Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 12331_223, Duration: 0.615, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10056_165, Duration: 0.332, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11352_217, Duration: 0.645, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10279_34, Duration: 0.68, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11424_121, Duration: 0.329, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10433_241, Duration: 0.453, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11275_135, Duration: 0.894, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10056_12, Duration: 0.075, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 36

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10072_56, Duration: 1.759, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10121_100, Duration: 4.58, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11279_11, Duration: 0.329, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10139_39, Duration: 0.255, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10107_27, Duration: 0.411, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10012_17, Duration: 0.638, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 56

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10267_102, Duration: 2.011, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 6, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10356_112, Duration: 0.151, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 12940_13, Duration: 1.742, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10728_23, Duration: 0.645, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11155_159, Duration: 0.776, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10894_228, Duration: 0.88, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 12168_50, Duration: 0.26, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 61

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 13669_46, Duration: 1.007, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10737_69, Duration: 1.094, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 12017_208, Duration: 0.222, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 13197_228, Duration: 1.659, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10170_26, Duration: 0.742, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11325_113, Duration: 3.224, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10078_82, Duration: 0.138, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10244_16, Duration: 0.426, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10419_210, Duration: 0.644, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10655_193, Duration: 0.234, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 12933_123, Duration: 0.854, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 13575_232, Duration: 0.932, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10012_25, Duration: 16.184, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 493

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10001_232, Duration: 13.505, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 11, Number of Packets: 732

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10007_207, Duration: 2.689, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10991_177, Duration: 0.214, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10000_35, Duration: 5.357, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 199

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10002_115, Duration: 0.753, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10007_18, Duration: 0.539, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10499_66, Duration: 1.196, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 35

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10012_19, Duration: 0.032, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10981_3, Duration: 3.381, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 9, Number of Packets: 49

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 12253_192, Duration: 2.572, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 78

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10272_128, Duration: 0.242, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10068_34, Duration: 4.261, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 5, Number of Packets: 155

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10708_178, Duration: 7.037, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 20, Number of Packets: 107

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11978_166, Duration: 3.455, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11001_207, Duration: 0.617, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11611_5, Duration: 0.38, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10224_166, Duration: 9.249, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 283

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10056_161, Duration: 1.017, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 3, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11442_143, Duration: 0.38, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11468_77, Duration: 5.056, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 61

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11441_102, Duration: 2.786, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 6, Number of Packets: 47

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10051_51, Duration: 0.562, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11347_125, Duration: 1.07, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11470_190, Duration: 0.277, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11300_40, Duration: 0.109, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11458_139, Duration: 1.582, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11359_51, Duration: 0.057, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11016_164, Duration: 0.75, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 41

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11673_241, Duration: 0.16, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10840_33, Duration: 2.056, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10686_91, Duration: 0.446, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11404_86, Duration: 0.117, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10224_176, Duration: 0.032, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11046_148, Duration: 2.261, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 6, Number of Packets: 51

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10131_235, Duration: 0.158, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10154_233, Duration: 1.179, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10231_34, Duration: 4.358, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 11, Number of Packets: 71

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11422_53, Duration: 0.767, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 60

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10126_182, Duration: 1.81, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10220_206, Duration: 3.597, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 53

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11519_151, Duration: 1.821, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 3, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10885_57, Duration: 0.587, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10586_12, Duration: 0.758, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10433_9, Duration: 0.68, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10597_157, Duration: 2.304, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 43

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10581_179, Duration: 0.965, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10444_137, Duration: 2.069, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 5, Number of Packets: 38

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10575_79, Duration: 7.907, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 5, Number of Packets: 424

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11565_36, Duration: 9.455, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 86

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11446_38, Duration: 0.773, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10592_102, Duration: 0.57, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10056_24, Duration: 0.833, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10595_82, Duration: 5.025, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 52

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10596_24, Duration: 0.557, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10103_81, Duration: 0.422, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 12732_64, Duration: 5.662, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 62

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10056_60, Duration: 1.09, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11875_193, Duration: 2.058, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 75

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 12549_184, Duration: 0.726, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10056_217, Duration: 0.187, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10265_107, Duration: 6.662, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 80

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10435_194, Duration: 1.824, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 12959_176, Duration: 0.328, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10386_163, Duration: 0.331, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 21

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11046_149, Duration: 0.444, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10270_15, Duration: 0.365, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10056_189, Duration: 0.112, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10630_249, Duration: 0.122, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10279_224, Duration: 0.136, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10586_28, Duration: 0.195, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11118_171, Duration: 0.686, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 13670_102, Duration: 0.583, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10756_66, Duration: 0.849, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11389_98, Duration: 0.108, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 12735_45, Duration: 0.46, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10150_27, Duration: 6.572, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 11, Number of Packets: 86

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 12127_201, Duration: 0.089, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11505_133, Duration: 1.045, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10756_65, Duration: 0.674, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 12390_117, Duration: 0.56, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10691_227, Duration: 0.839, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 31

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10211_8, Duration: 0.388, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10201_53, Duration: 0.38, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10082_46, Duration: 0.126, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 12086_160, Duration: 0.494, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11268_91, Duration: 0.365, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11113_245, Duration: 1.69, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11114_248, Duration: 1.193, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10056_168, Duration: 0.107, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 29

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10344_38, Duration: 9.766, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 6, Number of Packets: 98

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10315_240, Duration: 18.578, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 8, Number of Packets: 431

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10346_13, Duration: 21.825, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 30, Number of Packets: 913

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10347_19, Duration: 1.034, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10347_36, Duration: 0.437, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10349_27, Duration: 0.187, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 13089_130, Duration: 1.283, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10193_2, Duration: 0.124, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 3, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10001_8, Duration: 0.052, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10668_138, Duration: 0.036, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10264_170, Duration: 0.106, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10107_59, Duration: 0.401, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 7

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10154_226, Duration: 0.646, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10364_31, Duration: 0.1, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10027_166, Duration: 0.023, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 5

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 12027_4, Duration: 4.175, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 5, Number of Packets: 39

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11266_10, Duration: 0.235, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10371_48, Duration: 0.763, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10366_145, Duration: 0.026, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10374_142, Duration: 0.268, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 3, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10365_53, Duration: 0.313, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 13671_231, Duration: 0.636, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 4

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10361_88, Duration: 0.935, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 4, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 12065_82, Duration: 0.333, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 2, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11235_76, Duration: 1.635, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 60

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11460_163, Duration: 3.065, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 57

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10667_208, Duration: 1.47, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 92

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10667_192, Duration: 5.203, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 171

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 12669_15, Duration: 0.113, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 11

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10384_183, Duration: 0.722, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10012_18, Duration: 1.74, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 142

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10107_39, Duration: 0.452, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10363_235, Duration: 0.856, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10658_11, Duration: 0.761, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11189_13, Duration: 2.894, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 13405_214, Duration: 1.362, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10433_41, Duration: 1.359, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11493_154, Duration: 0.942, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10434_207, Duration: 1.003, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10586_40, Duration: 0.837, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10581_175, Duration: 1.285, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10836_103, Duration: 1.273, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10741_150, Duration: 1.545, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10656_106, Duration: 20.428, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 119

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10056_142, Duration: 1.237, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 12174_94, Duration: 1.518, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10595_66, Duration: 2.665, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11202_49, Duration: 0.488, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11203_23, Duration: 3.497, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 67

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11473_70, Duration: 2.449, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 10, Number of Packets: 61

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11471_173, Duration: 0.751, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 18

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10127_112, Duration: 0.21, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 12

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10843_117, Duration: 7.46, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 7, Number of Packets: 345

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10671_110, Duration: 1.913, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 64

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11204_141, Duration: 1.243, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10791_127, Duration: 0.974, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 12479_53, Duration: 0.327, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10342_182, Duration: 0.106, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 13672_251, Duration: 0.453, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 12989_79, Duration: 0.862, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11771_153, Duration: 1.696, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 19

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 11608_137, Duration: 2.752, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 59

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 13096_132, Duration: 2.778, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10154_181, Duration: 1.822, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 10057_42, Duration: 4.006, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 102

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 13673_163, Duration: 1.622, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T17:01:29.974000, End Frame: 2017-03-16T18:01:29.974000, Source IP: 12763_119, Duration: 1.112, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 13567_81, Duration: 3.788, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 13, Number of Packets: 191

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10578_200, Duration: 0.17, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 13, Number of Packets: 154

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 192.168.220.16, Duration: 40.897, Protocol: 2, Source Port: 197, Destination IP: 41, Destination Port: 226, Number of Packets: 2908

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 192.168.200.8, Duration: 98.655, Protocol: 2, Source Port: 228, Destination IP: 61, Destination Port: 7, Number of Packets: 1814

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10225_200, Duration: 13.694, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 7, Number of Packets: 164

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 192.168.210.5, Duration: 2180.913, Protocol: 2, Source Port: 3725, Destination IP: 519, Destination Port: 11, Number of Packets: 172904

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 192.168.100.5, Duration: 174.581, Protocol: 2, Source Port: 221, Destination IP: 19, Destination Port: 45, Number of Packets: 253250

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 13096_132, Duration: 5.177, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 50

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: EXT_SERVER, Duration: 9.631, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 158, Number of Packets: 1384

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 192.168.220.4, Duration: 28.02, Protocol: 3, Source Port: 51, Destination IP: 12, Destination Port: 9, Number of Packets: 563

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 192.168.200.9, Duration: 402.305, Protocol: 2, Source Port: 706, Destination IP: 129, Destination Port: 8, Number of Packets: 139907

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10296_238, Duration: 97.784, Protocol: 1, Source Port: 2, Destination IP: 5, Destination Port: 73, Number of Packets: 2918

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10573_189, Duration: 1.717, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 15, Number of Packets: 204

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10843_117, Duration: 2.005, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 15, Number of Packets: 354

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10429_162, Duration: 8.735, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 39, Number of Packets: 374

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 12989_79, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10574_124, Duration: 1.376, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 49

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10605_14, Duration: 1.763, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10022_175, Duration: 10.988, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 27, Number of Packets: 298

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 11046_148, Duration: 1.601, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 47

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10060_27, Duration: 49.1, Protocol: 1, Source Port: 1, Destination IP: 5, Destination Port: 140, Number of Packets: 955

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10183_10, Duration: 0.802, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 5, Number of Packets: 413

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 12479_53, Duration: 0.794, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 4, Number of Packets: 35

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 13672_251, Duration: 0.658, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 34

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 11548_192, Duration: 0.066, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10386_163, Duration: 0.56, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 20

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10580_12, Duration: 9.402, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 5, Number of Packets: 94

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10223_4, Duration: 26.276, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 115, Number of Packets: 1938

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 11608_137, Duration: 1.073, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 44

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10143_90, Duration: 0.646, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 5, Number of Packets: 68

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 11771_153, Duration: 2.183, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 57

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10154_181, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10057_42, Duration: 0.188, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 25

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 12973_131, Duration: 6.86, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 7, Number of Packets: 156

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 11203_23, Duration: 4.387, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 51

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10791_127, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 11189_13, Duration: 0.038, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 3

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 11204_141, Duration: 0.828, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10154_226, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 192.168.200.4, Duration: 0.183, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 145

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 12763_119, Duration: 1.204, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 17

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 13673_163, Duration: 3.469, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 32

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10342_182, Duration: 0.637, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 16

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 192.168.220.7, Duration: 1181.651, Protocol: 2, Source Port: 3513, Destination IP: 440, Destination Port: 7, Number of Packets: 57037

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: DNS, Duration: 37.953, Protocol: 1, Source Port: 1, Destination IP: 9, Destination Port: 4003, Number of Packets: 6556

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 12363_79, Duration: 0.107, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 6

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10057_29, Duration: 61.223, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 76, Number of Packets: 505

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 192.168.100.6, Duration: 0.897, Protocol: 1, Source Port: 219, Destination IP: 2, Destination Port: 41, Number of Packets: 338

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10062_127, Duration: 5.023, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 5, Number of Packets: 63

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 192.168.100.3, Duration: 0.0, Protocol: 2, Source Port: 219, Destination IP: 2, Destination Port: 24, Number of Packets: 250

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10056_13, Duration: 4.584, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 3, Number of Packets: 44

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10058_155, Duration: 11.854, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 12, Number of Packets: 150

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 192.168.100.1, Duration: 0.0, Protocol: 1, Source Port: 218, Destination IP: 1, Destination Port: 23, Number of Packets: 239

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10064_217, Duration: 1.271, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 10, Number of Packets: 282

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 11184_35, Duration: 31.809, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 76, Number of Packets: 1756

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 192.168.100.2, Duration: 0.0, Protocol: 1, Source Port: 218, Destination IP: 1, Destination Port: 23, Number of Packets: 239

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 12768_218, Duration: 0.507, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 192.168.100.4, Duration: 14.963, Protocol: 2, Source Port: 280, Destination IP: 5, Destination Port: 31, Number of Packets: 431

Output: victim


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 192.168.220.14, Duration: 3.219, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 147

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 11846_232, Duration: 0.439, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 12128_125, Duration: 2.721, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 15

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10437_63, Duration: 13.935, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 501

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 11190_51, Duration: 1.76, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 8, Number of Packets: 107

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 12264_240, Duration: 2.948, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 4, Number of Packets: 57

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 192.168.220.11, Duration: 0.187, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 152

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10078_74, Duration: 0.314, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 11, Number of Packets: 59

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10170_25, Duration: 6.602, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 6, Number of Packets: 73

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10068_2, Duration: 9.759, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 12, Number of Packets: 273

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 11149_153, Duration: 0.954, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 26

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10013_97, Duration: 2.987, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 45

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10124_1, Duration: 57.694, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 116, Number of Packets: 530

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10249_103, Duration: 0.65, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 44

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10075_226, Duration: 2.973, Protocol: 1, Source Port: 2, Destination IP: 1, Destination Port: 7, Number of Packets: 100

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10056_152, Duration: 0.32, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 222

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10296_228, Duration: 26.643, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 27, Number of Packets: 891

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10506_26, Duration: 1.319, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 3, Number of Packets: 23

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10194_82, Duration: 1.35, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 8, Number of Packets: 97

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 192.168.220.6, Duration: 0.187, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 157

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10056_149, Duration: 2.666, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 4, Number of Packets: 139

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10244_15, Duration: 0.646, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 5, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 192.168.220.13, Duration: 14.642, Protocol: 3, Source Port: 48, Destination IP: 11, Destination Port: 8, Number of Packets: 535

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10132_239, Duration: 2.055, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 27, Number of Packets: 157

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10737_69, Duration: 0.942, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 11191_163, Duration: 0.549, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 14

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 11192_136, Duration: 5.566, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 14, Number of Packets: 175

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10296_227, Duration: 24.063, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 31, Number of Packets: 1157

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 192.168.220.10, Duration: 0.184, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 149

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10499_34, Duration: 4.648, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 4, Number of Packets: 144

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 192.168.200.5, Duration: 0.174, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 145

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10194_77, Duration: 2.818, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 10, Number of Packets: 123

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 192.168.220.5, Duration: 0.198, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 155

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 192.168.220.9, Duration: 1.927, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 142

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10363_235, Duration: 0.978, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 3, Number of Packets: 24

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10658_11, Duration: 0.517, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10433_41, Duration: 0.558, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 4, Number of Packets: 40

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10575_79, Duration: 2.466, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 5, Number of Packets: 170

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10594_53, Duration: 0.66, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 42

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10597_157, Duration: 0.549, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10793_130, Duration: 0.025, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 8

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10590_89, Duration: 0.237, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 22

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 192.168.220.8, Duration: 4.849, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 141

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 192.168.220.15, Duration: 494.394, Protocol: 2, Source Port: 1700, Destination IP: 276, Destination Port: 7, Number of Packets: 21131

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 11046_154, Duration: 1.451, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 30

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10004_36, Duration: 3.742, Protocol: 1, Source Port: 1, Destination IP: 4, Destination Port: 8, Number of Packets: 175

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 192.168.220.12, Duration: 0.179, Protocol: 2, Source Port: 4, Destination IP: 3, Destination Port: 4, Number of Packets: 145

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 12757_125, Duration: 6.447, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 5, Number of Packets: 47

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10223_61, Duration: 11.0, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 91, Number of Packets: 1006

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 12759_82, Duration: 0.772, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 10

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10223_24, Duration: 51.379, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 66, Number of Packets: 1520

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10296_232, Duration: 4.633, Protocol: 1, Source Port: 2, Destination IP: 4, Destination Port: 31, Number of Packets: 336

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10979_53, Duration: 25.609, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 40, Number of Packets: 764

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10005_14, Duration: 6.472, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 22, Number of Packets: 617

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 11488_161, Duration: 0.0, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 2

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 11472_105, Duration: 0.407, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 1, Number of Packets: 9

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 11460_163, Duration: 5.117, Protocol: 1, Source Port: 2, Destination IP: 3, Destination Port: 5, Number of Packets: 102

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 11218_184, Duration: 2.119, Protocol: 1, Source Port: 2, Destination IP: 2, Destination Port: 17, Number of Packets: 77

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10056_99, Duration: 1.017, Protocol: 1, Source Port: 1, Destination IP: 2, Destination Port: 2, Number of Packets: 13

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10833_103, Duration: 1.093, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 27

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10051_51, Duration: 1.113, Protocol: 1, Source Port: 1, Destination IP: 1, Destination Port: 2, Number of Packets: 28

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10191_163, Duration: 5.263, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 5, Number of Packets: 56

Output: normal


Instruction: Check if the given traffic flow is normal or of an attacker or a victim

Input: Start Frame: 2017-03-16T18:01:30.349000, End Frame: 2017-03-16T19:01:30.349000, Source IP: 10056_138, Duration: 1.078, Protocol: 1, Source Port: 1, Destination IP: 3, Destination Port: 4, Number of Packets: 74

Output: normal