination Port: 72, Number of Packets: 2954

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10158_155, Duration: 27.779, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 20, Number of Packets: 239

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10150_42, Duration: 1.369, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 5, Number of Packets: 41

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 12197_20, Duration: 1.692, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: EXT_SERVER, Duration: 16.654, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 144, Number of Packets: 1594

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 11357_172, Duration: 4.343, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 504

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 13299_238, Duration: 0.585, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 14252_186, Duration: 3.137, Protocol: 1, Source Port: 1, Destination IP: 9, Destination Port: 13, Number of Packets: 187

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 11156_192, Duration: 11.306, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 21, Number of Packets: 192

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10154_48, Duration: 0.696, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 4, Number of Packets: 71

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10012_49, Duration: 6.839, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 495

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 14427_195, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10186_125, Duration: 5.26, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 35

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10062_127, Duration: 15.532, Protocol: 1, Source Port: 1, Destination IP: 9, Destination Port: 15, Number of Packets: 166

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10180_116, Duration: 27.543, Protocol: 1, Source Port: 1, Destination IP: 12, Destination Port: 29, Number of Packets: 353

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 14252_253, Duration: 3.123, Protocol: 1, Source Port: 1, Destination IP: 10, Destination Port: 12, Number of Packets: 206

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10349_35, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10012_51, Duration: 4.245, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 5, Number of Packets: 522

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10361_88, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10347_14, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 192.168.220.10, Duration: 4.089, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 7218

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10347_36, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 12955_14, Duration: 1.674, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 51

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 192.168.220.13, Duration: 780.53, Protocol: 2, Source Port: 1688, Destination IP: 243, Destination Port: 9, Number of Packets: 134750

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 14813_63, Duration: 12.477, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 61, Number of Packets: 299

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 11862_11, Duration: 1.826, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 11046_154, Duration: 3.446, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 7, Number of Packets: 209

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10118_111, Duration: 4.962, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 22, Number of Packets: 201

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 14401_81, Duration: 42.855, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 68, Number of Packets: 973

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 14875_67, Duration: 1.057, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10199_10, Duration: 28.252, Protocol: 1, Source Port: 2, Destination IP: 13, Destination Port: 57, Number of Packets: 2066

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 192.168.220.14, Duration: 342.187, Protocol: 2, Source Port: 669, Destination IP: 142, Destination Port: 10, Number of Packets: 64406

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10199_1, Duration: 61.401, Protocol: 1, Source Port: 2, Destination IP: 13, Destination Port: 98, Number of Packets: 8712

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10000_198, Duration: 4.721, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 19, Number of Packets: 202

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10199_4, Duration: 153.559, Protocol: 1, Source Port: 2, Destination IP: 15, Destination Port: 84, Number of Packets: 3227

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 11288_50, Duration: 0.996, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 14675_246, Duration: 4.375, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 8, Number of Packets: 77

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 11062_134, Duration: 8.331, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 18, Number of Packets: 297

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 12576_80, Duration: 86.939, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 36, Number of Packets: 1055

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 11826_111, Duration: 13.363, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 8, Number of Packets: 250

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10005_10, Duration: 2.276, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 65

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 14850_42, Duration: 17.302, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 14, Number of Packets: 200

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 14878_211, Duration: 6.208, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10012_34, Duration: 8.211, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 27, Number of Packets: 1246

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10380_123, Duration: 4.142, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 12, Number of Packets: 116

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 192.168.220.9, Duration: 87.351, Protocol: 2, Source Port: 205, Destination IP: 47, Destination Port: 9, Number of Packets: 3461

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 192.168.220.12, Duration: 0.215, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 150

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10012_8, Duration: 6.694, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 11, Number of Packets: 185

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10150_40, Duration: 4.165, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 18, Number of Packets: 148

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10143_71, Duration: 3.461, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 23, Number of Packets: 164

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10325_210, Duration: 3.45, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 62, Number of Packets: 312

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 14254_123, Duration: 1.405, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 81

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10012_19, Duration: 58.058, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 40, Number of Packets: 1953

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10143_41, Duration: 1.707, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 17, Number of Packets: 117

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10121_100, Duration: 2.126, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 11, Number of Packets: 41

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10270_21, Duration: 6.789, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 58, Number of Packets: 347

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 11337_108, Duration: 2.294, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 7, Number of Packets: 55

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 14254_160, Duration: 4.438, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 8, Number of Packets: 96

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 14254_254, Duration: 9.316, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 12, Number of Packets: 160

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 11169_228, Duration: 2.435, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 86

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10012_11, Duration: 6.17, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 20, Number of Packets: 212

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 14254_174, Duration: 4.575, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 10, Number of Packets: 194

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10151_220, Duration: 56.048, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 61, Number of Packets: 578

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10122_64, Duration: 20.757, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 28, Number of Packets: 255

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10151_143, Duration: 39.843, Protocol: 1, Source Port: 2, Destination IP: 10, Destination Port: 70, Number of Packets: 520

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10870_140, Duration: 0.402, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 192.168.220.4, Duration: 1925.536, Protocol: 3, Source Port: 4900, Destination IP: 591, Destination Port: 9, Number of Packets: 105479

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10026_134, Duration: 0.847, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 41

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10263_185, Duration: 5.399, Protocol: 1, Source Port: 2, Destination IP: 8, Destination Port: 13, Number of Packets: 114

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10350_143, Duration: 0.183, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10582_68, Duration: 5.274, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 22, Number of Packets: 233

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10286_35, Duration: 5.721, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 13, Number of Packets: 85

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 12752_243, Duration: 0.26, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10012_75, Duration: 0.525, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 6, Number of Packets: 95

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 11353_244, Duration: 0.364, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 14471_121, Duration: 0.321, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10150_53, Duration: 7.693, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 28, Number of Packets: 248

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10811_30, Duration: 5.25, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 9, Number of Packets: 121

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10071_247, Duration: 0.216, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 31, Number of Packets: 66

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10777_20, Duration: 0.281, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 13633_166, Duration: 0.241, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10087_41, Duration: 29.633, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 80, Number of Packets: 998

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10125_12, Duration: 20.953, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 13, Number of Packets: 90

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10118_56, Duration: 8.099, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 10, Number of Packets: 208

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 12684_245, Duration: 0.37, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10465_139, Duration: 8.784, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 14, Number of Packets: 235

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 11062_249, Duration: 1.289, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 11, Number of Packets: 70

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10143_21, Duration: 2.138, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 22, Number of Packets: 128

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10143_90, Duration: 14.243, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 30, Number of Packets: 402

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10290_128, Duration: 0.234, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 14067_21, Duration: 0.239, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10157_114, Duration: 22.058, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 8, Number of Packets: 411

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 13679_83, Duration: 0.158, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 11766_181, Duration: 0.721, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10266_233, Duration: 2.186, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 5, Number of Packets: 47

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10262_133, Duration: 1.33, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 14853_158, Duration: 1.411, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 35

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10132_239, Duration: 12.562, Protocol: 1, Source Port: 1, Destination IP: 12, Destination Port: 96, Number of Packets: 581

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 14854_62, Duration: 1.264, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 12000_85, Duration: 0.518, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 14252_113, Duration: 9.288, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 7, Number of Packets: 178

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10776_200, Duration: 7.883, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 13, Number of Packets: 146

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10012_9, Duration: 0.002, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 15, Number of Packets: 33

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10012_33, Duration: 1.983, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 7, Number of Packets: 1013

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 14307_145, Duration: 11.38, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 389

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 192.168.220.3, Duration: 0.001, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 11422_53, Duration: 1.983, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 10, Number of Packets: 200

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10028_175, Duration: 1.301, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 24, Number of Packets: 148

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10274_217, Duration: 2.66, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 35

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 192.168.220.15, Duration: 368.442, Protocol: 3, Source Port: 924, Destination IP: 166, Destination Port: 10, Number of Packets: 18930

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10199_3, Duration: 85.72, Protocol: 1, Source Port: 2, Destination IP: 15, Destination Port: 101, Number of Packets: 4751

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10057_29, Duration: 233.137, Protocol: 1, Source Port: 1, Destination IP: 15, Destination Port: 233, Number of Packets: 1682

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 11122_175, Duration: 0.244, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 14683_136, Duration: 0.144, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10143_46, Duration: 0.38, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 3, Number of Packets: 39

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 12177_103, Duration: 0.568, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 11157_11, Duration: 0.302, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10585_220, Duration: 7.124, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 20, Number of Packets: 178

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10586_53, Duration: 0.548, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10934_51, Duration: 0.795, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 13469_71, Duration: 0.348, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 12586_218, Duration: 1.235, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 5, Number of Packets: 456

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10182_24, Duration: 4.389, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 7, Number of Packets: 80

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 12830_58, Duration: 0.083, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10506_9, Duration: 0.106, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10084_13, Duration: 0.818, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 10668_138, Duration: 0.59, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 192.168.220.6, Duration: 0.204, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 150

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 13065_178, Duration: 2.302, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 36

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 12090_212, Duration: 7.233, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 11, Number of Packets: 112

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 12202_72, Duration: 0.204, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 11421_38, Duration: 1.155, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T13:04:31.115000, End Frame: 2017-03-21T14:04:31.115000, Source IP: 14879_101, Duration: 0.314, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 13

Output: normal