Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10012_18, Duration: 0.971, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 7, Number of Packets: 148

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10605_14, Duration: 3.339, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 6, Number of Packets: 80

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10128_221, Duration: 4.059, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 5, Number of Packets: 52

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10608_97, Duration: 5.165, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 80

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10786_4, Duration: 9.186, Protocol: 1, Source Port: 1, Destination IP: 8, Destination Port: 11, Number of Packets: 130

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10573_189, Duration: 16.191, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 53, Number of Packets: 1141

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10279_199, Duration: 3.565, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 8, Number of Packets: 133

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10431_220, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10527_3, Duration: 50.945, Protocol: 1, Source Port: 2, Destination IP: 12, Destination Port: 58, Number of Packets: 2410

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 192.168.200.5, Duration: 6.79, Protocol: 3, Source Port: 40, Destination IP: 7, Destination Port: 8, Number of Packets: 400

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10607_84, Duration: 5.482, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 6, Number of Packets: 101

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10595_98, Duration: 5.056, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 11, Number of Packets: 73

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10270_15, Duration: 14.405, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 63, Number of Packets: 399

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10135_236, Duration: 4.483, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 14, Number of Packets: 118

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10642_32, Duration: 1.184, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10200_153, Duration: 4.004, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 4, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10107_210, Duration: 7.696, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 16, Number of Packets: 146

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10527_2, Duration: 141.192, Protocol: 1, Source Port: 2, Destination IP: 11, Destination Port: 35, Number of Packets: 4434

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10074_40, Duration: 13.051, Protocol: 1, Source Port: 2, Destination IP: 8, Destination Port: 53, Number of Packets: 360

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10072_42, Duration: 1.022, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 7, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10073_64, Duration: 4.651, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 23, Number of Packets: 212

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10414_80, Duration: 2.272, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 6, Number of Packets: 46

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10206_7, Duration: 9.255, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 20, Number of Packets: 107

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10139_39, Duration: 0.49, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 12057_65, Duration: 0.091, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10456_29, Duration: 2.286, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 8, Number of Packets: 62

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10085_31, Duration: 18.716, Protocol: 1, Source Port: 2, Destination IP: 9, Destination Port: 62, Number of Packets: 395

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10744_248, Duration: 1.2, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 11344_47, Duration: 0.304, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 192.168.220.16, Duration: 1388.015, Protocol: 2, Source Port: 1459, Destination IP: 212, Destination Port: 11, Number of Packets: 29377

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10089_53, Duration: 15.143, Protocol: 1, Source Port: 2, Destination IP: 8, Destination Port: 31, Number of Packets: 265

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10010_37, Duration: 7.404, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 27, Number of Packets: 127

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10064_217, Duration: 2.99, Protocol: 1, Source Port: 1, Destination IP: 10, Destination Port: 15, Number of Packets: 718

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 192.168.220.14, Duration: 12.705, Protocol: 3, Source Port: 40, Destination IP: 7, Destination Port: 8, Number of Packets: 420

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 192.168.220.5, Duration: 27.214, Protocol: 3, Source Port: 52, Destination IP: 10, Destination Port: 11, Number of Packets: 1006

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10126_185, Duration: 1.313, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10578_200, Duration: 18.86, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 21, Number of Packets: 722

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 12959_197, Duration: 5.439, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 7, Number of Packets: 116

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10103_81, Duration: 0.099, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10575_79, Duration: 20.758, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 18, Number of Packets: 1184

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 11357_180, Duration: 5.892, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 5, Number of Packets: 90

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 11875_193, Duration: 9.813, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 12, Number of Packets: 129

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 12732_64, Duration: 9.188, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 67

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10056_163, Duration: 3.104, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 12324_27, Duration: 55.185, Protocol: 1, Source Port: 1, Destination IP: 9, Destination Port: 156, Number of Packets: 1156

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10435_194, Duration: 1.326, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10673_23, Duration: 0.722, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 192.168.200.9, Duration: 406.401, Protocol: 3, Source Port: 772, Destination IP: 159, Destination Port: 13, Number of Packets: 13382

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 192.168.220.13, Duration: 439.819, Protocol: 3, Source Port: 971, Destination IP: 185, Destination Port: 11, Number of Packets: 23781

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10207_47, Duration: 3.184, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10056_241, Duration: 1.06, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 5, Number of Packets: 186

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10584_202, Duration: 0.57, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10220_206, Duration: 5.528, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 6, Number of Packets: 53

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 12959_176, Duration: 0.28, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10004_7, Duration: 14.975, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 11, Number of Packets: 1584

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10056_217, Duration: 0.77, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10501_19, Duration: 2.511, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 39

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 192.168.220.7, Duration: 633.964, Protocol: 4, Source Port: 1244, Destination IP: 238, Destination Port: 10, Number of Packets: 21234

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10586_44, Duration: 0.253, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10056_130, Duration: 0.376, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10586_37, Duration: 0.645, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 13198_235, Duration: 0.452, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 192.168.220.3, Duration: 2.858, Protocol: 1, Source Port: 3, Destination IP: 2, Destination Port: 3, Number of Packets: 56

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10594_53, Duration: 1.08, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 83

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10663_157, Duration: 0.028, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10073_65, Duration: 14.201, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 38, Number of Packets: 302

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10068_2, Duration: 5.98, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 15, Number of Packets: 234

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10414_10, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10072_43, Duration: 1.817, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 10, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10082_47, Duration: 2.446, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 4, Number of Packets: 91

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10158_155, Duration: 6.63, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 7, Number of Packets: 41

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10590_89, Duration: 2.646, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 6, Number of Packets: 85

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10433_9, Duration: 0.984, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 41

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10658_11, Duration: 1.646, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 5, Number of Packets: 42

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10131_235, Duration: 0.13, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 5, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 11423_157, Duration: 0.746, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 5, Number of Packets: 45

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 12156_144, Duration: 11.492, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 13, Number of Packets: 128

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10056_223, Duration: 0.893, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 6, Number of Packets: 680

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 192.168.220.8, Duration: 14.071, Protocol: 3, Source Port: 40, Destination IP: 7, Destination Port: 8, Number of Packets: 426

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10606_235, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 192.168.220.9, Duration: 14.683, Protocol: 3, Source Port: 40, Destination IP: 7, Destination Port: 8, Number of Packets: 424

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10056_65, Duration: 2.776, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 5, Number of Packets: 125

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10800_19, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 192.168.200.4, Duration: 115.972, Protocol: 4, Source Port: 426, Destination IP: 83, Destination Port: 10, Number of Packets: 5029

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 192.168.220.10, Duration: 8.699, Protocol: 3, Source Port: 40, Destination IP: 7, Destination Port: 8, Number of Packets: 411

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10058_155, Duration: 19.992, Protocol: 1, Source Port: 1, Destination IP: 9, Destination Port: 20, Number of Packets: 245

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10184_177, Duration: 14.134, Protocol: 1, Source Port: 1, Destination IP: 8, Destination Port: 17, Number of Packets: 203

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10056_20, Duration: 0.992, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 7, Number of Packets: 109

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 192.168.100.6, Duration: 10.594, Protocol: 2, Source Port: 4, Destination IP: 7, Destination Port: 69, Number of Packets: 475

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10621_107, Duration: 2.438, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 5, Number of Packets: 59

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10783_192, Duration: 5.704, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 8, Number of Packets: 110

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10249_71, Duration: 1.529, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 11, Number of Packets: 93

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10013_97, Duration: 1.51, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 32

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 192.168.210.5, Duration: 489.016, Protocol: 3, Source Port: 1045, Destination IP: 213, Destination Port: 12, Number of Packets: 14640

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10191_163, Duration: 13.338, Protocol: 1, Source Port: 1, Destination IP: 9, Destination Port: 13, Number of Packets: 161

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10139_42, Duration: 1.11, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 6, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10139_43, Duration: 6.564, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 18, Number of Packets: 49

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 12311_134, Duration: 0.367, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10069_75, Duration: 0.08, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10107_197, Duration: 0.23, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 5, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10080_156, Duration: 7.01, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 13, Number of Packets: 145

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10194_100, Duration: 5.964, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 13, Number of Packets: 137

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10394_149, Duration: 6.682, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 13, Number of Packets: 172

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10084_230, Duration: 12.582, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 66

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10090_196, Duration: 0.598, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 5, Number of Packets: 42

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10056_87, Duration: 4.398, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 10, Number of Packets: 1161

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10095_80, Duration: 4.551, Protocol: 1, Source Port: 2, Destination IP: 9, Destination Port: 16, Number of Packets: 149

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10712_206, Duration: 1.116, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10092_100, Duration: 1.084, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10056_27, Duration: 0.301, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 5, Number of Packets: 179

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 11022_166, Duration: 3.642, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 59

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10089_52, Duration: 7.45, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 14, Number of Packets: 121

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10249_121, Duration: 2.375, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 12, Number of Packets: 97

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 192.168.210.4, Duration: 21.059, Protocol: 3, Source Port: 28, Destination IP: 10, Destination Port: 8, Number of Packets: 128

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 11152_33, Duration: 0.104, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10102_83, Duration: 8.98, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 22, Number of Packets: 178

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10097_117, Duration: 1.219, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 7, Number of Packets: 43

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10098_126, Duration: 6.052, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 14, Number of Packets: 192

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 11464_135, Duration: 0.104, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10106_93, Duration: 4.559, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 16, Number of Packets: 103

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10092_99, Duration: 25.582, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 4, Number of Packets: 93

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10062_127, Duration: 4.978, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 5, Number of Packets: 60

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10056_147, Duration: 1.558, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 7, Number of Packets: 110

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10784_4, Duration: 94.65, Protocol: 2, Source Port: 2, Destination IP: 5, Destination Port: 371, Number of Packets: 4403

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10012_43, Duration: 4.368, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 13, Number of Packets: 104

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 11929_61, Duration: 0.592, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10124_1, Duration: 100.301, Protocol: 1, Source Port: 1, Destination IP: 12, Destination Port: 217, Number of Packets: 1001

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 12829_116, Duration: 6.74, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 7, Number of Packets: 98

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10087_49, Duration: 3.582, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 8, Number of Packets: 147

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10417_68, Duration: 3.763, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 8, Number of Packets: 102

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 13199_43, Duration: 6.4, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 8, Number of Packets: 109

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10244_14, Duration: 7.508, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 14, Number of Packets: 144

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10506_18, Duration: 1.108, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10109_187, Duration: 10.828, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 16, Number of Packets: 200

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10222_210, Duration: 4.414, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 9, Number of Packets: 86

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 11317_245, Duration: 0.982, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10970_157, Duration: 0.938, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10159_95, Duration: 1.528, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 12248_33, Duration: 1.835, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10070_48, Duration: 1.073, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 10, Number of Packets: 36

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10072_39, Duration: 3.005, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 11, Number of Packets: 33

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 11015_151, Duration: 2.093, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 4, Number of Packets: 52

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10875_6, Duration: 10.824, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 10, Number of Packets: 170

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10090_217, Duration: 4.182, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 11, Number of Packets: 86

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10094_75, Duration: 5.606, Protocol: 1, Source Port: 2, Destination IP: 8, Destination Port: 17, Number of Packets: 156

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10012_11, Duration: 3.529, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 11, Number of Packets: 1932

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10091_2, Duration: 0.081, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 35

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10648_199, Duration: 2.169, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 50

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10056_41, Duration: 8.54, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 10, Number of Packets: 178

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10180_116, Duration: 20.398, Protocol: 1, Source Port: 1, Destination IP: 8, Destination Port: 22, Number of Packets: 270

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10056_51, Duration: 0.742, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 6, Number of Packets: 214

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10169_169, Duration: 4.226, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 8, Number of Packets: 76

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10092_98, Duration: 5.301, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 5, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10049_131, Duration: 3.251, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 6, Number of Packets: 68

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10056_221, Duration: 2.688, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 10, Number of Packets: 1241

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10056_80, Duration: 1.19, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 50

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10056_193, Duration: 0.511, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 5, Number of Packets: 194

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 11142_116, Duration: 5.232, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 6, Number of Packets: 74

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10135_93, Duration: 7.722, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 11, Number of Packets: 82

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10205_12, Duration: 11.789, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 10, Number of Packets: 53

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 11319_136, Duration: 1.305, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10587_162, Duration: 4.194, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 5, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10872_159, Duration: 10.007, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 7, Number of Packets: 87

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 11667_110, Duration: 0.163, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 11302_116, Duration: 0.285, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10661_117, Duration: 0.262, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10183_96, Duration: 1.278, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 8, Number of Packets: 807

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10055_190, Duration: 12.502, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 13, Number of Packets: 156

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10187_115, Duration: 4.55, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 7, Number of Packets: 81

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 192.168.200.3, Duration: 0.002, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 11149_153, Duration: 4.716, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 8, Number of Packets: 103

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10274_205, Duration: 1.977, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10170_24, Duration: 2.493, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 10, Number of Packets: 74

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10056_103, Duration: 0.94, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 7, Number of Packets: 249

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10123_173, Duration: 5.368, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 9, Number of Packets: 62

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 11319_144, Duration: 0.256, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10249_102, Duration: 0.69, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 5, Number of Packets: 45

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10074_39, Duration: 10.054, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 38, Number of Packets: 327

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 12401_210, Duration: 0.119, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10143_80, Duration: 0.27, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 13200_190, Duration: 0.175, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 13201_231, Duration: 2.733, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 6, Number of Packets: 60

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 13202_113, Duration: 2.198, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10012_72, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 13203_56, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10107_38, Duration: 2.159, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 5, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 13204_220, Duration: 2.2, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10001_232, Duration: 57.389, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 51, Number of Packets: 2956

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10012_19, Duration: 9.188, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 17, Number of Packets: 586

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10007_206, Duration: 0.835, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 11316_21, Duration: 2.916, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 7, Number of Packets: 140

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10186_125, Duration: 6.159, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 6, Number of Packets: 89

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10056_13, Duration: 0.879, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 9, Number of Packets: 156

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10997_247, Duration: 0.134, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10046_7, Duration: 4.036, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 6, Number of Packets: 75

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10056_129, Duration: 0.889, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 8, Number of Packets: 289

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 11009_216, Duration: 1.316, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 11540_144, Duration: 9.128, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 10, Number of Packets: 128

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10710_179, Duration: 10.591, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 12, Number of Packets: 293

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 13205_143, Duration: 1.653, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 49

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10012_58, Duration: 5.592, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 8, Number of Packets: 92

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 13206_181, Duration: 0.653, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10702_91, Duration: 2.231, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 49

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10012_33, Duration: 2.451, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 4, Number of Packets: 33

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 11244_2, Duration: 0.183, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 192.168.100.3, Duration: 0.001, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10056_138, Duration: 4.156, Protocol: 1, Source Port: 1, Destination IP: 8, Destination Port: 13, Number of Packets: 195

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 11193_139, Duration: 1.136, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10352_165, Duration: 11.548, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 7, Number of Packets: 139

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10582_68, Duration: 5.772, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 28, Number of Packets: 299

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10012_27, Duration: 11.82, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 24, Number of Packets: 562

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10341_141, Duration: 7.78, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 92

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10154_190, Duration: 1.243, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 4, Number of Packets: 58

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10135_60, Duration: 0.963, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10263_185, Duration: 5.084, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 12, Number of Packets: 98

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10220_207, Duration: 3.137, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 4, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10276_235, Duration: 0.211, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10367_98, Duration: 6.01, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 15, Number of Packets: 138

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10110_13, Duration: 5.386, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 15, Number of Packets: 100

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10444_137, Duration: 1.206, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 5, Number of Packets: 37

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 11406_43, Duration: 3.249, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 11266_10, Duration: 0.506, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10793_130, Duration: 11.229, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 9, Number of Packets: 200

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10581_176, Duration: 0.487, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10584_204, Duration: 4.836, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 9, Number of Packets: 67

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 13207_58, Duration: 2.134, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 61

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10589_173, Duration: 1.217, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 5, Number of Packets: 84

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10012_24, Duration: 0.673, Protocol: 1, Source Port: 1, Destination IP: 8, Destination Port: 14, Number of Packets: 140

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10586_19, Duration: 0.342, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10276_216, Duration: 2.845, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 10, Number of Packets: 71

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10251_198, Duration: 5.159, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 5, Number of Packets: 108

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10022_67, Duration: 3.059, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 5, Number of Packets: 96

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10566_185, Duration: 0.453, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10433_232, Duration: 0.615, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10056_23, Duration: 0.448, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 13208_37, Duration: 3.911, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 45

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10370_34, Duration: 3.963, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 5, Number of Packets: 75

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10445_233, Duration: 0.646, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 11872_245, Duration: 0.413, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10126_186, Duration: 2.796, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 11422_53, Duration: 1.953, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 113

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10593_173, Duration: 14.68, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 25, Number of Packets: 453

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10595_64, Duration: 19.455, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 20, Number of Packets: 170

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 12175_157, Duration: 0.143, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 11202_50, Duration: 1.162, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10363_11, Duration: 3.262, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 7, Number of Packets: 79

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10585_220, Duration: 5.852, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 9, Number of Packets: 112

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10585_221, Duration: 1.074, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 5, Number of Packets: 68

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 13209_148, Duration: 16.184, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 15, Number of Packets: 1138

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10056_232, Duration: 0.728, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 5, Number of Packets: 723

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10056_128, Duration: 1.422, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 212

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10718_106, Duration: 2.999, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 57

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10007_19, Duration: 37.414, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 11, Number of Packets: 257

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10606_236, Duration: 1.013, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10056_7, Duration: 1.374, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 11010_59, Duration: 5.222, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 12, Number of Packets: 102

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10056_118, Duration: 5.065, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 66

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10637_200, Duration: 4.487, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 5, Number of Packets: 81

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 11010_57, Duration: 10.418, Protocol: 2, Source Port: 3, Destination IP: 1, Destination Port: 24, Number of Packets: 254

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10665_85, Duration: 19.484, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 11, Number of Packets: 173

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 13210_107, Duration: 4.498, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10068_34, Duration: 31.941, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 17, Number of Packets: 751

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10004_36, Duration: 6.825, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 7, Number of Packets: 235

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10003_195, Duration: 7.558, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 8, Number of Packets: 88

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 13211_235, Duration: 7.759, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 84

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 13064_151, Duration: 0.576, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 11323_107, Duration: 0.757, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 11011_87, Duration: 0.291, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 33

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10704_25, Duration: 45.871, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 115, Number of Packets: 986

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 12338_27, Duration: 0.05, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10704_24, Duration: 33.715, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 68, Number of Packets: 492

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10704_23, Duration: 19.437, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 22, Number of Packets: 964

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10705_104, Duration: 0.173, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 97

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10527_8, Duration: 5.175, Protocol: 1, Source Port: 2, Destination IP: 9, Destination Port: 18, Number of Packets: 511

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 11046_113, Duration: 4.431, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 4, Number of Packets: 85

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10595_82, Duration: 8.545, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 15, Number of Packets: 103

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10174_98, Duration: 0.575, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10711_32, Duration: 0.457, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 52

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 11046_156, Duration: 1.441, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 49

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10767_91, Duration: 5.143, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 33

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10174_64, Duration: 9.368, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 15, Number of Packets: 264

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10082_243, Duration: 0.103, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10088_49, Duration: 0.485, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10107_10, Duration: 7.796, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 12, Number of Packets: 119

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 12396_66, Duration: 0.039, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10710_124, Duration: 3.98, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 11, Number of Packets: 262

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10408_61, Duration: 0.644, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10145_17, Duration: 19.926, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 38, Number of Packets: 365

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 13212_236, Duration: 1.837, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 11295_129, Duration: 2.452, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 46

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10709_40, Duration: 0.358, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10918_114, Duration: 8.373, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 8, Number of Packets: 128

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10315_252, Duration: 1.628, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 16, Number of Packets: 249

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10163_21, Duration: 8.104, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 14, Number of Packets: 122

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10092_104, Duration: 37.795, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 14, Number of Packets: 161

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10316_219, Duration: 2.996, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 9, Number of Packets: 87

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10713_17, Duration: 5.893, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 5, Number of Packets: 79

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10591_216, Duration: 3.694, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 8, Number of Packets: 79

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 12402_42, Duration: 1.659, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 795

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 12817_81, Duration: 0.571, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10163_60, Duration: 37.471, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 42, Number of Packets: 625

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10798_7, Duration: 1.572, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 41

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10064_169, Duration: 9.47, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 34, Number of Packets: 511

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10321_204, Duration: 15.063, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 42, Number of Packets: 972

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10166_58, Duration: 2.664, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 3, Number of Packets: 46

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 13213_143, Duration: 2.355, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 48

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 11970_206, Duration: 0.496, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10506_23, Duration: 0.087, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 10292_68, Duration: 0.776, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T11:01:27.547000, End Frame: 2017-03-16T12:01:27.547000, Source IP: 12714_4, Duration: 0.765, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 19

Output: normal