Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10078_100, Duration: 0.755, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 4, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10587_194, Duration: 27.852, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 24, Number of Packets: 616

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10081_164, Duration: 43.387, Protocol: 1, Source Port: 2, Destination IP: 11, Destination Port: 53, Number of Packets: 836

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11027_34, Duration: 2.931, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 54

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10005_2, Duration: 5.5, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 6, Number of Packets: 102

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10826_232, Duration: 2.524, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 74

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10314_186, Duration: 2.458, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 8, Number of Packets: 61

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10171_252, Duration: 9.451, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 9, Number of Packets: 96

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10163_60, Duration: 37.287, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 55, Number of Packets: 752

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10318_7, Duration: 1.492, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 8, Number of Packets: 59

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10409_168, Duration: 0.276, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10150_53, Duration: 4.012, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10135_93, Duration: 0.427, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11361_174, Duration: 3.064, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 5, Number of Packets: 39

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11215_28, Duration: 0.476, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 5, Number of Packets: 42

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10032_128, Duration: 2.113, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 39

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10056_87, Duration: 2.761, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 8, Number of Packets: 1130

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10571_3, Duration: 3.64, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 13, Number of Packets: 133

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10702_91, Duration: 6.264, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 7, Number of Packets: 91

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10056_44, Duration: 1.866, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 8, Number of Packets: 309

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10447_12, Duration: 0.366, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 96

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10154_42, Duration: 0.262, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 45

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10068_98, Duration: 33.595, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 31, Number of Packets: 737

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10714_139, Duration: 4.413, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 39, Number of Packets: 273

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10527_1, Duration: 55.985, Protocol: 1, Source Port: 2, Destination IP: 12, Destination Port: 55, Number of Packets: 5584

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10064_169, Duration: 3.573, Protocol: 1, Source Port: 1, Destination IP: 8, Destination Port: 25, Number of Packets: 434

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10719_52, Duration: 5.505, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 6, Number of Packets: 92

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10244_15, Duration: 5.039, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 5, Number of Packets: 55

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10244_29, Duration: 0.839, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 48

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10825_141, Duration: 7.342, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 13, Number of Packets: 122

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 192.168.100.4, Duration: 20.39, Protocol: 2, Source Port: 67, Destination IP: 12, Destination Port: 34, Number of Packets: 991

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 192.168.100.3, Duration: 0.006, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10181_60, Duration: 10.025, Protocol: 1, Source Port: 1, Destination IP: 9, Destination Port: 10, Number of Packets: 118

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10180_116, Duration: 18.091, Protocol: 1, Source Port: 1, Destination IP: 12, Destination Port: 20, Number of Packets: 238

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10064_217, Duration: 5.949, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 12, Number of Packets: 536

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12263_236, Duration: 0.766, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11184_35, Duration: 62.059, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 24, Number of Packets: 27687

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10087_49, Duration: 1.561, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12264_240, Duration: 0.813, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11190_51, Duration: 1.973, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 53

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10429_162, Duration: 2.524, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 10, Number of Packets: 143

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10424_200, Duration: 1.257, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10078_74, Duration: 0.543, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 46

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10506_9, Duration: 1.546, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11770_58, Duration: 1.772, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10132_239, Duration: 4.347, Protocol: 1, Source Port: 1, Destination IP: 13, Destination Port: 50, Number of Packets: 285

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11192_136, Duration: 6.926, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 7, Number of Packets: 94

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10017_40, Duration: 2.448, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 52

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11317_245, Duration: 0.832, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 43

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10078_82, Duration: 0.302, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 32

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10194_77, Duration: 0.986, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10056_9, Duration: 4.365, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 7, Number of Packets: 282

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10196_197, Duration: 2.28, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 52

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10194_71, Duration: 0.141, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10063_33, Duration: 64.229, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 66, Number of Packets: 6462

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10056_51, Duration: 5.515, Protocol: 1, Source Port: 1, Destination IP: 8, Destination Port: 19, Number of Packets: 852

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10055_190, Duration: 9.333, Protocol: 1, Source Port: 1, Destination IP: 8, Destination Port: 12, Number of Packets: 141

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10066_156, Duration: 19.177, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 23, Number of Packets: 184

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10072_42, Duration: 1.823, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 12, Number of Packets: 35

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10138_16, Duration: 5.434, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 22, Number of Packets: 183

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10071_22, Duration: 5.164, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 19, Number of Packets: 167

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10072_39, Duration: 2.261, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 17, Number of Packets: 45

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10073_64, Duration: 6.411, Protocol: 1, Source Port: 2, Destination IP: 10, Destination Port: 46, Number of Packets: 376

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10001_8, Duration: 16.539, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 27, Number of Packets: 269

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10067_79, Duration: 1.098, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10069_64, Duration: 1.293, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 8, Number of Packets: 53

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10076_237, Duration: 15.501, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 40, Number of Packets: 475

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10022_249, Duration: 12.511, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 28, Number of Packets: 575

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10527_6, Duration: 34.945, Protocol: 1, Source Port: 2, Destination IP: 12, Destination Port: 51, Number of Packets: 1369

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10077_156, Duration: 19.851, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 15, Number of Packets: 575

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10074_40, Duration: 13.713, Protocol: 1, Source Port: 2, Destination IP: 9, Destination Port: 44, Number of Packets: 241

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10077_154, Duration: 6.816, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 5, Number of Packets: 139

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10902_202, Duration: 10.152, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 10, Number of Packets: 188

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10010_37, Duration: 8.796, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 33, Number of Packets: 166

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10082_190, Duration: 4.491, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 53

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10150_70, Duration: 2.726, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 15, Number of Packets: 139

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11924_154, Duration: 5.116, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 8, Number of Packets: 115

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10084_230, Duration: 11.957, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 10, Number of Packets: 136

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10085_31, Duration: 8.986, Protocol: 1, Source Port: 2, Destination IP: 8, Destination Port: 62, Number of Packets: 283

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10086_192, Duration: 26.26, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 30, Number of Packets: 556

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10089_52, Duration: 8.188, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 18, Number of Packets: 154

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10087_41, Duration: 11.935, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 35, Number of Packets: 642

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10527_2, Duration: 155.265, Protocol: 1, Source Port: 2, Destination IP: 11, Destination Port: 38, Number of Packets: 4247

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10315_252, Duration: 5.632, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 19, Number of Packets: 261

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10169_169, Duration: 1.274, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 10, Number of Packets: 86

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10120_132, Duration: 1.877, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10090_217, Duration: 1.587, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 9, Number of Packets: 68

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10095_80, Duration: 3.764, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 13, Number of Packets: 128

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10091_2, Duration: 0.304, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 45

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10094_75, Duration: 4.417, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 16, Number of Packets: 144

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11417_168, Duration: 1.047, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10325_253, Duration: 8.072, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 7, Number of Packets: 270

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10092_106, Duration: 53.05, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 31, Number of Packets: 238

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10402_46, Duration: 0.65, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11443_151, Duration: 0.58, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11294_119, Duration: 1.313, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 56

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10187_115, Duration: 2.625, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 5, Number of Packets: 47

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10183_41, Duration: 0.144, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 161

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10380_123, Duration: 0.901, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 4, Number of Packets: 56

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10012_11, Duration: 2.588, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 17, Number of Packets: 200

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10012_64, Duration: 2.341, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 82

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10185_51, Duration: 18.043, Protocol: 1, Source Port: 1, Destination IP: 11, Destination Port: 23, Number of Packets: 301

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10012_18, Duration: 2.873, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 87

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10623_93, Duration: 0.839, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 9, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 192.168.100.6, Duration: 70.615, Protocol: 2, Source Port: 4, Destination IP: 8, Destination Port: 10070, Number of Packets: 65999

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10088_9, Duration: 36.003, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 23, Number of Packets: 436

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10012_24, Duration: 19.04, Protocol: 1, Source Port: 1, Destination IP: 7, Destination Port: 20, Number of Packets: 8058

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10102_83, Duration: 4.545, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 11, Number of Packets: 79

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10438_216, Duration: 4.054, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 13, Number of Packets: 85

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12028_255, Duration: 1.656, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10097_50, Duration: 1.779, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 5, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10098_126, Duration: 5.449, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 8, Number of Packets: 128

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11029_41, Duration: 2.207, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10108_7, Duration: 3.164, Protocol: 1, Source Port: 2, Destination IP: 8, Destination Port: 14, Number of Packets: 144

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10092_107, Duration: 14.674, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 4, Number of Packets: 68

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10395_28, Duration: 0.518, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10103_122, Duration: 6.045, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 10, Number of Packets: 79

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10163_9, Duration: 6.782, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 31, Number of Packets: 283

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10163_59, Duration: 21.935, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 43, Number of Packets: 715

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10875_6, Duration: 6.233, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 13, Number of Packets: 156

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10100_133, Duration: 14.667, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 17, Number of Packets: 301

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10195_190, Duration: 11.538, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 12, Number of Packets: 193

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10249_103, Duration: 0.898, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10036_235, Duration: 2.571, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 4, Number of Packets: 49

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10091_132, Duration: 2.564, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 6, Number of Packets: 78

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10056_246, Duration: 1.183, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 6, Number of Packets: 959

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10093_150, Duration: 1.197, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 5, Number of Packets: 39

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10962_165, Duration: 1.303, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10056_133, Duration: 0.445, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 6, Number of Packets: 238

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 192.168.210.4, Duration: 693.406, Protocol: 3, Source Port: 281, Destination IP: 58, Destination Port: 9, Number of Packets: 737062

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11010_59, Duration: 7.629, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 16, Number of Packets: 116

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11010_57, Duration: 40.059, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 41, Number of Packets: 275

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 192.168.210.5, Duration: 261.932, Protocol: 3, Source Port: 421, Destination IP: 78, Destination Port: 9, Number of Packets: 29781

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 192.168.210.3, Duration: 0.027, Protocol: 2, Source Port: 3, Destination IP: 3, Destination Port: 3, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10012_43, Duration: 2.196, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 7, Number of Packets: 92

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11011_87, Duration: 0.952, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 8, Number of Packets: 66

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10793_170, Duration: 3.51, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 7, Number of Packets: 126

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10163_53, Duration: 0.296, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10074_39, Duration: 3.795, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 38, Number of Packets: 226

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10107_59, Duration: 4.33, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 12, Number of Packets: 105

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10200_244, Duration: 2.519, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10643_146, Duration: 1.514, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10122_64, Duration: 4.641, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 8, Number of Packets: 51

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10127_160, Duration: 0.107, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10125_12, Duration: 15.999, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 14, Number of Packets: 96

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10107_7, Duration: 1.907, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10270_15, Duration: 2.443, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 6, Number of Packets: 54

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10501_19, Duration: 4.954, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 151

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11054_192, Duration: 1.28, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 192.168.200.3, Duration: 0.065, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10163_11, Duration: 2.394, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 10, Number of Packets: 95

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11015_151, Duration: 2.461, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 53

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10026_68, Duration: 3.041, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 49

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10012_32, Duration: 0.09, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 5, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10012_27, Duration: 33.238, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 42, Number of Packets: 1681

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10068_42, Duration: 1.696, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 58

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10481_6, Duration: 4.583, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 8, Number of Packets: 64

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10012_19, Duration: 16.003, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 29, Number of Packets: 1044

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12265_11, Duration: 4.999, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 12, Number of Packets: 96

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12266_218, Duration: 0.412, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10294_70, Duration: 29.868, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 12, Number of Packets: 379

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10578_200, Duration: 45.86, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 31, Number of Packets: 1265

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10139_42, Duration: 4.867, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 16, Number of Packets: 45

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10072_43, Duration: 1.749, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 8, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10194_100, Duration: 8.559, Protocol: 1, Source Port: 2, Destination IP: 6, Destination Port: 18, Number of Packets: 188

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11923_76, Duration: 11.917, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 9, Number of Packets: 118

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10012_40, Duration: 0.241, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10099_101, Duration: 1.698, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10101_145, Duration: 2.463, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10037_24, Duration: 0.033, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10143_80, Duration: 4.676, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 9, Number of Packets: 116

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12267_139, Duration: 0.874, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11051_137, Duration: 1.811, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12075_83, Duration: 0.153, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12268_248, Duration: 0.414, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10104_157, Duration: 4.606, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 63

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10248_223, Duration: 0.345, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10056_58, Duration: 0.038, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10105_6, Duration: 0.086, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10744_248, Duration: 0.911, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10237_36, Duration: 2.498, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10248_131, Duration: 2.648, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 4, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10056_200, Duration: 1.204, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10551_202, Duration: 0.233, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 7, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10130_163, Duration: 0.275, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10112_133, Duration: 0.237, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10206_7, Duration: 1.039, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 10, Number of Packets: 32

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10133_46, Duration: 1.78, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10239_150, Duration: 1.112, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10239_30, Duration: 5.159, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 5, Number of Packets: 55

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10134_73, Duration: 0.501, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10241_43, Duration: 4.488, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 8, Number of Packets: 78

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10221_79, Duration: 1.194, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10241_32, Duration: 2.05, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 5, Number of Packets: 45

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10082_146, Duration: 0.995, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10158_155, Duration: 20.757, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 9, Number of Packets: 88

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10151_143, Duration: 17.727, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 17, Number of Packets: 184

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10242_83, Duration: 0.136, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10243_76, Duration: 4.673, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 7, Number of Packets: 308

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10221_81, Duration: 1.967, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 986

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10170_25, Duration: 8.638, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 7, Number of Packets: 77

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10244_27, Duration: 8.929, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 13, Number of Packets: 222

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10057_30, Duration: 0.358, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12269_131, Duration: 1.812, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10535_180, Duration: 1.941, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10135_94, Duration: 5.038, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 8, Number of Packets: 68

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11207_17, Duration: 6.505, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 6, Number of Packets: 411

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10135_8, Duration: 1.51, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10199_2, Duration: 10.693, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 9, Number of Packets: 227

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10131_216, Duration: 4.056, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 10, Number of Packets: 93

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10119_126, Duration: 0.533, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11375_51, Duration: 0.374, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10374_142, Duration: 5.933, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 11, Number of Packets: 85

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10119_118, Duration: 0.41, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 118

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11672_14, Duration: 1.546, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 43

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10119_3, Duration: 0.292, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10784_4, Duration: 27.302, Protocol: 2, Source Port: 2, Destination IP: 2, Destination Port: 97, Number of Packets: 1529

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10997_249, Duration: 1.289, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10998_36, Duration: 1.329, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10056_74, Duration: 0.233, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 149

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11244_2, Duration: 0.317, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10182_24, Duration: 4.456, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 8, Number of Packets: 81

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10183_10, Duration: 0.776, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 8, Number of Packets: 763

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 192.168.220.2, Duration: 0.0, Protocol: 2, Source Port: 1001, Destination IP: 3, Destination Port: 3, Number of Packets: 1184

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10191_163, Duration: 9.792, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 11, Number of Packets: 126

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10056_178, Duration: 3.783, Protocol: 1, Source Port: 1, Destination IP: 9, Destination Port: 10, Number of Packets: 157

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10049_131, Duration: 2.449, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 4, Number of Packets: 52

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10242_84, Duration: 0.048, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10056_50, Duration: 2.351, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 11, Number of Packets: 1414

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10919_132, Duration: 2.609, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 5, Number of Packets: 57

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10970_157, Duration: 5.092, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 6, Number of Packets: 85

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10276_216, Duration: 5.677, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 13, Number of Packets: 108

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10718_106, Duration: 5.025, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 6, Number of Packets: 86

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10012_75, Duration: 1.407, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 59

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10475_83, Duration: 2.153, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 8, Number of Packets: 59

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10414_10, Duration: 0.516, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10326_209, Duration: 0.928, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10004_10, Duration: 7.002, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 9, Number of Packets: 151

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10796_85, Duration: 114.718, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 61, Number of Packets: 2272

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11501_161, Duration: 1.731, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 35

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10075_226, Duration: 31.94, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 33, Number of Packets: 734

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10244_16, Duration: 2.434, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10163_10, Duration: 19.969, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 34, Number of Packets: 487

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10796_87, Duration: 18.178, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 37, Number of Packets: 4395

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10798_7, Duration: 4.407, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 12, Number of Packets: 102

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10797_253, Duration: 1.735, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 3, Number of Packets: 62

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10107_27, Duration: 6.389, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 7, Number of Packets: 86

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10686_232, Duration: 0.88, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 99

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11299_235, Duration: 0.096, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11671_119, Duration: 1.44, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 43

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10249_91, Duration: 0.825, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10046_7, Duration: 1.121, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10117_80, Duration: 15.774, Protocol: 1, Source Port: 2, Destination IP: 7, Destination Port: 62, Number of Packets: 552

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10786_4, Duration: 12.454, Protocol: 1, Source Port: 1, Destination IP: 9, Destination Port: 13, Number of Packets: 159

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10089_53, Duration: 10.251, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 25, Number of Packets: 210

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10522_112, Duration: 0.261, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10263_186, Duration: 1.983, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 6, Number of Packets: 55

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10401_202, Duration: 1.833, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 49

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10803_54, Duration: 1.599, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 9, Number of Packets: 72

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10992_141, Duration: 1.758, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 47

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10801_104, Duration: 1.327, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10506_18, Duration: 0.478, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10783_192, Duration: 4.807, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 6, Number of Packets: 80

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10803_47, Duration: 3.811, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 13, Number of Packets: 209

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11396_48, Duration: 2.271, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 39

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10539_186, Duration: 4.364, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 5, Number of Packets: 64

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10082_86, Duration: 1.118, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10803_53, Duration: 1.631, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 5, Number of Packets: 61

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10434_207, Duration: 6.081, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 8, Number of Packets: 66

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10145_115, Duration: 1.84, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 12, Number of Packets: 118

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10145_27, Duration: 8.403, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 8, Number of Packets: 117

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10082_43, Duration: 3.405, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 39

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10027_249, Duration: 0.348, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12270_35, Duration: 3.454, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 71

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12018_4, Duration: 11.59, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 80

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12271_34, Duration: 0.189, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 80

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12273_182, Duration: 1.954, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 9, Number of Packets: 230

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12272_17, Duration: 0.173, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12274_208, Duration: 0.769, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12275_211, Duration: 0.415, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12276_187, Duration: 0.912, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 126

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 12277_36, Duration: 0.533, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 55

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10069_197, Duration: 0.117, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10078_71, Duration: 1.058, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10977_6, Duration: 7.571, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 203

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10037_66, Duration: 1.848, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10056_130, Duration: 0.535, Protocol: 1, Source Port: 1, Destination IP: 6, Destination Port: 10, Number of Packets: 150

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10051_51, Duration: 1.908, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10056_185, Duration: 0.772, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 5, Number of Packets: 723

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11529_47, Duration: 3.132, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 5, Number of Packets: 99

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10223_4, Duration: 59.184, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 83, Number of Packets: 3271

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10979_53, Duration: 35.917, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 45, Number of Packets: 1202

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10223_61, Duration: 21.239, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 87, Number of Packets: 1603

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10223_24, Duration: 38.916, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 59, Number of Packets: 1507

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11223_157, Duration: 5.336, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 6, Number of Packets: 118

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10022_175, Duration: 15.401, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 19, Number of Packets: 357

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10133_38, Duration: 2.205, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 48

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10056_176, Duration: 0.433, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10828_20, Duration: 2.487, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 4, Number of Packets: 56

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10005_36, Duration: 7.789, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 7, Number of Packets: 315

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10063_205, Duration: 2.422, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 15, Number of Packets: 216

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10229_197, Duration: 0.612, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11468_77, Duration: 4.494, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 12, Number of Packets: 128

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11497_77, Duration: 6.904, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 13, Number of Packets: 97

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10225_200, Duration: 11.514, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 9, Number of Packets: 171

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10278_66, Duration: 0.254, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 5, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10027_175, Duration: 5.632, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 12, Number of Packets: 124

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10277_217, Duration: 4.507, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 11, Number of Packets: 79

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10068_2, Duration: 13.031, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 19, Number of Packets: 469

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 11470_190, Duration: 3.462, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 44

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-15T14:01:21.333000, End Frame: 2017-03-15T15:01:21.333000, Source IP: 10833_103, Duration: 2.205, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 50

Output: normal