Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11971_155, Duration: 1.03, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11667_110, Duration: 0.124, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 12323_56, Duration: 0.207, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10112_133, Duration: 0.938, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10239_150, Duration: 0.113, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10163_4, Duration: 0.378, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10280_238, Duration: 0.113, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 12010_85, Duration: 0.847, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10111_108, Duration: 0.783, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 12059_16, Duration: 1.442, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11735_198, Duration: 25.919, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 35, Number of Packets: 3701

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11736_38, Duration: 1.068, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 43

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10214_45, Duration: 1.13, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 158

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10278_72, Duration: 1.862, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 100

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11535_57, Duration: 0.779, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11296_36, Duration: 2.116, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 63

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10092_109, Duration: 10.196, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 45

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10010_38, Duration: 1.341, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10893_84, Duration: 0.765, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11153_186, Duration: 0.316, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 12305_1, Duration: 0.729, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10790_112, Duration: 0.682, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 7, Number of Packets: 128

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10788_89, Duration: 119.468, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 216, Number of Packets: 2422

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10791_44, Duration: 1.158, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 9, Number of Packets: 113

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10792_144, Duration: 0.529, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11149_153, Duration: 1.781, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10052_14, Duration: 16.029, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 404

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11551_120, Duration: 7.395, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 10, Number of Packets: 403

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 12134_78, Duration: 10.705, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 342

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11250_25, Duration: 12.501, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 21, Number of Packets: 362

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11250_15, Duration: 0.579, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11250_39, Duration: 5.122, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 11, Number of Packets: 53

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10082_106, Duration: 0.249, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 35

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11263_67, Duration: 2.894, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 91

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10328_25, Duration: 1.318, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 54

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10971_103, Duration: 0.801, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 35

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11280_164, Duration: 0.115, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10506_8, Duration: 0.641, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 46

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11286_155, Duration: 2.894, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10056_220, Duration: 0.056, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11034_229, Duration: 2.99, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 43

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10056_24, Duration: 0.128, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10056_75, Duration: 3.72, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 89

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10056_116, Duration: 0.311, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 46

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10415_65, Duration: 0.942, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10801_113, Duration: 1.571, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11737_140, Duration: 1.923, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10804_251, Duration: 1.625, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11254_87, Duration: 0.226, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 12947_121, Duration: 0.76, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10807_53, Duration: 4.253, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 66

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11619_210, Duration: 2.288, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 65

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10107_39, Duration: 1.762, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 10, Number of Packets: 100

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10007_205, Duration: 0.518, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10401_203, Duration: 4.461, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10171_234, Duration: 1.892, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 32

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11263_237, Duration: 0.272, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10092_108, Duration: 1.437, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10793_130, Duration: 15.924, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 7, Number of Packets: 196

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11417_176, Duration: 1.637, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10558_18, Duration: 5.326, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 8, Number of Packets: 109

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10105_12, Duration: 0.405, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 91

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10796_101, Duration: 15.88, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 46, Number of Packets: 772

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10072_43, Duration: 0.968, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11049_41, Duration: 0.151, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 42

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10796_72, Duration: 11.417, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 8, Number of Packets: 207

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11254_86, Duration: 0.286, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11453_17, Duration: 0.409, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 53

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11281_229, Duration: 4.353, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11454_194, Duration: 0.422, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 46

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10118_56, Duration: 1.172, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 67

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 12797_54, Duration: 0.416, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 12573_99, Duration: 0.341, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11223_136, Duration: 1.27, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 12134_30, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11551_105, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11273_188, Duration: 0.313, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11253_68, Duration: 1.43, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 45

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 13237_37, Duration: 2.525, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 10, Number of Packets: 66

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10734_193, Duration: 1.139, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10085_100, Duration: 2.937, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 8, Number of Packets: 57

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10273_211, Duration: 0.129, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10643_146, Duration: 0.792, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 12859_133, Duration: 1.533, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10255_143, Duration: 2.091, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11263_71, Duration: 1.268, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11254_90, Duration: 1.733, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11077_34, Duration: 1.042, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11842_62, Duration: 0.404, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 13878_174, Duration: 0.572, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 37

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10105_4, Duration: 0.154, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 45

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10283_80, Duration: 1.707, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10007_19, Duration: 0.501, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11540_144, Duration: 2.458, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 8, Number of Packets: 86

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11968_124, Duration: 0.336, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11443_151, Duration: 0.768, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11242_170, Duration: 0.782, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10026_207, Duration: 0.168, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 11297_37, Duration: 0.12, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 36

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10447_164, Duration: 0.053, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10068_72, Duration: 0.094, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10737_69, Duration: 1.759, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T10:01:59.974000, End Frame: 2017-03-17T11:01:59.974000, Source IP: 10007_207, Duration: 0.989, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: DNS, Duration: 64.5, Protocol: 1, Source Port: 1, Destination IP: 18, Destination Port: 5610, Number of Packets: 11110

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10532_205, Duration: 6.506, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 8, Number of Packets: 300

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10438_216, Duration: 5.391, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 13, Number of Packets: 124

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10319_216, Duration: 3.26, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 10, Number of Packets: 78

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 192.168.220.16, Duration: 3139.768, Protocol: 2, Source Port: 3464, Destination IP: 351, Destination Port: 9, Number of Packets: 55551

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 192.168.210.4, Duration: 111.059, Protocol: 2, Source Port: 241, Destination IP: 67, Destination Port: 4, Number of Packets: 2585

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10056_234, Duration: 2.028, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 13, Number of Packets: 443

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10056_184, Duration: 2.511, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 8, Number of Packets: 163

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10848_50, Duration: 6.359, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 39

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10184_177, Duration: 4.913, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 8, Number of Packets: 94

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10629_11, Duration: 57.089, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 13, Number of Packets: 529

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 192.168.220.14, Duration: 648.413, Protocol: 2, Source Port: 1598, Destination IP: 254, Destination Port: 10, Number of Packets: 46099

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10789_31, Duration: 2.816, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 8, Number of Packets: 115

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10532_203, Duration: 18.616, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 376

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10185_51, Duration: 18.869, Protocol: 1, Source Port: 1, Destination IP: 10, Destination Port: 16, Number of Packets: 213

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 192.168.220.8, Duration: 542.048, Protocol: 2, Source Port: 1556, Destination IP: 174, Destination Port: 7, Number of Packets: 23505

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10131_216, Duration: 0.662, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 6, Number of Packets: 57

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10057_29, Duration: 94.43, Protocol: 1, Source Port: 1, Destination IP: 14, Destination Port: 146, Number of Packets: 949

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10058_155, Duration: 14.132, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 14, Number of Packets: 167

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: EXT_SERVER, Duration: 17.791, Protocol: 1, Source Port: 3, Destination IP: 4, Destination Port: 160, Number of Packets: 1629

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 11540_144, Duration: 1.086, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 11014_185, Duration: 54.362, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 156, Number of Packets: 5188

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10296_238, Duration: 920.906, Protocol: 1, Source Port: 2, Destination IP: 15, Destination Port: 134, Number of Packets: 9905

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10296_232, Duration: 8.126, Protocol: 1, Source Port: 2, Destination IP: 9, Destination Port: 35, Number of Packets: 539

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 11223_154, Duration: 0.899, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 192.168.200.9, Duration: 31.595, Protocol: 2, Source Port: 82, Destination IP: 4, Destination Port: 6, Number of Packets: 687

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10630_249, Duration: 0.901, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10631_40, Duration: 1.041, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10078_74, Duration: 0.49, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 4, Number of Packets: 50

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10281_132, Duration: 0.603, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10296_227, Duration: 54.816, Protocol: 1, Source Port: 2, Destination IP: 13, Destination Port: 62, Number of Packets: 2831

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10296_230, Duration: 80.507, Protocol: 1, Source Port: 2, Destination IP: 13, Destination Port: 61, Number of Packets: 3189

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10005_36, Duration: 10.89, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 7, Number of Packets: 251

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10532_180, Duration: 5.415, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 15, Number of Packets: 309

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10296_226, Duration: 126.748, Protocol: 1, Source Port: 2, Destination IP: 12, Destination Port: 43, Number of Packets: 2951

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10381_200, Duration: 0.879, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10075_194, Duration: 12.728, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 14, Number of Packets: 300

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10194_80, Duration: 0.89, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10129_14, Duration: 3.289, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 12, Number of Packets: 66

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10370_33, Duration: 3.367, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 46

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10060_27, Duration: 72.998, Protocol: 1, Source Port: 1, Destination IP: 13, Destination Port: 245, Number of Packets: 1655

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10194_77, Duration: 0.119, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 13244_224, Duration: 3.442, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 46

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10296_228, Duration: 78.477, Protocol: 1, Source Port: 2, Destination IP: 13, Destination Port: 35, Number of Packets: 1608

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10967_1, Duration: 0.379, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10414_45, Duration: 1.87, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 20, Number of Packets: 99

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 11388_60, Duration: 0.969, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10632_175, Duration: 0.357, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 11180_76, Duration: 1.154, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10636_203, Duration: 1.486, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 48

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10263_185, Duration: 10.381, Protocol: 1, Source Port: 2, Destination IP: 8, Destination Port: 23, Number of Packets: 164

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10635_192, Duration: 0.51, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 59

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10049_131, Duration: 4.174, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 7, Number of Packets: 84

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10056_40, Duration: 7.71, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 10, Number of Packets: 787

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10056_168, Duration: 2.191, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 10, Number of Packets: 1028

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10145_17, Duration: 1.459, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 71

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10046_7, Duration: 5.296, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 7, Number of Packets: 77

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10062_127, Duration: 7.469, Protocol: 1, Source Port: 1, Destination IP: 8, Destination Port: 9, Number of Packets: 105

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10001_232, Duration: 101.193, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 123, Number of Packets: 4555

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10056_241, Duration: 1.03, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 12, Number of Packets: 318

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10180_116, Duration: 11.707, Protocol: 1, Source Port: 1, Destination IP: 11, Destination Port: 13, Number of Packets: 159

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10012_25, Duration: 41.603, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 44, Number of Packets: 1676

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10056_41, Duration: 0.445, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 6, Number of Packets: 95

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 11454_194, Duration: 0.204, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 192.168.100.5, Duration: 83.832, Protocol: 2, Source Port: 6, Destination IP: 19, Destination Port: 22, Number of Packets: 249805

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 192.168.220.12, Duration: 569.914, Protocol: 2, Source Port: 1046, Destination IP: 191, Destination Port: 9, Number of Packets: 33984

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10791_44, Duration: 1.385, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 44

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10179_174, Duration: 0.636, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 41

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 11643_207, Duration: 3.86, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 36

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 192.168.220.13, Duration: 229.193, Protocol: 2, Source Port: 581, Destination IP: 106, Destination Port: 9, Number of Packets: 131912

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 11453_17, Duration: 0.215, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 37

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 192.168.200.4, Duration: 4.963, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 148

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 192.168.200.8, Duration: 56.382, Protocol: 2, Source Port: 115, Destination IP: 15, Destination Port: 8, Number of Packets: 1388

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 192.168.220.15, Duration: 235.242, Protocol: 2, Source Port: 609, Destination IP: 109, Destination Port: 9, Number of Packets: 10944

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 192.168.220.7, Duration: 0.306, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 151

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 192.168.220.4, Duration: 151.766, Protocol: 2, Source Port: 287, Destination IP: 49, Destination Port: 7, Number of Packets: 91938

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 192.168.220.11, Duration: 80.434, Protocol: 2, Source Port: 213, Destination IP: 41, Destination Port: 7, Number of Packets: 3439

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10047_85, Duration: 1.079, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10638_100, Duration: 0.294, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10638_99, Duration: 0.173, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10629_12, Duration: 1.649, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 58

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10007_207, Duration: 1.652, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10796_101, Duration: 7.786, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 32, Number of Packets: 316

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 192.168.210.3, Duration: 0.097, Protocol: 1, Source Port: 3, Destination IP: 3, Destination Port: 3, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 192.168.220.6, Duration: 75.564, Protocol: 2, Source Port: 239, Destination IP: 43, Destination Port: 7, Number of Packets: 13775

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 192.168.220.9, Duration: 305.413, Protocol: 3, Source Port: 695, Destination IP: 156, Destination Port: 12, Number of Packets: 19003

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 192.168.220.10, Duration: 0.181, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 151

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 192.168.200.5, Duration: 731.987, Protocol: 2, Source Port: 1850, Destination IP: 332, Destination Port: 8, Number of Packets: 18433

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 192.168.220.5, Duration: 205.656, Protocol: 2, Source Port: 532, Destination IP: 60, Destination Port: 10, Number of Packets: 13250

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10796_72, Duration: 4.838, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 89

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10163_46, Duration: 21.246, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 39, Number of Packets: 469

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10028_207, Duration: 0.243, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10163_59, Duration: 3.043, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 15, Number of Packets: 174

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10107_58, Duration: 0.268, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10587_170, Duration: 0.965, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 98

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10252_2, Duration: 2.813, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 5, Number of Packets: 76

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10644_249, Duration: 0.564, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10078_76, Duration: 8.505, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 16, Number of Packets: 211

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 13324_183, Duration: 0.399, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10264_172, Duration: 3.012, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 14, Number of Packets: 61

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10106_112, Duration: 0.163, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 11130_19, Duration: 0.326, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 3, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10251_54, Duration: 13.784, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 22, Number of Packets: 261

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10151_143, Duration: 47.53, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 40, Number of Packets: 419

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10380_113, Duration: 0.109, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 11529_164, Duration: 0.266, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10150_39, Duration: 1.092, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 5, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10252_12, Duration: 1.801, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 8, Number of Packets: 83

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10102_54, Duration: 5.811, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 15, Number of Packets: 146

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 11102_154, Duration: 0.491, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10081_164, Duration: 38.452, Protocol: 1, Source Port: 2, Destination IP: 9, Destination Port: 24, Number of Packets: 592

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 11050_130, Duration: 0.962, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10143_80, Duration: 4.029, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 10, Number of Packets: 126

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10124_1, Duration: 82.739, Protocol: 1, Source Port: 1, Destination IP: 13, Destination Port: 165, Number of Packets: 789

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10330_85, Duration: 6.155, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 7, Number of Packets: 131

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 11510_1, Duration: 2.259, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10270_15, Duration: 3.866, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 21, Number of Packets: 135

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10166_29, Duration: 1.268, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 3, Number of Packets: 57

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10660_32, Duration: 0.503, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10182_24, Duration: 1.045, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10183_96, Duration: 0.432, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 157

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 192.168.200.2, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10012_24, Duration: 1.786, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 12, Number of Packets: 92

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 13698_157, Duration: 4.103, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 51

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 192.168.100.4, Duration: 30.644, Protocol: 2, Source Port: 95, Destination IP: 11, Destination Port: 49, Number of Packets: 1468

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 192.168.200.3, Duration: 0.029, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10163_11, Duration: 3.43, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 15, Number of Packets: 168

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10150_27, Duration: 0.206, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10012_19, Duration: 51.287, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 49, Number of Packets: 3131

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10003_194, Duration: 5.269, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 14, Number of Packets: 90

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 192.168.220.3, Duration: 0.004, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10061_19, Duration: 3.005, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 11014_31, Duration: 14.873, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 2294

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 11014_15, Duration: 1.841, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 372

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10591_216, Duration: 1.688, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 11, Number of Packets: 80

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 11014_54, Duration: 6.245, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 759

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 11016_164, Duration: 1.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10007_17, Duration: 1.448, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10035_234, Duration: 3.69, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 6, Number of Packets: 77

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10012_8, Duration: 0.385, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 8, Number of Packets: 60

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10016_50, Duration: 2.456, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 476

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10000_35, Duration: 19.506, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 26, Number of Packets: 1126

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 11241_169, Duration: 0.576, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 11502_15, Duration: 0.733, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10056_123, Duration: 0.194, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 71

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10002_116, Duration: 0.577, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 11294_119, Duration: 1.286, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 59

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10619_191, Duration: 621.534, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 27, Number of Packets: 2518

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10620_86, Duration: 0.101, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10296_234, Duration: 16.465, Protocol: 1, Source Port: 2, Destination IP: 9, Destination Port: 87, Number of Packets: 1219

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10199_170, Duration: 1.314, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 11223_157, Duration: 3.32, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 4, Number of Packets: 117

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10014_174, Duration: 2.979, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 4, Number of Packets: 52

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10056_152, Duration: 0.976, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 336

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10191_163, Duration: 4.798, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 6, Number of Packets: 73

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10056_85, Duration: 1.885, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 16, Number of Packets: 462

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10965_51, Duration: 29.587, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 26, Number of Packets: 1654

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10649_31, Duration: 1.924, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10056_148, Duration: 2.901, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 7, Number of Packets: 734

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10621_107, Duration: 1.098, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10653_185, Duration: 5.096, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 53

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10965_52, Duration: 18.037, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 33, Number of Packets: 1072

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 11223_155, Duration: 5.441, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 281

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 192.168.100.3, Duration: 0.0, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10637_200, Duration: 1.522, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 4, Number of Packets: 76

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10631_41, Duration: 0.697, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 11027_34, Duration: 21.617, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 14, Number of Packets: 463

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10194_74, Duration: 1.691, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 74

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10634_246, Duration: 0.693, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10448_155, Duration: 0.882, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 42

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 11223_156, Duration: 12.95, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 10, Number of Packets: 212

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10263_186, Duration: 6.704, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 20, Number of Packets: 155

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10647_253, Duration: 4.254, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 12, Number of Packets: 118

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10107_210, Duration: 3.989, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 11, Number of Packets: 103

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10281_198, Duration: 0.042, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10078_77, Duration: 1.736, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 3, Number of Packets: 112

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 11389_98, Duration: 0.392, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 32

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10460_129, Duration: 0.718, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 32

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10056_159, Duration: 0.53, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 8, Number of Packets: 241

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10181_60, Duration: 3.392, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 4, Number of Packets: 51

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10056_147, Duration: 0.796, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 4, Number of Packets: 77

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 192.168.100.6, Duration: 1.617, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 22, Number of Packets: 150

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10051_51, Duration: 0.561, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10969_99, Duration: 0.105, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10056_103, Duration: 0.672, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 14, Number of Packets: 409

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10983_96, Duration: 2.856, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 33

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 11010_57, Duration: 14.541, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 25, Number of Packets: 223

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 12255_20, Duration: 5.874, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 22, Number of Packets: 273

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 11011_87, Duration: 0.328, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 45

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 11010_59, Duration: 9.606, Protocol: 2, Source Port: 3, Destination IP: 2, Destination Port: 18, Number of Packets: 118

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 13456_65, Duration: 0.682, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 70

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 13706_245, Duration: 0.941, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 6, Number of Packets: 47

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10644_250, Duration: 0.087, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10639_28, Duration: 0.209, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 13717_57, Duration: 0.247, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10166_59, Duration: 1.645, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 4, Number of Packets: 64

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10135_77, Duration: 3.815, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 28, Number of Packets: 152

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10675_8, Duration: 2.628, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 7, Number of Packets: 70

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 13018_146, Duration: 0.157, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 49

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10458_94, Duration: 1.389, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 6, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10268_192, Duration: 8.778, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 6, Number of Packets: 113

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10883_63, Duration: 0.633, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10022_68, Duration: 0.354, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10645_82, Duration: 0.178, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10199_10, Duration: 0.878, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 5, Number of Packets: 186

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 10138_16, Duration: 9.735, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 31, Number of Packets: 112

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-17T11:02:00.453000, End Frame: 2017-03-17T12:02:00.453000, Source IP: 13321_140, Duration: 0.211, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 15

Output: normal