Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 192.168.220.11, Duration: 0.197, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 137

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 192.168.200.5, Duration: 0.17, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 136

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 192.168.200.8, Duration: 33.91, Protocol: 3, Source Port: 91, Destination IP: 12, Destination Port: 11, Number of Packets: 722

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 192.168.220.9, Duration: 0.186, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 138

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 10068_34, Duration: 0.561, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 192.168.220.16, Duration: 21.638, Protocol: 2, Source Port: 132, Destination IP: 21, Destination Port: 99, Number of Packets: 1231

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 192.168.220.7, Duration: 0.175, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 135

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 10712_206, Duration: 0.721, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 10532_172, Duration: 0.016, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 86

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 10051_51, Duration: 0.745, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 10012_74, Duration: 0.01, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 88

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 192.168.220.10, Duration: 0.155, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 129

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 192.168.220.13, Duration: 0.133, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 126

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 192.168.220.12, Duration: 0.144, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 131

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 192.168.200.4, Duration: 0.165, Protocol: 2, Source Port: 5, Destination IP: 4, Destination Port: 5, Number of Packets: 139

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 192.168.220.4, Duration: 3.267, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 134

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 192.168.220.14, Duration: 3.206, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 138

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 10162_129, Duration: 8.728, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 384

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 192.168.100.4, Duration: 13.986, Protocol: 2, Source Port: 58, Destination IP: 3, Destination Port: 4, Number of Packets: 87

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 192.168.220.8, Duration: 3.21, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 138

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 192.168.220.15, Duration: 3.199, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 139

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 192.168.220.5, Duration: 0.177, Protocol: 2, Source Port: 5, Destination IP: 4, Destination Port: 5, Number of Packets: 139

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 192.168.220.6, Duration: 0.149, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 130

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 192.168.210.1, Duration: 0.0, Protocol: 1, Source Port: 59, Destination IP: 1, Destination Port: 7, Number of Packets: 64

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 192.168.210.2, Duration: 0.0, Protocol: 1, Source Port: 19, Destination IP: 1, Destination Port: 3, Number of Packets: 20

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 192.168.210.4, Duration: 0.0, Protocol: 2, Source Port: 2, Destination IP: 2, Destination Port: 12, Number of Packets: 16

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 192.168.220.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 192.168.100.3, Duration: 0.001, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 192.168.210.3, Duration: 0.026, Protocol: 2, Source Port: 16, Destination IP: 3, Destination Port: 4, Number of Packets: 24

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 10046_7, Duration: 0.72, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 192.168.200.3, Duration: 0.0, Protocol: 1, Source Port: 3, Destination IP: 3, Destination Port: 3, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 192.168.220.3, Duration: 0.0, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 10480_7, Duration: 0.073, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 10056_229, Duration: 1.02, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 10017_40, Duration: 1.49, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 192.168.200.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 10919_132, Duration: 0.732, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 12787_222, Duration: 0.108, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 10012_33, Duration: 0.448, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 10575_79, Duration: 0.303, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 10793_162, Duration: 0.109, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 10032_128, Duration: 0.367, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 10034_8, Duration: 0.361, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 10012_42, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 10036_235, Duration: 0.745, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 10013_97, Duration: 0.365, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T01:04:28.629000, End Frame: 2017-03-21T02:04:28.629000, Source IP: 11015_151, Duration: 0.371, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: DNS, Duration: 1.712, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 231, Number of Packets: 296

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 192.168.210.5, Duration: 39.37, Protocol: 3, Source Port: 30, Destination IP: 16, Destination Port: 22, Number of Packets: 199

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 10532_172, Duration: 0.042, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 109

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 192.168.200.9, Duration: 40.475, Protocol: 3, Source Port: 171, Destination IP: 16, Destination Port: 11, Number of Packets: 959

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 10199_14, Duration: 1.028, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 39

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 192.168.220.15, Duration: 0.141, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 124

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 192.168.220.13, Duration: 0.144, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 130

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 192.168.220.16, Duration: 21.061, Protocol: 2, Source Port: 129, Destination IP: 17, Destination Port: 100, Number of Packets: 1222

Output: attacker


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 10499_34, Duration: 0.111, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 10621_107, Duration: 1.467, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 10017_40, Duration: 1.112, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 192.168.100.5, Duration: 1.348, Protocol: 2, Source Port: 4, Destination IP: 20, Destination Port: 20, Number of Packets: 920

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 10012_74, Duration: 0.088, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 100

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: EXT_SERVER, Duration: 11.954, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 147, Number of Packets: 1179

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 192.168.220.11, Duration: 0.19, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 138

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 192.168.200.8, Duration: 32.145, Protocol: 2, Source Port: 79, Destination IP: 2, Destination Port: 3, Number of Packets: 673

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 192.168.200.5, Duration: 0.168, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 138

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 192.168.220.9, Duration: 1.511, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 140

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 192.168.220.7, Duration: 0.203, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 138

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 192.168.210.3, Duration: 0.072, Protocol: 2, Source Port: 17, Destination IP: 3, Destination Port: 4, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 192.168.220.12, Duration: 0.145, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 132

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 192.168.220.10, Duration: 0.163, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 134

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 192.168.210.4, Duration: 32.344, Protocol: 3, Source Port: 16, Destination IP: 12, Destination Port: 22, Number of Packets: 97

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 192.168.210.2, Duration: 0.0, Protocol: 2, Source Port: 21, Destination IP: 3, Destination Port: 4, Number of Packets: 25

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 192.168.200.4, Duration: 0.179, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 138

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 10162_129, Duration: 8.611, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 382

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 192.168.220.4, Duration: 0.164, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 128

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 192.168.220.14, Duration: 0.15, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 130

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 192.168.220.8, Duration: 0.153, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 126

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 192.168.220.5, Duration: 0.189, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 136

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 192.168.210.1, Duration: 0.0, Protocol: 1, Source Port: 59, Destination IP: 1, Destination Port: 7, Number of Packets: 64

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 192.168.220.6, Duration: 0.148, Protocol: 2, Source Port: 5, Destination IP: 4, Destination Port: 5, Number of Packets: 133

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 192.168.100.4, Duration: 15.008, Protocol: 2, Source Port: 62, Destination IP: 3, Destination Port: 4, Number of Packets: 92

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 192.168.100.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 192.168.100.3, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 10036_235, Duration: 1.115, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 192.168.200.3, Duration: 0.001, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 10056_229, Duration: 1.013, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 10051_51, Duration: 1.506, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 192.168.220.3, Duration: 0.116, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 10049_131, Duration: 0.365, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 11193_139, Duration: 0.753, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 10012_8, Duration: 0.265, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 12741_189, Duration: 0.67, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 10012_33, Duration: 0.589, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 10013_97, Duration: 0.369, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 10278_98, Duration: 0.12, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 192.168.220.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 1

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 192.168.200.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 12741_125, Duration: 0.784, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 10575_79, Duration: 0.557, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 10012_24, Duration: 0.017, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 10011_183, Duration: 0.591, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T02:04:29.949000, End Frame: 2017-03-21T03:04:29.949000, Source IP: 10012_11, Duration: 0.017, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: DNS, Duration: 1.775, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 241, Number of Packets: 308

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 192.168.220.15, Duration: 0.148, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 129

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 192.168.210.5, Duration: 2.313, Protocol: 2, Source Port: 15, Destination IP: 6, Destination Port: 14, Number of Packets: 103

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 10012_74, Duration: 0.72, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 88

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 192.168.200.9, Duration: 41.881, Protocol: 2, Source Port: 178, Destination IP: 14, Destination Port: 7, Number of Packets: 992

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 10199_14, Duration: 0.36, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 36

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 10532_172, Duration: 0.667, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 111

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 192.168.100.5, Duration: 7.699, Protocol: 2, Source Port: 3, Destination IP: 17, Destination Port: 18, Number of Packets: 922

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 192.168.220.5, Duration: 2.746, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 141

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 192.168.220.16, Duration: 21.257, Protocol: 2, Source Port: 133, Destination IP: 20, Destination Port: 93, Number of Packets: 1253

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 10068_66, Duration: 0.131, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 192.168.220.6, Duration: 0.174, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 134

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 11015_151, Duration: 0.753, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: EXT_SERVER, Duration: 10.472, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 145, Number of Packets: 1180

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 192.168.200.8, Duration: 33.671, Protocol: 2, Source Port: 90, Destination IP: 9, Destination Port: 8, Number of Packets: 716

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 10036_235, Duration: 1.297, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 192.168.220.13, Duration: 0.155, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 134

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 192.168.220.11, Duration: 1.652, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 139

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 192.168.200.5, Duration: 0.16, Protocol: 2, Source Port: 5, Destination IP: 4, Destination Port: 5, Number of Packets: 139

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 192.168.220.9, Duration: 3.789, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 132

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 192.168.220.12, Duration: 0.144, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 135

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 192.168.220.7, Duration: 0.184, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 138

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 10162_129, Duration: 9.207, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 425

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 192.168.220.10, Duration: 0.173, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 138

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 192.168.220.4, Duration: 0.134, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 127

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 192.168.200.4, Duration: 0.17, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 137

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 192.168.220.14, Duration: 0.161, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 133

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 192.168.210.3, Duration: 0.072, Protocol: 2, Source Port: 16, Destination IP: 3, Destination Port: 5, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 192.168.210.1, Duration: 0.0, Protocol: 1, Source Port: 58, Destination IP: 1, Destination Port: 7, Number of Packets: 63

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 192.168.220.8, Duration: 0.138, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 125

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 192.168.100.4, Duration: 16.992, Protocol: 2, Source Port: 70, Destination IP: 3, Destination Port: 4, Number of Packets: 102

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 192.168.210.4, Duration: 0.0, Protocol: 2, Source Port: 2, Destination IP: 2, Destination Port: 13, Number of Packets: 17

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 192.168.210.2, Duration: 0.0, Protocol: 1, Source Port: 21, Destination IP: 1, Destination Port: 3, Number of Packets: 22

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 192.168.100.3, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 192.168.200.3, Duration: 0.0, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 192.168.220.3, Duration: 0.0, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 192.168.200.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 10011_188, Duration: 0.34, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 10575_79, Duration: 0.559, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 10012_17, Duration: 0.245, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 10012_33, Duration: 0.486, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 10056_178, Duration: 1.241, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 10013_97, Duration: 0.366, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 10034_8, Duration: 0.366, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 11193_139, Duration: 0.929, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 10012_8, Duration: 0.685, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 13698_157, Duration: 1.341, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 10621_107, Duration: 0.734, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 10527_2, Duration: 0.107, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 10919_132, Duration: 0.365, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 10012_42, Duration: 0.018, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 10833_103, Duration: 0.726, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 10012_51, Duration: 0.996, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 37

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 10047_85, Duration: 0.726, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 10609_250, Duration: 0.282, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 10012_11, Duration: 0.12, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T03:04:29.989000, End Frame: 2017-03-21T04:04:29.989000, Source IP: 10049_131, Duration: 0.18, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: DNS, Duration: 0.505, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 185, Number of Packets: 213

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 192.168.210.5, Duration: 2.372, Protocol: 2, Source Port: 15, Destination IP: 7, Destination Port: 17, Number of Packets: 108

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 192.168.100.5, Duration: 6.343, Protocol: 2, Source Port: 3, Destination IP: 19, Destination Port: 19, Number of Packets: 922

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 192.168.220.4, Duration: 0.173, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 134

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 10199_14, Duration: 0.806, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 192.168.200.4, Duration: 1.264, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 136

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 192.168.210.1, Duration: 0.0, Protocol: 1, Source Port: 60, Destination IP: 1, Destination Port: 7, Number of Packets: 65

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 192.168.220.12, Duration: 0.177, Protocol: 2, Source Port: 5, Destination IP: 4, Destination Port: 5, Number of Packets: 138

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 192.168.220.6, Duration: 0.168, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 138

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 192.168.220.16, Duration: 11.551, Protocol: 2, Source Port: 87, Destination IP: 22, Destination Port: 90, Number of Packets: 818

Output: attacker


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 10532_172, Duration: 0.118, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 81

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 10068_98, Duration: 0.35, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 10049_131, Duration: 0.367, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 192.168.220.8, Duration: 0.172, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 131

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 192.168.220.15, Duration: 0.164, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 136

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 10012_51, Duration: 0.04, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 78

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: EXT_SERVER, Duration: 12.316, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 147, Number of Packets: 1191

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 192.168.200.9, Duration: 37.414, Protocol: 2, Source Port: 157, Destination IP: 9, Destination Port: 7, Number of Packets: 899

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 192.168.200.8, Duration: 36.769, Protocol: 2, Source Port: 98, Destination IP: 10, Destination Port: 7, Number of Packets: 757

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 10919_132, Duration: 0.741, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 192.168.220.5, Duration: 2.262, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 130

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 192.168.220.9, Duration: 0.145, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 129

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 192.168.220.13, Duration: 0.177, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 138

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 192.168.220.11, Duration: 3.278, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 134

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 192.168.200.5, Duration: 0.152, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 137

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 10162_129, Duration: 1.415, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 60

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 192.168.220.7, Duration: 0.164, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 138

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 192.168.220.10, Duration: 0.174, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 138

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 192.168.220.14, Duration: 0.162, Protocol: 2, Source Port: 5, Destination IP: 4, Destination Port: 5, Number of Packets: 136

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 192.168.210.3, Duration: 0.088, Protocol: 2, Source Port: 19, Destination IP: 4, Destination Port: 5, Number of Packets: 29

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 192.168.100.4, Duration: 15.985, Protocol: 2, Source Port: 66, Destination IP: 3, Destination Port: 4, Number of Packets: 97

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 192.168.210.2, Duration: 0.0, Protocol: 2, Source Port: 21, Destination IP: 2, Destination Port: 4, Number of Packets: 22

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 192.168.210.4, Duration: 0.0, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 14, Number of Packets: 18

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 192.168.100.3, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 192.168.220.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 10034_8, Duration: 0.738, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 192.168.200.3, Duration: 0.0, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 14252_33, Duration: 1.241, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 10017_40, Duration: 0.387, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 10621_107, Duration: 0.55, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 192.168.220.3, Duration: 0.081, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 10014_174, Duration: 0.731, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 10012_42, Duration: 0.05, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 192.168.200.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 10048_62, Duration: 0.47, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 10012_11, Duration: 0.57, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 10575_79, Duration: 0.557, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 10833_103, Duration: 0.368, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 10296_226, Duration: 0.11, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 10648_199, Duration: 0.735, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 10036_235, Duration: 0.745, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 10012_74, Duration: 0.05, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 10609_250, Duration: 0.1, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 10712_206, Duration: 0.37, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 10032_128, Duration: 0.369, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 10012_8, Duration: 0.852, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 10015_248, Duration: 0.854, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T04:04:30.019000, End Frame: 2017-03-21T05:04:30.019000, Source IP: 10047_85, Duration: 0.364, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: DNS, Duration: 0.175, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 171, Number of Packets: 188

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 192.168.100.5, Duration: 22.705, Protocol: 2, Source Port: 3, Destination IP: 17, Destination Port: 18, Number of Packets: 938

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 192.168.200.4, Duration: 2.125, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 133

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 192.168.210.5, Duration: 2.283, Protocol: 2, Source Port: 15, Destination IP: 6, Destination Port: 16, Number of Packets: 105

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 10199_14, Duration: 0.369, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 36

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 192.168.220.14, Duration: 0.172, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 138

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 10193_2, Duration: 0.112, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 192.168.220.16, Duration: 13.309, Protocol: 2, Source Port: 78, Destination IP: 20, Destination Port: 91, Number of Packets: 756

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 10648_199, Duration: 0.728, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 192.168.210.1, Duration: 0.0, Protocol: 1, Source Port: 60, Destination IP: 1, Destination Port: 7, Number of Packets: 65

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 10012_51, Duration: 0.067, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 80

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: EXT_SERVER, Duration: 11.963, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 146, Number of Packets: 1188

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 192.168.200.9, Duration: 38.692, Protocol: 2, Source Port: 161, Destination IP: 9, Destination Port: 6, Number of Packets: 910

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 192.168.200.8, Duration: 32.215, Protocol: 2, Source Port: 80, Destination IP: 3, Destination Port: 4, Number of Packets: 681

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 192.168.220.4, Duration: 0.178, Protocol: 2, Source Port: 5, Destination IP: 4, Destination Port: 5, Number of Packets: 139

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 10036_235, Duration: 0.374, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 192.168.220.12, Duration: 1.231, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 139

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 192.168.220.6, Duration: 1.332, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 139

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 192.168.220.8, Duration: 0.183, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 138

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 192.168.220.15, Duration: 0.172, Protocol: 2, Source Port: 5, Destination IP: 4, Destination Port: 5, Number of Packets: 139

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 192.168.220.5, Duration: 0.153, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 129

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 192.168.220.9, Duration: 0.166, Protocol: 2, Source Port: 5, Destination IP: 4, Destination Port: 5, Number of Packets: 135

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 10532_172, Duration: 0.253, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 90

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 192.168.220.13, Duration: 0.176, Protocol: 2, Source Port: 5, Destination IP: 4, Destination Port: 5, Number of Packets: 137

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 192.168.200.5, Duration: 5.124, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 139

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 192.168.220.11, Duration: 0.147, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 126

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 10012_42, Duration: 0.064, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 192.168.220.7, Duration: 5.006, Protocol: 2, Source Port: 5, Destination IP: 4, Destination Port: 5, Number of Packets: 140

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 192.168.220.10, Duration: 0.179, Protocol: 2, Source Port: 5, Destination IP: 4, Destination Port: 5, Number of Packets: 137

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 192.168.220.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 192.168.210.3, Duration: 0.09, Protocol: 2, Source Port: 18, Destination IP: 3, Destination Port: 5, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 192.168.210.4, Duration: 0.0, Protocol: 2, Source Port: 3, Destination IP: 2, Destination Port: 14, Number of Packets: 18

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 192.168.210.2, Duration: 0.0, Protocol: 1, Source Port: 22, Destination IP: 1, Destination Port: 3, Number of Packets: 23

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 192.168.100.4, Duration: 12.989, Protocol: 2, Source Port: 62, Destination IP: 3, Destination Port: 4, Number of Packets: 90

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 192.168.100.3, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 10833_103, Duration: 0.371, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 192.168.200.3, Duration: 0.0, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 192.168.220.3, Duration: 0.0, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 14252_148, Duration: 1.008, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 10712_206, Duration: 1.288, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 10621_107, Duration: 0.913, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 10034_8, Duration: 0.735, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 10047_85, Duration: 0.549, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 10499_66, Duration: 0.106, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 10035_234, Duration: 1.292, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 11015_151, Duration: 0.375, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 10012_74, Duration: 0.051, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 14252_158, Duration: 0.994, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T05:04:30.043000, End Frame: 2017-03-21T06:04:30.043000, Source IP: 10046_7, Duration: 0.363, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 10199_14, Duration: 51.436, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 43, Number of Packets: 1099

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 192.168.210.5, Duration: 1053.871, Protocol: 2, Source Port: 1486, Destination IP: 319, Destination Port: 17, Number of Packets: 23177

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 192.168.100.5, Duration: 117.439, Protocol: 2, Source Port: 3, Destination IP: 19, Destination Port: 19, Number of Packets: 406231

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 192.168.220.10, Duration: 5.995, Protocol: 2, Source Port: 7, Destination IP: 4, Destination Port: 7, Number of Packets: 143

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 192.168.220.13, Duration: 2.415, Protocol: 2, Source Port: 7, Destination IP: 4, Destination Port: 7, Number of Packets: 148

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 192.168.200.4, Duration: 1.185, Protocol: 2, Source Port: 7, Destination IP: 4, Destination Port: 7, Number of Packets: 143

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: DNS, Duration: 37.398, Protocol: 1, Source Port: 1, Destination IP: 9, Destination Port: 3144, Number of Packets: 5511

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 10793_130, Duration: 5.572, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 117

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 192.168.220.16, Duration: 11.535, Protocol: 2, Source Port: 76, Destination IP: 19, Destination Port: 90, Number of Packets: 798

Output: attacker


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 10012_51, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: EXT_SERVER, Duration: 11.952, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 146, Number of Packets: 1188

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 10621_107, Duration: 1.136, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 192.168.200.9, Duration: 50.019, Protocol: 2, Source Port: 162, Destination IP: 9, Destination Port: 7, Number of Packets: 1338

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 192.168.200.8, Duration: 32.955, Protocol: 2, Source Port: 87, Destination IP: 7, Destination Port: 7, Number of Packets: 710

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 192.168.220.14, Duration: 0.194, Protocol: 2, Source Port: 7, Destination IP: 4, Destination Port: 7, Number of Packets: 148

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 10034_8, Duration: 2.928, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 64

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 192.168.220.4, Duration: 1533.122, Protocol: 2, Source Port: 4045, Destination IP: 505, Destination Port: 12, Number of Packets: 381903

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 192.168.220.6, Duration: 4.984, Protocol: 2, Source Port: 7, Destination IP: 4, Destination Port: 7, Number of Packets: 142

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 192.168.210.1, Duration: 0.0, Protocol: 1, Source Port: 59, Destination IP: 1, Destination Port: 6, Number of Packets: 63

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 192.168.220.9, Duration: 426.347, Protocol: 2, Source Port: 1295, Destination IP: 215, Destination Port: 11, Number of Packets: 18007

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 192.168.220.12, Duration: 2.237, Protocol: 2, Source Port: 7, Destination IP: 4, Destination Port: 7, Number of Packets: 141

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 10532_172, Duration: 2.584, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 317

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 192.168.220.8, Duration: 0.283, Protocol: 2, Source Port: 8, Destination IP: 5, Destination Port: 8, Number of Packets: 150

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 192.168.220.15, Duration: 1.388, Protocol: 2, Source Port: 7, Destination IP: 4, Destination Port: 7, Number of Packets: 153

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 192.168.220.5, Duration: 0.178, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 141

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 10012_74, Duration: 0.621, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 302

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 192.168.220.7, Duration: 0.173, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 135

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 192.168.220.11, Duration: 286.115, Protocol: 2, Source Port: 489, Destination IP: 115, Destination Port: 9, Number of Packets: 7999

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 192.168.200.5, Duration: 0.162, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 142

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 192.168.210.3, Duration: 0.052, Protocol: 2, Source Port: 16, Destination IP: 3, Destination Port: 4, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 192.168.100.4, Duration: 17.895, Protocol: 2, Source Port: 76, Destination IP: 6, Destination Port: 9, Number of Packets: 244

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 192.168.210.4, Duration: 0.0, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 15, Number of Packets: 19

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 192.168.210.2, Duration: 0.0, Protocol: 1, Source Port: 18, Destination IP: 1, Destination Port: 3, Number of Packets: 19

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 10919_132, Duration: 0.546, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 192.168.100.3, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 10057_29, Duration: 49.502, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 54, Number of Packets: 397

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 10062_127, Duration: 4.815, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 6, Number of Packets: 58

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 14252_17, Duration: 0.041, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 10185_51, Duration: 3.583, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 43

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 14252_7, Duration: 0.28, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 251

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 10032_128, Duration: 0.923, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 14252_45, Duration: 0.11, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 41

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 10847_122, Duration: 1.583, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-21T06:04:30.065000, End Frame: 2017-03-21T07:04:30.065000, Source IP: 192.168.200.3, Duration: 0.829, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 16

Output: normal