Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T19:01:22.612000, End Frame: 2017-03-15T20:01:22.612000, Source IP: 10568_13, Duration: 0.94, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T19:01:22.612000, End Frame: 2017-03-15T20:01:22.612000, Source IP: 10875_6, Duration: 1.171, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 3, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T19:01:22.612000, End Frame: 2017-03-15T20:01:22.612000, Source IP: 10103_211, Duration: 1.202, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T19:01:22.612000, End Frame: 2017-03-15T20:01:22.612000, Source IP: 10097_50, Duration: 0.943, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T19:01:22.612000, End Frame: 2017-03-15T20:01:22.612000, Source IP: 10726_242, Duration: 1.127, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T19:01:22.612000, End Frame: 2017-03-15T20:01:22.612000, Source IP: 10102_83, Duration: 0.942, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T19:01:22.612000, End Frame: 2017-03-15T20:01:22.612000, Source IP: 10098_126, Duration: 0.944, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T19:01:22.612000, End Frame: 2017-03-15T20:01:22.612000, Source IP: 10181_60, Duration: 1.028, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T19:01:22.612000, End Frame: 2017-03-15T20:01:22.612000, Source IP: 10056_112, Duration: 0.041, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T19:01:22.612000, End Frame: 2017-03-15T20:01:22.612000, Source IP: 10056_50, Duration: 0.134, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 124

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T19:01:22.612000, End Frame: 2017-03-15T20:01:22.612000, Source IP: 10718_106, Duration: 1.693, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T19:01:22.612000, End Frame: 2017-03-15T20:01:22.612000, Source IP: 12824_21, Duration: 2.666, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 180

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T19:01:22.612000, End Frame: 2017-03-15T20:01:22.612000, Source IP: 10082_84, Duration: 1.588, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T19:01:22.612000, End Frame: 2017-03-15T20:01:22.612000, Source IP: 192.168.200.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T19:01:22.612000, End Frame: 2017-03-15T20:01:22.612000, Source IP: 11500_158, Duration: 1.459, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T19:01:22.612000, End Frame: 2017-03-15T20:01:22.612000, Source IP: 10012_32, Duration: 0.018, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T19:01:22.612000, End Frame: 2017-03-15T20:01:22.612000, Source IP: 10012_8, Duration: 0.748, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T19:01:22.612000, End Frame: 2017-03-15T20:01:22.612000, Source IP: 11256_1, Duration: 0.025, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T19:01:22.612000, End Frame: 2017-03-15T20:01:22.612000, Source IP: 11776_93, Duration: 0.054, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T19:01:22.612000, End Frame: 2017-03-15T20:01:22.612000, Source IP: 11552_1, Duration: 0.026, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 192.168.220.9, Duration: 21.179, Protocol: 3, Source Port: 56, Destination IP: 14, Destination Port: 9, Number of Packets: 1302

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 192.168.210.5, Duration: 3.303, Protocol: 3, Source Port: 20, Destination IP: 11, Destination Port: 19, Number of Packets: 115

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: EXT_SERVER, Duration: 22.282, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 169, Number of Packets: 1470

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 10793_130, Duration: 0.023, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 11256_1, Duration: 5.757, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 11776_93, Duration: 0.049, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 192.168.200.8, Duration: 54.031, Protocol: 3, Source Port: 105, Destination IP: 14, Destination Port: 8, Number of Packets: 795

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 192.168.100.5, Duration: 2.465, Protocol: 2, Source Port: 4, Destination IP: 19, Destination Port: 21, Number of Packets: 919

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 192.168.220.15, Duration: 0.151, Protocol: 2, Source Port: 6, Destination IP: 4, Destination Port: 5, Number of Packets: 138

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 192.168.220.6, Duration: 0.167, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 135

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 192.168.220.13, Duration: 0.153, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 135

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 192.168.220.16, Duration: 2.783, Protocol: 2, Source Port: 30, Destination IP: 9, Destination Port: 103, Number of Packets: 742

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 192.168.210.1, Duration: 0.0, Protocol: 1, Source Port: 59, Destination IP: 1, Destination Port: 7, Number of Packets: 64

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 192.168.220.7, Duration: 0.164, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 133

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 192.168.220.12, Duration: 0.151, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 136

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: DNS, Duration: 0.045, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 60, Number of Packets: 75

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 11776_163, Duration: 1.344, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 33

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 192.168.200.9, Duration: 31.398, Protocol: 3, Source Port: 82, Destination IP: 5, Destination Port: 6, Number of Packets: 687

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 192.168.220.8, Duration: 0.146, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 127

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 192.168.200.4, Duration: 0.156, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 136

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 192.168.220.10, Duration: 0.146, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 131

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 192.168.200.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 192.168.220.11, Duration: 0.158, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 137

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 192.168.220.4, Duration: 0.141, Protocol: 2, Source Port: 3, Destination IP: 3, Destination Port: 3, Number of Packets: 121

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 192.168.220.14, Duration: 0.151, Protocol: 2, Source Port: 5, Destination IP: 4, Destination Port: 5, Number of Packets: 128

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 192.168.200.5, Duration: 0.147, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 129

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 11500_158, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 10527_14, Duration: 0.603, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 192.168.220.5, Duration: 0.149, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 132

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 192.168.210.3, Duration: 0.056, Protocol: 2, Source Port: 17, Destination IP: 3, Destination Port: 5, Number of Packets: 28

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 192.168.100.4, Duration: 10.987, Protocol: 2, Source Port: 47, Destination IP: 4, Destination Port: 5, Number of Packets: 73

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 192.168.210.2, Duration: 0.0, Protocol: 2, Source Port: 21, Destination IP: 2, Destination Port: 4, Number of Packets: 22

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 192.168.220.3, Duration: 0.0, Protocol: 1, Source Port: 3, Destination IP: 2, Destination Port: 3, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 192.168.100.3, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 192.168.210.4, Duration: 0.0, Protocol: 2, Source Port: 3, Destination IP: 3, Destination Port: 13, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 192.168.200.3, Duration: 0.0, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 10029_153, Duration: 0.729, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 192.168.100.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 10499_66, Duration: 0.121, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 10021_4, Duration: 0.565, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 10022_204, Duration: 0.483, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 95

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 12808_156, Duration: 0.831, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 36

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 10020_73, Duration: 2.818, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 237

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 10018_62, Duration: 0.111, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 10028_204, Duration: 0.111, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 119

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 192.168.220.2, Duration: 0.008, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 0.0.0.0, Duration: 0.002, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 10043_254, Duration: 1.244, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 25, Number of Packets: 100

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T20:01:23.468000, End Frame: 2017-03-15T21:01:23.468000, Source IP: 10587_162, Duration: 0.491, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: 10587_162, Duration: 0.249, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: 192.168.210.5, Duration: 2.363, Protocol: 2, Source Port: 17, Destination IP: 7, Destination Port: 15, Number of Packets: 107

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: 192.168.100.5, Duration: 0.0, Protocol: 2, Source Port: 3, Destination IP: 18, Destination Port: 19, Number of Packets: 884

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: 192.168.220.14, Duration: 0.164, Protocol: 2, Source Port: 5, Destination IP: 4, Destination Port: 5, Number of Packets: 135

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: 192.168.220.5, Duration: 0.167, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 134

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: 192.168.210.1, Duration: 0.0, Protocol: 1, Source Port: 60, Destination IP: 1, Destination Port: 7, Number of Packets: 65

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: 192.168.220.16, Duration: 2.807, Protocol: 2, Source Port: 30, Destination IP: 10, Destination Port: 106, Number of Packets: 740

Output: attacker


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: EXT_SERVER, Duration: 19.238, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 164, Number of Packets: 1389

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: 192.168.220.6, Duration: 0.165, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 134

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: 192.168.220.13, Duration: 0.167, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 134

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: 192.168.220.7, Duration: 0.176, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 130

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: 192.168.200.8, Duration: 41.619, Protocol: 2, Source Port: 91, Destination IP: 7, Destination Port: 8, Number of Packets: 720

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: 192.168.220.15, Duration: 0.166, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 134

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: 192.168.200.9, Duration: 30.471, Protocol: 2, Source Port: 80, Destination IP: 3, Destination Port: 4, Number of Packets: 678

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: 192.168.220.8, Duration: 0.143, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 126

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: 192.168.220.9, Duration: 0.143, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 130

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: 192.168.200.4, Duration: 0.166, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 131

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: 192.168.220.10, Duration: 0.15, Protocol: 2, Source Port: 5, Destination IP: 4, Destination Port: 5, Number of Packets: 129

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: 192.168.220.11, Duration: 0.154, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 131

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: 192.168.220.12, Duration: 0.15, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 132

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: 192.168.220.4, Duration: 0.169, Protocol: 2, Source Port: 3, Destination IP: 3, Destination Port: 3, Number of Packets: 121

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: 10527_14, Duration: 0.596, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 37

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: 192.168.200.5, Duration: 0.157, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 131

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: DNS, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 53, Number of Packets: 53

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: 192.168.100.4, Duration: 13.993, Protocol: 2, Source Port: 58, Destination IP: 3, Destination Port: 4, Number of Packets: 87

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: 192.168.210.4, Duration: 0.0, Protocol: 2, Source Port: 3, Destination IP: 2, Destination Port: 14, Number of Packets: 18

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: 192.168.210.2, Duration: 0.0, Protocol: 1, Source Port: 21, Destination IP: 1, Destination Port: 3, Number of Packets: 22

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: 192.168.220.3, Duration: 0.0, Protocol: 1, Source Port: 3, Destination IP: 2, Destination Port: 3, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: 192.168.210.3, Duration: 0.032, Protocol: 2, Source Port: 17, Destination IP: 3, Destination Port: 4, Number of Packets: 27

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: 192.168.100.3, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: 192.168.200.3, Duration: 0.0, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: 192.168.220.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 1, Number of Packets: 2

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: 10793_162, Duration: 0.109, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: 192.168.200.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: 12741_125, Duration: 0.433, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: 10012_11, Duration: 0.234, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T21:01:24.035000, End Frame: 2017-03-15T22:01:24.035000, Source IP: 10068_2, Duration: 0.094, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T22:01:24.439000, End Frame: 2017-03-15T23:01:24.439000, Source IP: 192.168.220.16, Duration: 2.533, Protocol: 2, Source Port: 29, Destination IP: 9, Destination Port: 97, Number of Packets: 701

Output: attacker


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T22:01:24.439000, End Frame: 2017-03-15T23:01:24.439000, Source IP: 192.168.220.11, Duration: 1.873, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 127

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T22:01:24.439000, End Frame: 2017-03-15T23:01:24.439000, Source IP: 10068_2, Duration: 0.026, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T22:01:24.439000, End Frame: 2017-03-15T23:01:24.439000, Source IP: 192.168.210.5, Duration: 2.34, Protocol: 2, Source Port: 17, Destination IP: 8, Destination Port: 16, Number of Packets: 107

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T22:01:24.439000, End Frame: 2017-03-15T23:01:24.439000, Source IP: 192.168.100.5, Duration: 9.822, Protocol: 2, Source Port: 3, Destination IP: 18, Destination Port: 19, Number of Packets: 823

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T22:01:24.439000, End Frame: 2017-03-15T23:01:24.439000, Source IP: 192.168.220.12, Duration: 0.163, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 124

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T22:01:24.439000, End Frame: 2017-03-15T23:01:24.439000, Source IP: 192.168.210.3, Duration: 0.068, Protocol: 2, Source Port: 13, Destination IP: 3, Destination Port: 4, Number of Packets: 23

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T22:01:24.439000, End Frame: 2017-03-15T23:01:24.439000, Source IP: 192.168.210.1, Duration: 0.0, Protocol: 1, Source Port: 59, Destination IP: 1, Destination Port: 7, Number of Packets: 64

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T22:01:24.439000, End Frame: 2017-03-15T23:01:24.439000, Source IP: 192.168.220.4, Duration: 0.143, Protocol: 2, Source Port: 3, Destination IP: 3, Destination Port: 3, Number of Packets: 114

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T22:01:24.439000, End Frame: 2017-03-15T23:01:24.439000, Source IP: EXT_SERVER, Duration: 24.214, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 167, Number of Packets: 1385

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T22:01:24.439000, End Frame: 2017-03-15T23:01:24.439000, Source IP: 192.168.200.5, Duration: 0.162, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 124

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T22:01:24.439000, End Frame: 2017-03-15T23:01:24.439000, Source IP: 192.168.200.4, Duration: 3.541, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 126

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T22:01:24.439000, End Frame: 2017-03-15T23:01:24.439000, Source IP: 192.168.220.14, Duration: 0.159, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 124

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T22:01:24.439000, End Frame: 2017-03-15T23:01:24.439000, Source IP: 192.168.220.5, Duration: 4.82, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 128

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T22:01:24.439000, End Frame: 2017-03-15T23:01:24.439000, Source IP: 192.168.200.8, Duration: 45.886, Protocol: 2, Source Port: 86, Destination IP: 2, Destination Port: 3, Number of Packets: 704

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T22:01:24.439000, End Frame: 2017-03-15T23:01:24.439000, Source IP: 192.168.200.9, Duration: 30.848, Protocol: 2, Source Port: 79, Destination IP: 2, Destination Port: 3, Number of Packets: 680

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T22:01:24.439000, End Frame: 2017-03-15T23:01:24.439000, Source IP: 192.168.220.6, Duration: 0.137, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 123

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T22:01:24.439000, End Frame: 2017-03-15T23:01:24.439000, Source IP: 192.168.220.13, Duration: 0.152, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 124

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T22:01:24.439000, End Frame: 2017-03-15T23:01:24.439000, Source IP: 192.168.220.7, Duration: 0.153, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 121

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T22:01:24.439000, End Frame: 2017-03-15T23:01:24.439000, Source IP: 192.168.220.15, Duration: 0.142, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 122

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T22:01:24.439000, End Frame: 2017-03-15T23:01:24.439000, Source IP: 192.168.220.8, Duration: 0.136, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 120

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T22:01:24.439000, End Frame: 2017-03-15T23:01:24.439000, Source IP: 192.168.220.9, Duration: 0.147, Protocol: 2, Source Port: 6, Destination IP: 4, Destination Port: 5, Number of Packets: 125

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T22:01:24.439000, End Frame: 2017-03-15T23:01:24.439000, Source IP: 192.168.220.10, Duration: 0.119, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 118

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T22:01:24.439000, End Frame: 2017-03-15T23:01:24.439000, Source IP: 10527_14, Duration: 0.564, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 37

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T22:01:24.439000, End Frame: 2017-03-15T23:01:24.439000, Source IP: DNS, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 59, Number of Packets: 59

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T22:01:24.439000, End Frame: 2017-03-15T23:01:24.439000, Source IP: 192.168.100.4, Duration: 16.981, Protocol: 2, Source Port: 70, Destination IP: 3, Destination Port: 4, Number of Packets: 102

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T22:01:24.439000, End Frame: 2017-03-15T23:01:24.439000, Source IP: 192.168.220.3, Duration: 0.0, Protocol: 1, Source Port: 3, Destination IP: 2, Destination Port: 3, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T22:01:24.439000, End Frame: 2017-03-15T23:01:24.439000, Source IP: 192.168.210.4, Duration: 0.0, Protocol: 2, Source Port: 3, Destination IP: 3, Destination Port: 13, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T22:01:24.439000, End Frame: 2017-03-15T23:01:24.439000, Source IP: 192.168.210.2, Duration: 0.0, Protocol: 1, Source Port: 19, Destination IP: 1, Destination Port: 3, Number of Packets: 20

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T22:01:24.439000, End Frame: 2017-03-15T23:01:24.439000, Source IP: 192.168.100.3, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T22:01:24.439000, End Frame: 2017-03-15T23:01:24.439000, Source IP: 192.168.200.3, Duration: 0.0, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T22:01:24.439000, End Frame: 2017-03-15T23:01:24.439000, Source IP: 10068_34, Duration: 0.127, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T22:01:24.439000, End Frame: 2017-03-15T23:01:24.439000, Source IP: 10499_66, Duration: 0.086, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 10499_66, Duration: 0.288, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 192.168.210.5, Duration: 2.458, Protocol: 2, Source Port: 17, Destination IP: 7, Destination Port: 16, Number of Packets: 108

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 192.168.220.16, Duration: 7.669, Protocol: 2, Source Port: 30, Destination IP: 9, Destination Port: 106, Number of Packets: 742

Output: attacker


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 192.168.100.5, Duration: 16.766, Protocol: 2, Source Port: 3, Destination IP: 18, Destination Port: 19, Number of Packets: 896

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 192.168.200.4, Duration: 1.502, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 124

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: EXT_SERVER, Duration: 22.038, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 163, Number of Packets: 1389

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 192.168.220.10, Duration: 0.154, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 130

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 192.168.220.11, Duration: 1.509, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 124

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 192.168.220.12, Duration: 3.198, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 135

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 192.168.200.8, Duration: 43.971, Protocol: 2, Source Port: 96, Destination IP: 9, Destination Port: 8, Number of Packets: 731

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 192.168.200.9, Duration: 44.544, Protocol: 3, Source Port: 117, Destination IP: 17, Destination Port: 10, Number of Packets: 851

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 192.168.220.4, Duration: 0.157, Protocol: 2, Source Port: 3, Destination IP: 3, Destination Port: 3, Number of Packets: 125

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 192.168.210.1, Duration: 0.0, Protocol: 1, Source Port: 59, Destination IP: 1, Destination Port: 7, Number of Packets: 64

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 192.168.200.5, Duration: 2.165, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 135

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 192.168.220.14, Duration: 0.164, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 134

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 192.168.220.5, Duration: 0.131, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 124

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 192.168.220.6, Duration: 3.207, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 136

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 192.168.210.4, Duration: 0.0, Protocol: 2, Source Port: 3, Destination IP: 2, Destination Port: 14, Number of Packets: 18

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 192.168.210.2, Duration: 0.0, Protocol: 2, Source Port: 22, Destination IP: 2, Destination Port: 4, Number of Packets: 23

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 192.168.220.13, Duration: 0.147, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 134

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 192.168.220.7, Duration: 0.183, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 132

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 192.168.220.15, Duration: 0.157, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 132

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 10527_14, Duration: 0.588, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 37

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 192.168.220.8, Duration: 0.156, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 128

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 192.168.220.9, Duration: 0.167, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 128

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: DNS, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 78, Number of Packets: 78

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 192.168.100.4, Duration: 16.951, Protocol: 2, Source Port: 70, Destination IP: 3, Destination Port: 4, Number of Packets: 102

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 192.168.220.3, Duration: 0.0, Protocol: 1, Source Port: 3, Destination IP: 2, Destination Port: 3, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 192.168.210.3, Duration: 0.103, Protocol: 2, Source Port: 18, Destination IP: 4, Destination Port: 6, Number of Packets: 29

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 192.168.200.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 10048_62, Duration: 0.469, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 10012_11, Duration: 0.249, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 192.168.100.3, Duration: 0.0, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 192.168.200.3, Duration: 0.0, Protocol: 1, Source Port: 3, Destination IP: 3, Destination Port: 3, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 192.168.100.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 10012_8, Duration: 0.018, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 11227_123, Duration: 0.865, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 10012_33, Duration: 0.447, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 10012_32, Duration: 0.018, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 10033_121, Duration: 0.272, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 12825_154, Duration: 0.104, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 11552_1, Duration: 1.51, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 12825_66, Duration: 1.282, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 36

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 10075_226, Duration: 0.562, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 10029_153, Duration: 1.439, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 12826_190, Duration: 0.719, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T23:01:24.830000, End Frame: 2017-03-16T00:01:24.830000, Source IP: 10296_226, Duration: 0.081, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 10296_226, Duration: 0.024, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 192.168.210.5, Duration: 2.347, Protocol: 2, Source Port: 17, Destination IP: 8, Destination Port: 15, Number of Packets: 105

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 192.168.100.5, Duration: 16.675, Protocol: 2, Source Port: 9, Destination IP: 22, Destination Port: 21, Number of Packets: 1337

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 192.168.220.8, Duration: 0.151, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 128

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 192.168.220.16, Duration: 2.672, Protocol: 2, Source Port: 28, Destination IP: 9, Destination Port: 103, Number of Packets: 713

Output: attacker


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: EXT_SERVER, Duration: 22.825, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 163, Number of Packets: 1381

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 192.168.200.8, Duration: 43.619, Protocol: 2, Source Port: 90, Destination IP: 6, Destination Port: 7, Number of Packets: 706

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 192.168.220.9, Duration: 0.16, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 128

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 192.168.200.9, Duration: 30.783, Protocol: 2, Source Port: 79, Destination IP: 2, Destination Port: 3, Number of Packets: 679

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 192.168.200.4, Duration: 0.145, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 122

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 192.168.220.10, Duration: 0.151, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 128

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 192.168.220.11, Duration: 0.146, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 123

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 192.168.220.12, Duration: 0.136, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 117

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 192.168.220.4, Duration: 7.035, Protocol: 2, Source Port: 3, Destination IP: 3, Destination Port: 3, Number of Packets: 126

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 192.168.200.5, Duration: 0.121, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 116

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 192.168.220.5, Duration: 0.13, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 122

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 192.168.220.14, Duration: 0.158, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 128

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 192.168.220.6, Duration: 0.13, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 119

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 192.168.220.13, Duration: 4.752, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 131

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 192.168.220.7, Duration: 0.144, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 128

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 192.168.220.15, Duration: 0.157, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 128

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 192.168.210.1, Duration: 0.0, Protocol: 1, Source Port: 59, Destination IP: 1, Destination Port: 6, Number of Packets: 63

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 10527_14, Duration: 0.803, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: DNS, Duration: 0.005, Protocol: 1, Source Port: 1, Destination IP: 8, Destination Port: 80, Number of Packets: 99

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 192.168.100.4, Duration: 17.856, Protocol: 2, Source Port: 76, Destination IP: 6, Destination Port: 5, Number of Packets: 192

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 192.168.210.4, Duration: 0.0, Protocol: 2, Source Port: 3, Destination IP: 3, Destination Port: 14, Number of Packets: 18

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 192.168.210.2, Duration: 0.0, Protocol: 1, Source Port: 19, Destination IP: 1, Destination Port: 3, Number of Packets: 20

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 192.168.220.3, Duration: 5.079, Protocol: 2, Source Port: 10, Destination IP: 6, Destination Port: 5, Number of Packets: 170

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 192.168.210.3, Duration: 5.565, Protocol: 2, Source Port: 22, Destination IP: 7, Destination Port: 6, Number of Packets: 524

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 192.168.100.3, Duration: 5.663, Protocol: 2, Source Port: 8, Destination IP: 6, Destination Port: 3, Number of Packets: 154

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 192.168.200.3, Duration: 4.854, Protocol: 2, Source Port: 8, Destination IP: 6, Destination Port: 4, Number of Packets: 439

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 10068_34, Duration: 0.106, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 10048_62, Duration: 0.468, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 192.168.200.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 10012_11, Duration: 0.228, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 10028_204, Duration: 2.395, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 89

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 10018_62, Duration: 0.111, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 10018_63, Duration: 2.734, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 452

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 10022_204, Duration: 1.088, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 171

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 10023_14, Duration: 6.001, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 413

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 10025_202, Duration: 2.531, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 10020_73, Duration: 2.336, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 295

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 10023_15, Duration: 0.325, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 10019_14, Duration: 0.802, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 10024_215, Duration: 2.846, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 226

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 10021_4, Duration: 2.529, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 10027_204, Duration: 0.18, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 80

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 10026_204, Duration: 3.552, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 99

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T00:01:25.046000, End Frame: 2017-03-16T01:01:25.046000, Source IP: 10075_194, Duration: 0.084, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T01:01:25.277000, End Frame: 2017-03-16T02:01:25.277000, Source IP: 10075_194, Duration: 0.026, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T01:01:25.277000, End Frame: 2017-03-16T02:01:25.277000, Source IP: 192.168.210.5, Duration: 2.463, Protocol: 2, Source Port: 16, Destination IP: 7, Destination Port: 15, Number of Packets: 110

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T01:01:25.277000, End Frame: 2017-03-16T02:01:25.277000, Source IP: EXT_SERVER, Duration: 19.352, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 162, Number of Packets: 1374

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T01:01:25.277000, End Frame: 2017-03-16T02:01:25.277000, Source IP: 192.168.200.8, Duration: 39.41, Protocol: 2, Source Port: 84, Destination IP: 3, Destination Port: 4, Number of Packets: 686

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T01:01:25.277000, End Frame: 2017-03-16T02:01:25.277000, Source IP: 192.168.200.9, Duration: 30.911, Protocol: 2, Source Port: 80, Destination IP: 3, Destination Port: 4, Number of Packets: 680

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T01:01:25.277000, End Frame: 2017-03-16T02:01:25.277000, Source IP: 192.168.220.16, Duration: 2.624, Protocol: 2, Source Port: 29, Destination IP: 9, Destination Port: 104, Number of Packets: 709

Output: attacker


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T01:01:25.277000, End Frame: 2017-03-16T02:01:25.277000, Source IP: 192.168.100.5, Duration: 18.79, Protocol: 2, Source Port: 3, Destination IP: 18, Destination Port: 19, Number of Packets: 843

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T01:01:25.277000, End Frame: 2017-03-16T02:01:25.277000, Source IP: 192.168.220.8, Duration: 5.038, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 128

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T01:01:25.277000, End Frame: 2017-03-16T02:01:25.277000, Source IP: 192.168.220.9, Duration: 0.144, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 126

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T01:01:25.277000, End Frame: 2017-03-16T02:01:25.277000, Source IP: 192.168.200.4, Duration: 0.133, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 123

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T01:01:25.277000, End Frame: 2017-03-16T02:01:25.277000, Source IP: 192.168.220.10, Duration: 2.514, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 125

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T01:01:25.277000, End Frame: 2017-03-16T02:01:25.277000, Source IP: 192.168.220.11, Duration: 0.167, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 124

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T01:01:25.277000, End Frame: 2017-03-16T02:01:25.277000, Source IP: 192.168.220.5, Duration: 0.143, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 125

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T01:01:25.277000, End Frame: 2017-03-16T02:01:25.277000, Source IP: 192.168.100.4, Duration: 14.975, Protocol: 2, Source Port: 62, Destination IP: 3, Destination Port: 4, Number of Packets: 92

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T01:01:25.277000, End Frame: 2017-03-16T02:01:25.277000, Source IP: 192.168.220.12, Duration: 0.117, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 119

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T01:01:25.277000, End Frame: 2017-03-16T02:01:25.277000, Source IP: 192.168.220.4, Duration: 0.135, Protocol: 2, Source Port: 3, Destination IP: 3, Destination Port: 3, Number of Packets: 107

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T01:01:25.277000, End Frame: 2017-03-16T02:01:25.277000, Source IP: 192.168.200.5, Duration: 0.132, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 116

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T01:01:25.277000, End Frame: 2017-03-16T02:01:25.277000, Source IP: 192.168.220.14, Duration: 3.18, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 126

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T01:01:25.277000, End Frame: 2017-03-16T02:01:25.277000, Source IP: 192.168.220.13, Duration: 0.101, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 115

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T01:01:25.277000, End Frame: 2017-03-16T02:01:25.277000, Source IP: 192.168.220.6, Duration: 0.127, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 119

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T01:01:25.277000, End Frame: 2017-03-16T02:01:25.277000, Source IP: 192.168.210.3, Duration: 0.083, Protocol: 2, Source Port: 17, Destination IP: 3, Destination Port: 4, Number of Packets: 27

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T01:01:25.277000, End Frame: 2017-03-16T02:01:25.277000, Source IP: 192.168.210.1, Duration: 0.0, Protocol: 1, Source Port: 59, Destination IP: 1, Destination Port: 7, Number of Packets: 64

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T01:01:25.277000, End Frame: 2017-03-16T02:01:25.277000, Source IP: 192.168.220.7, Duration: 3.177, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 126

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T01:01:25.277000, End Frame: 2017-03-16T02:01:25.277000, Source IP: 10527_14, Duration: 1.046, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 39

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T01:01:25.277000, End Frame: 2017-03-16T02:01:25.277000, Source IP: 192.168.220.15, Duration: 1.826, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 126

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T01:01:25.277000, End Frame: 2017-03-16T02:01:25.277000, Source IP: 192.168.210.2, Duration: 0.0, Protocol: 1, Source Port: 19, Destination IP: 1, Destination Port: 3, Number of Packets: 20

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T01:01:25.277000, End Frame: 2017-03-16T02:01:25.277000, Source IP: 192.168.220.3, Duration: 0.0, Protocol: 1, Source Port: 3, Destination IP: 2, Destination Port: 3, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T01:01:25.277000, End Frame: 2017-03-16T02:01:25.277000, Source IP: 192.168.210.4, Duration: 0.0, Protocol: 2, Source Port: 2, Destination IP: 2, Destination Port: 12, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T01:01:25.277000, End Frame: 2017-03-16T02:01:25.277000, Source IP: 192.168.100.3, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T01:01:25.277000, End Frame: 2017-03-16T02:01:25.277000, Source IP: DNS, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 53, Number of Packets: 53

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T01:01:25.277000, End Frame: 2017-03-16T02:01:25.277000, Source IP: 192.168.200.3, Duration: 0.0, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T01:01:25.277000, End Frame: 2017-03-16T02:01:25.277000, Source IP: 10793_130, Duration: 0.56, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T01:01:25.277000, End Frame: 2017-03-16T02:01:25.277000, Source IP: 10587_194, Duration: 0.111, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 192.168.100.5, Duration: 0.0, Protocol: 2, Source Port: 3, Destination IP: 18, Destination Port: 19, Number of Packets: 862

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 192.168.220.6, Duration: 0.159, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 130

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: EXT_SERVER, Duration: 22.118, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 162, Number of Packets: 1380

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 192.168.200.8, Duration: 44.515, Protocol: 2, Source Port: 91, Destination IP: 7, Destination Port: 7, Number of Packets: 714

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 192.168.220.13, Duration: 0.139, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 125

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 192.168.220.16, Duration: 2.797, Protocol: 2, Source Port: 30, Destination IP: 9, Destination Port: 110, Number of Packets: 735

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 192.168.200.9, Duration: 34.29, Protocol: 2, Source Port: 91, Destination IP: 9, Destination Port: 7, Number of Packets: 733

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 192.168.220.15, Duration: 0.137, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 125

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 192.168.220.7, Duration: 0.136, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 124

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 192.168.220.11, Duration: 0.161, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 130

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 192.168.220.8, Duration: 0.128, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 118

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 192.168.210.4, Duration: 0.0, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 15, Number of Packets: 19

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 192.168.210.2, Duration: 0.0, Protocol: 1, Source Port: 22, Destination IP: 1, Destination Port: 3, Number of Packets: 23

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 192.168.220.9, Duration: 0.163, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 130

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 192.168.200.4, Duration: 0.15, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 132

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 192.168.220.10, Duration: 0.141, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 124

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 192.168.220.12, Duration: 0.144, Protocol: 2, Source Port: 5, Destination IP: 4, Destination Port: 5, Number of Packets: 131

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 192.168.220.5, Duration: 0.15, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 128

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 192.168.220.4, Duration: 0.141, Protocol: 2, Source Port: 3, Destination IP: 3, Destination Port: 3, Number of Packets: 112

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 192.168.100.4, Duration: 14.987, Protocol: 2, Source Port: 62, Destination IP: 3, Destination Port: 4, Number of Packets: 92

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 192.168.200.5, Duration: 0.132, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 125

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 192.168.220.14, Duration: 0.136, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 120

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 10527_14, Duration: 0.362, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 36

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 192.168.210.5, Duration: 2.108, Protocol: 2, Source Port: 19, Destination IP: 7, Destination Port: 17, Number of Packets: 106

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 192.168.210.1, Duration: 0.0, Protocol: 1, Source Port: 60, Destination IP: 1, Destination Port: 7, Number of Packets: 65

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 10587_194, Duration: 0.023, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: DNS, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 63, Number of Packets: 63

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 192.168.210.3, Duration: 0.105, Protocol: 2, Source Port: 19, Destination IP: 3, Destination Port: 5, Number of Packets: 30

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 192.168.220.3, Duration: 0.0, Protocol: 1, Source Port: 3, Destination IP: 2, Destination Port: 3, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 192.168.200.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 10012_24, Duration: 0.834, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 10050_112, Duration: 0.838, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 11372_218, Duration: 0.069, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 10012_33, Duration: 0.226, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 10033_121, Duration: 0.469, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 192.168.100.3, Duration: 0.001, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 192.168.200.3, Duration: 0.0, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 192.168.100.6, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 192.168.100.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T02:01:25.311000, End Frame: 2017-03-16T03:01:25.311000, Source IP: 10050_114, Duration: 0.508, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal