Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 192.168.210.5, Duration: 134.975, Protocol: 2, Source Port: 233, Destination IP: 55, Destination Port: 8, Number of Packets: 11013

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10139_43, Duration: 1.36, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 8, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10135_249, Duration: 0.098, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10081_164, Duration: 61.731, Protocol: 1, Source Port: 2, Destination IP: 9, Destination Port: 45, Number of Packets: 845

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10073_65, Duration: 13.248, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 59, Number of Packets: 429

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: DNS, Duration: 96.59, Protocol: 1, Source Port: 1, Destination IP: 18, Destination Port: 6822, Number of Packets: 14146

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10077_154, Duration: 12.062, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 8, Number of Packets: 239

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10138_16, Duration: 1.016, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 7, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10073_64, Duration: 4.655, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 53, Number of Packets: 419

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10077_156, Duration: 24.801, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 33, Number of Packets: 576

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10139_39, Duration: 1.228, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 8, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10078_100, Duration: 6.481, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 16, Number of Packets: 170

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10154_226, Duration: 2.74, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 4, Number of Packets: 110

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10066_79, Duration: 6.033, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 10, Number of Packets: 88

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10082_132, Duration: 0.064, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10527_10, Duration: 16.07, Protocol: 1, Source Port: 2, Destination IP: 10, Destination Port: 36, Number of Packets: 1050

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10511_218, Duration: 1.551, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 33

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 192.168.220.3, Duration: 0.0, Protocol: 1, Source Port: 3, Destination IP: 2, Destination Port: 3, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 192.168.220.13, Duration: 168.898, Protocol: 2, Source Port: 344, Destination IP: 94, Destination Port: 9, Number of Packets: 6207

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 192.168.220.15, Duration: 1365.486, Protocol: 3, Source Port: 3320, Destination IP: 477, Destination Port: 11, Number of Packets: 55868

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10010_37, Duration: 7.005, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 25, Number of Packets: 148

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10022_249, Duration: 19.222, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 53, Number of Packets: 714

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10527_6, Duration: 87.293, Protocol: 1, Source Port: 2, Destination IP: 12, Destination Port: 68, Number of Packets: 3641

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10104_157, Duration: 11.564, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 10, Number of Packets: 106

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10085_31, Duration: 10.942, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 68, Number of Packets: 303

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10108_7, Duration: 5.01, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 16, Number of Packets: 149

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10097_117, Duration: 0.761, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 5, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10114_231, Duration: 0.589, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10075_226, Duration: 11.573, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 15, Number of Packets: 230

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10743_1, Duration: 0.204, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10100_133, Duration: 7.463, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 15, Number of Packets: 180

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10098_126, Duration: 5.166, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 8, Number of Packets: 135

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10089_52, Duration: 7.132, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 16, Number of Packets: 146

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10102_83, Duration: 3.408, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 11, Number of Packets: 79

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10875_6, Duration: 4.216, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 8, Number of Packets: 76

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10527_2, Duration: 153.588, Protocol: 1, Source Port: 2, Destination IP: 8, Destination Port: 31, Number of Packets: 4595

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10103_142, Duration: 7.281, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 16, Number of Packets: 136

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10106_93, Duration: 14.623, Protocol: 1, Source Port: 2, Destination IP: 9, Destination Port: 57, Number of Packets: 490

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10095_80, Duration: 6.765, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 14, Number of Packets: 128

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10109_187, Duration: 2.579, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 10, Number of Packets: 114

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10086_192, Duration: 15.415, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 22, Number of Packets: 344

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10088_9, Duration: 34.039, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 35, Number of Packets: 447

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11205_114, Duration: 3.466, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10094_75, Duration: 4.174, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 14, Number of Packets: 109

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10092_104, Duration: 12.162, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 5, Number of Packets: 58

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10091_2, Duration: 1.586, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 43

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10058_155, Duration: 18.527, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 21, Number of Packets: 257

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10056_187, Duration: 1.491, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 6, Number of Packets: 81

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10062_127, Duration: 6.225, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 10, Number of Packets: 106

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10087_41, Duration: 26.592, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 58, Number of Packets: 1113

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10093_150, Duration: 6.248, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 9, Number of Packets: 96

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10012_34, Duration: 6.588, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 8, Number of Packets: 130

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 192.168.100.4, Duration: 28.41, Protocol: 2, Source Port: 86, Destination IP: 12, Destination Port: 45, Number of Packets: 1442

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10159_95, Duration: 0.288, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 64

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11380_224, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 192.168.220.14, Duration: 0.339, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 147

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 192.168.200.9, Duration: 695.268, Protocol: 2, Source Port: 1204, Destination IP: 217, Destination Port: 9, Number of Packets: 13826

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 192.168.220.5, Duration: 247.119, Protocol: 2, Source Port: 313, Destination IP: 74, Destination Port: 10, Number of Packets: 274849

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 192.168.220.6, Duration: 875.689, Protocol: 3, Source Port: 1179, Destination IP: 250, Destination Port: 10, Number of Packets: 27792

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 192.168.220.12, Duration: 63.462, Protocol: 2, Source Port: 153, Destination IP: 33, Destination Port: 7, Number of Packets: 3685

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10064_217, Duration: 5.009, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 11, Number of Packets: 460

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11046_82, Duration: 8.965, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 67

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10499_42, Duration: 0.399, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 5, Number of Packets: 60

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10527_3, Duration: 62.484, Protocol: 1, Source Port: 2, Destination IP: 12, Destination Port: 79, Number of Packets: 2612

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10527_4, Duration: 128.758, Protocol: 1, Source Port: 2, Destination IP: 12, Destination Port: 50, Number of Packets: 2009

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10012_59, Duration: 10.308, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 771

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 12794_131, Duration: 1.254, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 192.168.220.7, Duration: 567.779, Protocol: 2, Source Port: 1515, Destination IP: 182, Destination Port: 7, Number of Packets: 21474

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10278_74, Duration: 0.674, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10527_1, Duration: 42.631, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 36, Number of Packets: 2560

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 192.168.220.8, Duration: 0.336, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 148

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 192.168.220.9, Duration: 496.395, Protocol: 2, Source Port: 949, Destination IP: 172, Destination Port: 10, Number of Packets: 15646

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 192.168.200.4, Duration: 220.943, Protocol: 2, Source Port: 300, Destination IP: 55, Destination Port: 9, Number of Packets: 266722

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 192.168.220.10, Duration: 0.821, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 151

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10786_4, Duration: 9.973, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 11, Number of Packets: 132

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10056_234, Duration: 3.229, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 13, Number of Packets: 739

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10057_29, Duration: 112.182, Protocol: 1, Source Port: 1, Destination IP: 14, Destination Port: 132, Number of Packets: 907

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11529_47, Duration: 4.664, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 60

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10224_166, Duration: 7.707, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 15, Number of Packets: 435

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10223_4, Duration: 27.137, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 59, Number of Packets: 2439

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10185_51, Duration: 13.637, Protocol: 1, Source Port: 1, Destination IP: 9, Destination Port: 15, Number of Packets: 185

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10223_61, Duration: 13.072, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 61, Number of Packets: 1133

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10223_24, Duration: 24.733, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 35, Number of Packets: 709

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10527_8, Duration: 8.298, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 14, Number of Packets: 368

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10028_175, Duration: 5.461, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 16, Number of Packets: 203

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10765_86, Duration: 6.242, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 14, Number of Packets: 92

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11439_36, Duration: 0.94, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 50

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10055_190, Duration: 6.67, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 7, Number of Packets: 83

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10013_97, Duration: 2.258, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10132_239, Duration: 8.241, Protocol: 1, Source Port: 1, Destination IP: 9, Destination Port: 53, Number of Packets: 309

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10056_41, Duration: 0.476, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 5, Number of Packets: 67

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11046_154, Duration: 1.524, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 81

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10591_216, Duration: 0.531, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 6, Number of Packets: 43

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10276_216, Duration: 5.547, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 8, Number of Packets: 71

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10056_164, Duration: 2.214, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 8, Number of Packets: 999

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11643_207, Duration: 3.172, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 57

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10056_85, Duration: 0.451, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 7, Number of Packets: 256

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10124_1, Duration: 77.668, Protocol: 1, Source Port: 1, Destination IP: 12, Destination Port: 174, Number of Packets: 832

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10056_131, Duration: 0.649, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10005_14, Duration: 4.209, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 15, Number of Packets: 150

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10228_240, Duration: 2.841, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10984_40, Duration: 0.051, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 43

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11014_185, Duration: 63.759, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 53, Number of Packets: 4284

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10005_36, Duration: 7.183, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 8, Number of Packets: 212

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10047_85, Duration: 2.288, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 50

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10063_205, Duration: 1.433, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 6, Number of Packets: 115

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 13070_241, Duration: 2.639, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10056_221, Duration: 0.519, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 424

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11149_153, Duration: 9.95, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 10, Number of Packets: 143

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10056_103, Duration: 0.325, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 5, Number of Packets: 175

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10171_253, Duration: 2.277, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 14, Number of Packets: 102

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11591_96, Duration: 0.629, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 3, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11978_166, Duration: 0.673, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 33

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10125_12, Duration: 16.347, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 16, Number of Packets: 91

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10046_7, Duration: 3.385, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 5, Number of Packets: 58

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10180_116, Duration: 11.253, Protocol: 1, Source Port: 1, Destination IP: 8, Destination Port: 13, Number of Packets: 159

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10667_192, Duration: 28.394, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 14, Number of Packets: 1463

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10667_208, Duration: 5.72, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 6, Number of Packets: 836

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10084_13, Duration: 5.732, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 8, Number of Packets: 56

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10075_202, Duration: 3.743, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 134

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10979_53, Duration: 15.976, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 14, Number of Packets: 335

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11485_107, Duration: 0.862, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11435_105, Duration: 2.951, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 218

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11486_12, Duration: 0.21, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11434_117, Duration: 0.409, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10225_200, Duration: 6.188, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 4, Number of Packets: 80

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11437_87, Duration: 1.657, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11487_148, Duration: 2.016, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11438_50, Duration: 1.082, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11542_161, Duration: 0.568, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 4, Number of Packets: 54

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11611_5, Duration: 0.651, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10221_13, Duration: 10.949, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 11, Number of Packets: 9261

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10160_74, Duration: 4.32, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 10, Number of Packets: 5333

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10793_162, Duration: 84.345, Protocol: 1, Source Port: 2, Destination IP: 8, Destination Port: 38, Number of Packets: 2136

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 192.168.210.4, Duration: 0.0, Protocol: 2, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10191_163, Duration: 6.015, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 7, Number of Packets: 87

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10056_138, Duration: 2.14, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 7, Number of Packets: 116

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10051_51, Duration: 4.141, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 51

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10056_99, Duration: 1.391, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11236_70, Duration: 2.201, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 3, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10056_51, Duration: 0.411, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 6, Number of Packets: 225

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10184_177, Duration: 8.481, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 10, Number of Packets: 119

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10056_80, Duration: 4.977, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 8, Number of Packets: 133

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10620_86, Duration: 0.113, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10619_191, Duration: 41.72, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 21, Number of Packets: 1926

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10278_106, Duration: 0.874, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 32

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11015_151, Duration: 2.269, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 48

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10056_87, Duration: 1.046, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 6, Number of Packets: 733

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10065_139, Duration: 5.779, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 6, Number of Packets: 77

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 192.168.200.3, Duration: 0.001, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10230_59, Duration: 1.631, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10056_84, Duration: 8.055, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 42, Number of Packets: 573

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 13071_53, Duration: 5.703, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 10, Number of Packets: 108

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10056_13, Duration: 2.501, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 10, Number of Packets: 155

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11865_50, Duration: 1.026, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10074_39, Duration: 3.254, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 31, Number of Packets: 233

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10069_75, Duration: 0.272, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 6, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11743_75, Duration: 0.405, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10072_42, Duration: 1.844, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 10, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10150_70, Duration: 2.804, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 14, Number of Packets: 135

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10082_57, Duration: 2.861, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 48

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10918_114, Duration: 7.441, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 6, Number of Packets: 80

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10902_202, Duration: 12.645, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 25, Number of Packets: 540

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10090_196, Duration: 2.074, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 5, Number of Packets: 44

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10133_33, Duration: 11.656, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 22, Number of Packets: 1027

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11193_139, Duration: 3.515, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10056_50, Duration: 7.01, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 10, Number of Packets: 1184

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10091_132, Duration: 0.208, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 50

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10072_39, Duration: 0.758, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10186_125, Duration: 2.484, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10092_102, Duration: 9.364, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 8, Number of Packets: 45

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10840_33, Duration: 0.1, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10056_129, Duration: 1.627, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 5, Number of Packets: 174

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10782_56, Duration: 7.306, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 51

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10133_99, Duration: 0.298, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10194_71, Duration: 0.25, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 36

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10194_66, Duration: 0.032, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10279_52, Duration: 0.052, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10194_76, Duration: 0.049, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10012_11, Duration: 0.88, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 17, Number of Packets: 159

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10331_64, Duration: 0.254, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10622_14, Duration: 6.382, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 6, Number of Packets: 75

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10092_103, Duration: 8.982, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 10, Number of Packets: 43

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10283_80, Duration: 0.208, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10097_50, Duration: 2.395, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 6, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11733_120, Duration: 0.962, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 5, Number of Packets: 44

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10102_54, Duration: 10.798, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 13, Number of Packets: 96

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10083_129, Duration: 2.322, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 7, Number of Packets: 66

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10056_20, Duration: 0.764, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 63

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10012_19, Duration: 56.952, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 47, Number of Packets: 2833

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10001_232, Duration: 112.132, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 98, Number of Packets: 4443

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10543_146, Duration: 1.293, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10010_38, Duration: 1.291, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 39

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10181_60, Duration: 3.636, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 5, Number of Packets: 65

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10012_25, Duration: 11.272, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 26, Number of Packets: 683

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10007_205, Duration: 1.099, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 33

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10017_40, Duration: 3.776, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 5, Number of Packets: 63

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10056_232, Duration: 2.902, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 8, Number of Packets: 1209

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10970_157, Duration: 3.577, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 6, Number of Packets: 76

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10000_35, Duration: 15.343, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 14, Number of Packets: 642

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11457_45, Duration: 2.511, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11244_2, Duration: 0.185, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10695_2, Duration: 0.115, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10061_157, Duration: 4.639, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10710_179, Duration: 0.058, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10007_207, Duration: 0.809, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 8, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11551_69, Duration: 19.871, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 8, Number of Packets: 639

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10267_102, Duration: 7.005, Protocol: 1, Source Port: 1, Destination IP: 9, Destination Port: 20, Number of Packets: 176

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10249_77, Duration: 3.064, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 11, Number of Packets: 110

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 12592_175, Duration: 2.425, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 53

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10603_25, Duration: 6.687, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 15, Number of Packets: 126

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10092_108, Duration: 19.42, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 5, Number of Packets: 103

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10438_216, Duration: 2.681, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 14, Number of Packets: 102

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10826_232, Duration: 0.44, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 52

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10249_102, Duration: 1.174, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 5, Number of Packets: 47

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10085_66, Duration: 5.152, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 16, Number of Packets: 196

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10163_2, Duration: 8.703, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 24, Number of Packets: 200

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11046_156, Duration: 7.073, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 6, Number of Packets: 429

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10163_10, Duration: 5.357, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 20, Number of Packets: 249

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10989_56, Duration: 1.43, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 6, Number of Packets: 60

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 12141_248, Duration: 1.111, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10986_160, Duration: 10.705, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 860

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10135_61, Duration: 3.842, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 5, Number of Packets: 46

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10135_94, Duration: 3.558, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 15, Number of Packets: 147

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11027_42, Duration: 1.742, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10034_8, Duration: 2.61, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 32

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10056_151, Duration: 0.309, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 5, Number of Packets: 191

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10718_106, Duration: 2.902, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 6, Number of Packets: 68

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10056_152, Duration: 1.843, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 436

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 192.168.100.3, Duration: 0.001, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10182_24, Duration: 0.622, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10183_96, Duration: 0.316, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 118

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10163_60, Duration: 34.322, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 47, Number of Packets: 903

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10987_129, Duration: 3.257, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 7, Number of Packets: 82

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10107_210, Duration: 3.539, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 11, Number of Packets: 90

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11343_58, Duration: 0.48, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10107_27, Duration: 10.941, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 27, Number of Packets: 207

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10249_78, Duration: 0.351, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10384_183, Duration: 0.177, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10129_10, Duration: 15.466, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 15, Number of Packets: 175

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10135_210, Duration: 4.936, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 3, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10224_172, Duration: 11.646, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 8, Number of Packets: 312

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11235_76, Duration: 0.972, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 33

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10022_175, Duration: 8.363, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 12, Number of Packets: 174

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10279_223, Duration: 0.79, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11972_154, Duration: 2.745, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 8, Number of Packets: 53

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10049_131, Duration: 3.212, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 5, Number of Packets: 58

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10951_141, Duration: 2.816, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 55

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11046_155, Duration: 2.571, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10056_193, Duration: 0.841, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 5, Number of Packets: 189

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10587_162, Duration: 31.991, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 10, Number of Packets: 464

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10278_34, Duration: 26.26, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 10, Number of Packets: 593

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10056_132, Duration: 0.554, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10004_7, Duration: 8.062, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 20, Number of Packets: 920

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10004_36, Duration: 12.202, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 6, Number of Packets: 869

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 12341_101, Duration: 0.047, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 192.168.210.3, Duration: 0.114, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10874_42, Duration: 3.848, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 11, Number of Packets: 243

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10117_88, Duration: 1.976, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 14, Number of Packets: 66

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10194_100, Duration: 5.597, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 6, Number of Packets: 52

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10080_156, Duration: 7.448, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 5, Number of Packets: 162

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10874_22, Duration: 0.146, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 13, Number of Packets: 49

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10315_252, Duration: 3.15, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 50, Number of Packets: 415

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10251_54, Duration: 19.72, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 29, Number of Packets: 294

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10252_2, Duration: 0.224, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10074_40, Duration: 13.764, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 60, Number of Packets: 414

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10316_201, Duration: 0.306, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10120_132, Duration: 2.735, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 50

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10252_4, Duration: 18.97, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 240

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10107_4, Duration: 4.69, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 16, Number of Packets: 138

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10495_108, Duration: 1.396, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 6, Number of Packets: 98

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10447_164, Duration: 0.018, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 9, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10194_67, Duration: 3.254, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 39

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10092_109, Duration: 14.65, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 14, Number of Packets: 73

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10374_141, Duration: 3.264, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 21, Number of Packets: 155

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 12499_30, Duration: 4.343, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10586_30, Duration: 0.351, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10244_16, Duration: 5.987, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 11, Number of Packets: 104

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10220_207, Duration: 14.059, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 17, Number of Packets: 152

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10078_76, Duration: 6.919, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 8, Number of Packets: 100

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10610_123, Duration: 0.141, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10082_167, Duration: 1.994, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10252_12, Duration: 1.461, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 6, Number of Packets: 84

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 13072_87, Duration: 0.206, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10150_199, Duration: 11.302, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 24, Number of Packets: 153

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10135_60, Duration: 18.716, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 9, Number of Packets: 102

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10878_27, Duration: 0.299, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 12079_141, Duration: 0.207, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10131_216, Duration: 5.342, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 8, Number of Packets: 86

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10586_60, Duration: 0.194, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10117_80, Duration: 21.044, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 89, Number of Packets: 779

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10143_90, Duration: 7.263, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 7, Number of Packets: 92

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10759_103, Duration: 0.045, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11038_71, Duration: 6.51, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 50

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10110_11, Duration: 0.906, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 12, Number of Packets: 67

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10274_217, Duration: 0.242, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10014_174, Duration: 1.721, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 37

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10371_48, Duration: 0.913, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 12420_122, Duration: 0.136, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10151_143, Duration: 8.525, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 8, Number of Packets: 97

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10329_28, Duration: 3.978, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 5, Number of Packets: 57

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 11392_156, Duration: 3.2, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 2, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10107_7, Duration: 0.851, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 37

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10295_67, Duration: 25.468, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 142, Number of Packets: 1502

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10150_212, Duration: 0.206, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10163_46, Duration: 6.964, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 43, Number of Packets: 450

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 12710_156, Duration: 0.352, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10037_168, Duration: 3.426, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 5, Number of Packets: 53

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10012_49, Duration: 0.625, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T10:01:27.375000, End Frame: 2017-03-16T11:01:27.375000, Source IP: 10888_210, Duration: 0.671, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 15

Output: normal