{"help": "https://natwork-data-portal.iti.gr:443/fa_IR/api/3/action/help_show?name=datastore_search", "success": true, "result": {"include_total": true, "limit": 100, "records_format": "objects", "resource_id": "b9ed84ce-24c8-4db9-a5d4-722b4ecbc31a", "total_estimation_threshold": null, "records": [{"_id":1,"ip.session_id":1,"meta.direction":0,"ip.pkts_per_flow":4,"duration":0.028773069381713867,"ip.header_len":80,"ip.payload_len":128,"ip.avg_bytes_tot_len":76.8,"time_between_pkts_sum":28.773069381713867,"time_between_pkts_avg":7.193267345428467,"time_between_pkts_max":14.525175094604492,"time_between_pkts_min":0.0,"time_between_pkts_std":7.6085945785090905,"(-0.001, 50.0]":4,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":4,"pkts_rate":139.01888418418503,"tcp_bytes_per_flow":0,"byte_rate":139.01888418418503,"tcp.tcp_session_payload_up_len":4,"tcp.tcp_session_payload_down_len":4,"(-0.001, 150.0]":4,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":0,"tcp.psh":0,"tcp.ack":4,"tcp.urg":0,"sport_g":4,"sport_le":0,"dport_g":0,"dport_le":4,"mean_tcp_pkts":59602,"std_tcp_pkts":0,"min_tcp_pkts":59602,"max_tcp_pkts":59602,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":2,"ip.session_id":1,"meta.direction":1,"ip.pkts_per_flow":1,"duration":0.0,"ip.header_len":20,"ip.payload_len":156,"ip.avg_bytes_tot_len":76.8,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.0,"tcp_bytes_per_flow":124,"byte_rate":0.0,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":0,"tcp.psh":1,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":22,"std_tcp_pkts":0,"min_tcp_pkts":22,"max_tcp_pkts":22,"entropy_tcp_pkts":0,"mean_tcp_len":124,"std_tcp_len":0,"min_tcp_len":124,"max_tcp_len":124,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":3,"ip.session_id":2,"meta.direction":1,"ip.pkts_per_flow":22,"duration":21.602761030197144,"ip.header_len":440,"ip.payload_len":440,"ip.avg_bytes_tot_len":40.0,"time_between_pkts_sum":15943.00627708435,"time_between_pkts_avg":724.6821035038341,"time_between_pkts_max":1000.2660751342773,"time_between_pkts_min":8.793115615844727,"time_between_pkts_std":406.44869584192213,"(-0.001, 50.0]":3,"(50.0, 100.0]":2,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":1,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":0,"pkts_rate":0.0,"tcp_bytes_per_flow":0,"byte_rate":0.0,"tcp.tcp_session_payload_up_len":0,"tcp.tcp_session_payload_down_len":0,"(-0.001, 150.0]":0,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":0,"sport_le":0,"dport_g":0,"dport_le":0,"mean_tcp_pkts":0,"std_tcp_pkts":0,"min_tcp_pkts":0,"max_tcp_pkts":0,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":4,"ip.session_id":3,"meta.direction":0,"ip.pkts_per_flow":4,"duration":9.634510040283203,"ip.header_len":80,"ip.payload_len":314,"ip.avg_bytes_tot_len":120.1,"time_between_pkts_sum":485.5778217315674,"time_between_pkts_avg":121.39445543289185,"time_between_pkts_max":460.129976272583,"time_between_pkts_min":0.00095367431640625,"time_between_pkts_std":226.1206193202246,"(-0.001, 50.0]":3,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":1,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":0,"pkts_rate":0.0,"tcp_bytes_per_flow":0,"byte_rate":0.0,"tcp.tcp_session_payload_up_len":0,"tcp.tcp_session_payload_down_len":0,"(-0.001, 150.0]":0,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":0,"sport_le":0,"dport_g":0,"dport_le":0,"mean_tcp_pkts":0,"std_tcp_pkts":0,"min_tcp_pkts":0,"max_tcp_pkts":0,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":5,"ip.session_id":3,"meta.direction":1,"ip.pkts_per_flow":6,"duration":10.344114065170288,"ip.header_len":120,"ip.payload_len":687,"ip.avg_bytes_tot_len":120.1,"time_between_pkts_sum":0.34689903259277344,"time_between_pkts_avg":0.057816505432128906,"time_between_pkts_max":0.10585784912109375,"time_between_pkts_min":0.030040740966796875,"time_between_pkts_std":0.02709624791427504,"(-0.001, 50.0]":6,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":0,"pkts_rate":0.0,"tcp_bytes_per_flow":0,"byte_rate":0.0,"tcp.tcp_session_payload_up_len":0,"tcp.tcp_session_payload_down_len":0,"(-0.001, 150.0]":0,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":0,"sport_le":0,"dport_g":0,"dport_le":0,"mean_tcp_pkts":0,"std_tcp_pkts":0,"min_tcp_pkts":0,"max_tcp_pkts":0,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":6,"ip.session_id":4,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.060002088546753,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.48543640104047614,"tcp_bytes_per_flow":0,"byte_rate":0.48543640104047614,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":39836,"std_tcp_pkts":0,"min_tcp_pkts":39836,"max_tcp_pkts":39836,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":7,"ip.session_id":4,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.0601449012756348,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.03600120544433594,"time_between_pkts_avg":0.03600120544433594,"time_between_pkts_max":0.03600120544433594,"time_between_pkts_min":0.03600120544433594,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.48540274976813685,"tcp_bytes_per_flow":0,"byte_rate":0.48540274976813685,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":443,"std_tcp_pkts":0,"min_tcp_pkts":443,"max_tcp_pkts":443,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":8,"ip.session_id":5,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.060002088546753,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":40.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.48543640104047614,"tcp_bytes_per_flow":0,"byte_rate":0.48543640104047614,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":0,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":39836,"std_tcp_pkts":0,"min_tcp_pkts":39836,"max_tcp_pkts":39836,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":9,"ip.session_id":5,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.0601539611816406,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":40.0,"time_between_pkts_sum":0.009059906005859375,"time_between_pkts_avg":0.009059906005859375,"time_between_pkts_max":0.009059906005859375,"time_between_pkts_min":0.009059906005859375,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.48540061512025584,"tcp_bytes_per_flow":0,"byte_rate":0.48540061512025584,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":80,"std_tcp_pkts":0,"min_tcp_pkts":80,"max_tcp_pkts":80,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":10,"ip.session_id":6,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.206873893737793,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":146.68989181518555,"time_between_pkts_avg":146.68989181518555,"time_between_pkts_max":146.68989181518555,"time_between_pkts_min":146.68989181518555,"time_between_pkts_std":0.0,"(-0.001, 50.0]":0,"(50.0, 100.0]":0,"(100.0, 150.0]":1,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4531296522368549,"tcp_bytes_per_flow":0,"byte_rate":0.4531296522368549,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":11,"ip.session_id":6,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.2069449424743652,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.07104873657226562,"time_between_pkts_avg":0.07104873657226562,"time_between_pkts_max":0.07104873657226562,"time_between_pkts_min":0.07104873657226562,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4531150645193839,"tcp_bytes_per_flow":0,"byte_rate":0.4531150645193839,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":3306,"std_tcp_pkts":0,"min_tcp_pkts":3306,"max_tcp_pkts":3306,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":12,"ip.session_id":7,"meta.direction":0,"ip.pkts_per_flow":2,"duration":2.2369771003723145,"ip.header_len":40,"ip.payload_len":44,"ip.avg_bytes_tot_len":42.666666666666664,"time_between_pkts_sum":29.857158660888672,"time_between_pkts_avg":14.928579330444336,"time_between_pkts_max":29.857158660888672,"time_between_pkts_min":0.0,"time_between_pkts_std":21.11219935607704,"(-0.001, 50.0]":2,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":2,"pkts_rate":0.8940636896404202,"tcp_bytes_per_flow":0,"byte_rate":0.8940636896404202,"tcp.tcp_session_payload_up_len":2,"tcp.tcp_session_payload_down_len":2,"(-0.001, 150.0]":2,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":1,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":2,"sport_le":0,"dport_g":0,"dport_le":2,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":13,"ip.session_id":7,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.20699405670166,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.666666666666664,"time_between_pkts_sum":0.049114227294921875,"time_between_pkts_avg":0.049114227294921875,"time_between_pkts_max":0.049114227294921875,"time_between_pkts_min":0.049114227294921875,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4531049809415863,"tcp_bytes_per_flow":0,"byte_rate":0.4531049809415863,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":22,"std_tcp_pkts":0,"min_tcp_pkts":22,"max_tcp_pkts":22,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":14,"ip.session_id":8,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.206873893737793,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4531296522368549,"tcp_bytes_per_flow":0,"byte_rate":0.4531296522368549,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":15,"ip.session_id":8,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.207005023956299,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.010967254638671875,"time_between_pkts_avg":0.010967254638671875,"time_between_pkts_max":0.010967254638671875,"time_between_pkts_min":0.010967254638671875,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4531027293301717,"tcp_bytes_per_flow":0,"byte_rate":0.4531027293301717,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":5900,"std_tcp_pkts":0,"min_tcp_pkts":5900,"max_tcp_pkts":5900,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":16,"ip.session_id":9,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.207036018371582,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.030994415283203125,"time_between_pkts_avg":0.030994415283203125,"time_between_pkts_max":0.030994415283203125,"time_between_pkts_min":0.030994415283203125,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4530963662015042,"tcp_bytes_per_flow":0,"byte_rate":0.4530963662015042,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":17,"ip.session_id":9,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.207068920135498,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.031948089599609375,"time_between_pkts_avg":0.031948089599609375,"time_between_pkts_max":0.031948089599609375,"time_between_pkts_min":0.031948089599609375,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4530896116912413,"tcp_bytes_per_flow":0,"byte_rate":0.4530896116912413,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":993,"std_tcp_pkts":0,"min_tcp_pkts":993,"max_tcp_pkts":993,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":18,"ip.session_id":10,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.207036018371582,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4530963662015042,"tcp_bytes_per_flow":0,"byte_rate":0.4530963662015042,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":19,"ip.session_id":10,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.2070839405059814,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.015020370483398438,"time_between_pkts_avg":0.015020370483398438,"time_between_pkts_max":0.015020370483398438,"time_between_pkts_min":0.015020370483398438,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.45308652817742245,"tcp_bytes_per_flow":0,"byte_rate":0.45308652817742245,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":445,"std_tcp_pkts":0,"min_tcp_pkts":445,"max_tcp_pkts":445,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":20,"ip.session_id":11,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.207036018371582,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4530963662015042,"tcp_bytes_per_flow":0,"byte_rate":0.4530963662015042,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":21,"ip.session_id":11,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.20709490776062,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.010967254638671875,"time_between_pkts_avg":0.010967254638671875,"time_between_pkts_max":0.010967254638671875,"time_between_pkts_min":0.010967254638671875,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.45308427674939805,"tcp_bytes_per_flow":0,"byte_rate":0.45308427674939805,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":1723,"std_tcp_pkts":0,"min_tcp_pkts":1723,"max_tcp_pkts":1723,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":22,"ip.session_id":12,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.2070369720458984,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.00095367431640625,"time_between_pkts_avg":0.00095367431640625,"time_between_pkts_max":0.00095367431640625,"time_between_pkts_min":0.00095367431640625,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.45309617041576394,"tcp_bytes_per_flow":0,"byte_rate":0.45309617041576394,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":23,"ip.session_id":12,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.207102060317993,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.007152557373046875,"time_between_pkts_avg":0.007152557373046875,"time_between_pkts_max":0.007152557373046875,"time_between_pkts_min":0.007152557373046875,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.45308280843882803,"tcp_bytes_per_flow":0,"byte_rate":0.45308280843882803,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":443,"std_tcp_pkts":0,"min_tcp_pkts":443,"max_tcp_pkts":443,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":24,"ip.session_id":13,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.2070369720458984,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.45309617041576394,"tcp_bytes_per_flow":0,"byte_rate":0.45309617041576394,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":25,"ip.session_id":13,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.2071099281311035,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.007867813110351562,"time_between_pkts_avg":0.007867813110351562,"time_between_pkts_max":0.007867813110351562,"time_between_pkts_min":0.007867813110351562,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4530811933081928,"tcp_bytes_per_flow":0,"byte_rate":0.4530811933081928,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":199,"std_tcp_pkts":0,"min_tcp_pkts":199,"max_tcp_pkts":199,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":26,"ip.session_id":14,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.2070369720458984,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.45309617041576394,"tcp_bytes_per_flow":0,"byte_rate":0.45309617041576394,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":27,"ip.session_id":14,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.2071170806884766,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.007152557373046875,"time_between_pkts_avg":0.007152557373046875,"time_between_pkts_max":0.007152557373046875,"time_between_pkts_min":0.007152557373046875,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4530797250176077,"tcp_bytes_per_flow":0,"byte_rate":0.4530797250176077,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":1720,"std_tcp_pkts":0,"min_tcp_pkts":1720,"max_tcp_pkts":1720,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":28,"ip.session_id":15,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.2070369720458984,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.45309617041576394,"tcp_bytes_per_flow":0,"byte_rate":0.45309617041576394,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":29,"ip.session_id":15,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.207119941711426,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.00286102294921875,"time_between_pkts_avg":0.00286102294921875,"time_between_pkts_max":0.00286102294921875,"time_between_pkts_min":0.00286102294921875,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4530791377040383,"tcp_bytes_per_flow":0,"byte_rate":0.4530791377040383,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":23,"std_tcp_pkts":0,"min_tcp_pkts":23,"max_tcp_pkts":23,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":30,"ip.session_id":16,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.2372870445251465,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.30994415283203125,"time_between_pkts_avg":0.30994415283203125,"time_between_pkts_max":0.30994415283203125,"time_between_pkts_min":0.30994415283203125,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.446969914945467,"tcp_bytes_per_flow":0,"byte_rate":0.446969914945467,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":31,"ip.session_id":16,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.2373011112213135,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.014066696166992188,"time_between_pkts_avg":0.014066696166992188,"time_between_pkts_max":0.014066696166992188,"time_between_pkts_min":0.014066696166992188,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44696710468896744,"tcp_bytes_per_flow":0,"byte_rate":0.44696710468896744,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":8888,"std_tcp_pkts":0,"min_tcp_pkts":8888,"max_tcp_pkts":8888,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":32,"ip.session_id":17,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.2373080253601074,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0069141387939453125,"time_between_pkts_avg":0.0069141387939453125,"time_between_pkts_max":0.0069141387939453125,"time_between_pkts_min":0.0069141387939453125,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44696572338940427,"tcp_bytes_per_flow":0,"byte_rate":0.44696572338940427,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":33,"ip.session_id":17,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.237313985824585,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0059604644775390625,"time_between_pkts_avg":0.0059604644775390625,"time_between_pkts_max":0.0059604644775390625,"time_between_pkts_min":0.0059604644775390625,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44696453262077107,"tcp_bytes_per_flow":0,"byte_rate":0.44696453262077107,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":995,"std_tcp_pkts":0,"min_tcp_pkts":995,"max_tcp_pkts":995,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":34,"ip.session_id":18,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.2373669147491455,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.052928924560546875,"time_between_pkts_avg":0.052928924560546875,"time_between_pkts_max":0.052928924560546875,"time_between_pkts_min":0.052928924560546875,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44695395887362555,"tcp_bytes_per_flow":0,"byte_rate":0.44695395887362555,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":35,"ip.session_id":18,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.2373769283294678,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.010013580322265625,"time_between_pkts_avg":0.010013580322265625,"time_between_pkts_max":0.010013580322265625,"time_between_pkts_min":0.010013580322265625,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44695195849125324,"tcp_bytes_per_flow":0,"byte_rate":0.44695195849125324,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":143,"std_tcp_pkts":0,"min_tcp_pkts":143,"max_tcp_pkts":143,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":36,"ip.session_id":19,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.2373669147491455,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44695395887362555,"tcp_bytes_per_flow":0,"byte_rate":0.44695395887362555,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":37,"ip.session_id":19,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.237384080886841,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.007152557373046875,"time_between_pkts_avg":0.007152557373046875,"time_between_pkts_max":0.007152557373046875,"time_between_pkts_min":0.007152557373046875,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44695052965766435,"tcp_bytes_per_flow":0,"byte_rate":0.44695052965766435,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":110,"std_tcp_pkts":0,"min_tcp_pkts":110,"max_tcp_pkts":110,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":38,"ip.session_id":20,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.2376420497894287,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.2579689025878906,"time_between_pkts_avg":0.2579689025878906,"time_between_pkts_max":0.2579689025878906,"time_between_pkts_min":0.2579689025878906,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4468990024986812,"tcp_bytes_per_flow":0,"byte_rate":0.4468990024986812,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":39,"ip.session_id":20,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.2376489639282227,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0069141387939453125,"time_between_pkts_avg":0.0069141387939453125,"time_between_pkts_max":0.0069141387939453125,"time_between_pkts_min":0.0069141387939453125,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.446897621620009,"tcp_bytes_per_flow":0,"byte_rate":0.446897621620009,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":25,"std_tcp_pkts":0,"min_tcp_pkts":25,"max_tcp_pkts":25,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":40,"ip.session_id":21,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.237661123275757,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.012159347534179688,"time_between_pkts_avg":0.012159347534179688,"time_between_pkts_max":0.012159347534179688,"time_between_pkts_min":0.012159347534179688,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44689519319890586,"tcp_bytes_per_flow":0,"byte_rate":0.44689519319890586,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":41,"ip.session_id":21,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.2376670837402344,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0059604644775390625,"time_between_pkts_avg":0.0059604644775390625,"time_between_pkts_max":0.0059604644775390625,"time_between_pkts_min":0.0059604644775390625,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44689400280604374,"tcp_bytes_per_flow":0,"byte_rate":0.44689400280604374,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":554,"std_tcp_pkts":0,"min_tcp_pkts":554,"max_tcp_pkts":554,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":42,"ip.session_id":22,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.2378649711608887,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.19788742065429688,"time_between_pkts_avg":0.19788742065429688,"time_between_pkts_max":0.19788742065429688,"time_between_pkts_min":0.19788742065429688,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44685448536300726,"tcp_bytes_per_flow":0,"byte_rate":0.44685448536300726,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":43,"ip.session_id":22,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.2378721237182617,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.007152557373046875,"time_between_pkts_avg":0.007152557373046875,"time_between_pkts_max":0.007152557373046875,"time_between_pkts_min":0.007152557373046875,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44685305715256124,"tcp_bytes_per_flow":0,"byte_rate":0.44685305715256124,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":21,"std_tcp_pkts":0,"min_tcp_pkts":21,"max_tcp_pkts":21,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":44,"ip.session_id":23,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.2381250858306885,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.2529621124267578,"time_between_pkts_avg":0.2529621124267578,"time_between_pkts_max":0.2529621124267578,"time_between_pkts_min":0.2529621124267578,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4468025519801751,"tcp_bytes_per_flow":0,"byte_rate":0.4468025519801751,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":45,"ip.session_id":23,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.238132953643799,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.007867813110351562,"time_between_pkts_avg":0.007867813110351562,"time_between_pkts_max":0.007867813110351562,"time_between_pkts_min":0.007867813110351562,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4468009813143348,"tcp_bytes_per_flow":0,"byte_rate":0.4468009813143348,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":135,"std_tcp_pkts":0,"min_tcp_pkts":135,"max_tcp_pkts":135,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":46,"ip.session_id":24,"meta.direction":0,"ip.pkts_per_flow":2,"duration":2.2686269283294678,"ip.header_len":40,"ip.payload_len":44,"ip.avg_bytes_tot_len":42.666666666666664,"time_between_pkts_sum":30.221939086914062,"time_between_pkts_avg":15.110969543457031,"time_between_pkts_max":30.215978622436523,"time_between_pkts_min":0.0059604644775390625,"time_between_pkts_std":21.36170869926153,"(-0.001, 50.0]":2,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":2,"pkts_rate":0.8815905228951528,"tcp_bytes_per_flow":0,"byte_rate":0.8815905228951528,"tcp.tcp_session_payload_up_len":2,"tcp.tcp_session_payload_down_len":2,"(-0.001, 150.0]":2,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":1,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":2,"sport_le":0,"dport_g":2,"dport_le":0,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":47,"ip.session_id":24,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.238176107406616,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.666666666666664,"time_between_pkts_sum":0.03719329833984375,"time_between_pkts_avg":0.03719329833984375,"time_between_pkts_max":0.03719329833984375,"time_between_pkts_min":0.03719329833984375,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4467923666465657,"tcp_bytes_per_flow":0,"byte_rate":0.4467923666465657,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":8080,"std_tcp_pkts":0,"min_tcp_pkts":8080,"max_tcp_pkts":8080,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":48,"ip.session_id":25,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.238187074661255,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.010967254638671875,"time_between_pkts_avg":0.010967254638671875,"time_between_pkts_max":0.010967254638671875,"time_between_pkts_min":0.010967254638671875,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4467901773364266,"tcp_bytes_per_flow":0,"byte_rate":0.4467901773364266,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":49,"ip.session_id":25,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.2381980419158936,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.010967254638671875,"time_between_pkts_avg":0.010967254638671875,"time_between_pkts_max":0.010967254638671875,"time_between_pkts_min":0.010967254638671875,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.446787988047743,"tcp_bytes_per_flow":0,"byte_rate":0.446787988047743,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":113,"std_tcp_pkts":0,"min_tcp_pkts":113,"max_tcp_pkts":113,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":50,"ip.session_id":26,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.238187074661255,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4467901773364266,"tcp_bytes_per_flow":0,"byte_rate":0.4467901773364266,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":51,"ip.session_id":26,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.2382049560546875,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0069141387939453125,"time_between_pkts_avg":0.0069141387939453125,"time_between_pkts_max":0.0069141387939453125,"time_between_pkts_min":0.0069141387939453125,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4467866078550343,"tcp_bytes_per_flow":0,"byte_rate":0.4467866078550343,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":53,"std_tcp_pkts":0,"min_tcp_pkts":53,"max_tcp_pkts":53,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":52,"ip.session_id":27,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.2382090091705322,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0040531158447265625,"time_between_pkts_avg":0.0040531158447265625,"time_between_pkts_max":0.0040531158447265625,"time_between_pkts_min":0.0040531158447265625,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44678579878051444,"tcp_bytes_per_flow":0,"byte_rate":0.44678579878051444,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":53,"ip.session_id":27,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.2382140159606934,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0050067901611328125,"time_between_pkts_avg":0.0050067901611328125,"time_between_pkts_max":0.0050067901611328125,"time_between_pkts_min":0.0050067901611328125,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44678479933956483,"tcp_bytes_per_flow":0,"byte_rate":0.44678479933956483,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":80,"std_tcp_pkts":0,"min_tcp_pkts":80,"max_tcp_pkts":80,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":54,"ip.session_id":28,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.238219976425171,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0059604644775390625,"time_between_pkts_avg":0.0059604644775390625,"time_between_pkts_max":0.0059604644775390625,"time_between_pkts_min":0.0059604644775390625,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44678360953474067,"tcp_bytes_per_flow":0,"byte_rate":0.44678360953474067,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":55,"ip.session_id":28,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.238224983215332,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0050067901611328125,"time_between_pkts_avg":0.0050067901611328125,"time_between_pkts_max":0.0050067901611328125,"time_between_pkts_min":0.0050067901611328125,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44678261010358555,"tcp_bytes_per_flow":0,"byte_rate":0.44678261010358555,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":3389,"std_tcp_pkts":0,"min_tcp_pkts":3389,"max_tcp_pkts":3389,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":56,"ip.session_id":29,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.2382779121398926,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.052928924560546875,"time_between_pkts_avg":0.052928924560546875,"time_between_pkts_max":0.052928924560546875,"time_between_pkts_min":0.052928924560546875,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.446772044961993,"tcp_bytes_per_flow":0,"byte_rate":0.446772044961993,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":57,"ip.session_id":29,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.2382869720458984,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.009059906005859375,"time_between_pkts_avg":0.009059906005859375,"time_between_pkts_max":0.009059906005859375,"time_between_pkts_min":0.009059906005859375,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4467702365644176,"tcp_bytes_per_flow":0,"byte_rate":0.4467702365644176,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":111,"std_tcp_pkts":0,"min_tcp_pkts":111,"max_tcp_pkts":111,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":58,"ip.session_id":30,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.2382779121398926,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.446772044961993,"tcp_bytes_per_flow":0,"byte_rate":0.446772044961993,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":59,"ip.session_id":30,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.2382941246032715,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.007152557373046875,"time_between_pkts_avg":0.007152557373046875,"time_between_pkts_max":0.007152557373046875,"time_between_pkts_min":0.007152557373046875,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44676880889246223,"tcp_bytes_per_flow":0,"byte_rate":0.44676880889246223,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":1025,"std_tcp_pkts":0,"min_tcp_pkts":1025,"max_tcp_pkts":1025,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":60,"ip.session_id":31,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.238297939300537,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.003814697265625,"time_between_pkts_avg":0.003814697265625,"time_between_pkts_max":0.003814697265625,"time_between_pkts_min":0.003814697265625,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4467680474711502,"tcp_bytes_per_flow":0,"byte_rate":0.4467680474711502,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":61,"ip.session_id":31,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.2383029460906982,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0050067901611328125,"time_between_pkts_avg":0.0050067901611328125,"time_between_pkts_max":0.0050067901611328125,"time_between_pkts_min":0.0050067901611328125,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4467670481096168,"tcp_bytes_per_flow":0,"byte_rate":0.4467670481096168,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":587,"std_tcp_pkts":0,"min_tcp_pkts":587,"max_tcp_pkts":587,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":62,"ip.session_id":32,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.2383430004119873,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0400543212890625,"time_between_pkts_avg":0.0400543212890625,"time_between_pkts_max":0.0400543212890625,"time_between_pkts_min":0.0400543212890625,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4467590533782986,"tcp_bytes_per_flow":0,"byte_rate":0.4467590533782986,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":63,"ip.session_id":32,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.2383530139923096,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.010013580322265625,"time_between_pkts_avg":0.010013580322265625,"time_between_pkts_max":0.010013580322265625,"time_between_pkts_min":0.010013580322265625,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4467570547401759,"tcp_bytes_per_flow":0,"byte_rate":0.4467570547401759,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":256,"std_tcp_pkts":0,"min_tcp_pkts":256,"max_tcp_pkts":256,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":64,"ip.session_id":33,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.2383430004119873,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4467590533782986,"tcp_bytes_per_flow":0,"byte_rate":0.4467590533782986,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":65,"ip.session_id":33,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.2383599281311035,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0069141387939453125,"time_between_pkts_avg":0.0069141387939453125,"time_between_pkts_max":0.0069141387939453125,"time_between_pkts_min":0.0069141387939453125,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44675567473857525,"tcp_bytes_per_flow":0,"byte_rate":0.44675567473857525,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":139,"std_tcp_pkts":0,"min_tcp_pkts":139,"max_tcp_pkts":139,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":66,"ip.session_id":34,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.2383430004119873,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4467590533782986,"tcp_bytes_per_flow":0,"byte_rate":0.4467590533782986,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":67,"ip.session_id":34,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.238363027572632,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0030994415283203125,"time_between_pkts_avg":0.0030994415283203125,"time_between_pkts_max":0.0030994415283203125,"time_between_pkts_min":0.0030994415283203125,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44675505611993555,"tcp_bytes_per_flow":0,"byte_rate":0.44675505611993555,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":1036,"std_tcp_pkts":0,"min_tcp_pkts":1036,"max_tcp_pkts":1036,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":68,"ip.session_id":35,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.2384040355682373,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.04100799560546875,"time_between_pkts_avg":0.04100799560546875,"time_between_pkts_max":0.04100799560546875,"time_between_pkts_min":0.04100799560546875,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44674687148075204,"tcp_bytes_per_flow":0,"byte_rate":0.44674687148075204,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":69,"ip.session_id":35,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.2384109497070312,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0069141387939453125,"time_between_pkts_avg":0.0069141387939453125,"time_between_pkts_max":0.0069141387939453125,"time_between_pkts_min":0.0069141387939453125,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44674549154206133,"tcp_bytes_per_flow":0,"byte_rate":0.44674549154206133,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":6881,"std_tcp_pkts":0,"min_tcp_pkts":6881,"max_tcp_pkts":6881,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":70,"ip.session_id":36,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.2688779830932617,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.2510547637939453,"time_between_pkts_avg":0.2510547637939453,"time_between_pkts_max":0.2510547637939453,"time_between_pkts_min":0.2510547637939453,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44074648678844147,"tcp_bytes_per_flow":0,"byte_rate":0.44074648678844147,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":71,"ip.session_id":36,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.2688848972320557,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0069141387939453125,"time_between_pkts_avg":0.0069141387939453125,"time_between_pkts_max":0.0069141387939453125,"time_between_pkts_min":0.0069141387939453125,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44074514366945544,"tcp_bytes_per_flow":0,"byte_rate":0.44074514366945544,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":6003,"std_tcp_pkts":0,"min_tcp_pkts":6003,"max_tcp_pkts":6003,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":72,"ip.session_id":37,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.268965005874634,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.080108642578125,"time_between_pkts_avg":0.080108642578125,"time_between_pkts_max":0.080108642578125,"time_between_pkts_min":0.080108642578125,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4407295826118407,"tcp_bytes_per_flow":0,"byte_rate":0.4407295826118407,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":73,"ip.session_id":37,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.2689709663391113,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0059604644775390625,"time_between_pkts_avg":0.0059604644775390625,"time_between_pkts_max":0.0059604644775390625,"time_between_pkts_min":0.0059604644775390625,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44072842483897345,"tcp_bytes_per_flow":0,"byte_rate":0.44072842483897345,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":10000,"std_tcp_pkts":0,"min_tcp_pkts":10000,"max_tcp_pkts":10000,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":74,"ip.session_id":38,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.2690839767456055,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.11301040649414062,"time_between_pkts_avg":0.11301040649414062,"time_between_pkts_max":0.11301040649414062,"time_between_pkts_min":0.11301040649414062,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4407064746163484,"tcp_bytes_per_flow":0,"byte_rate":0.4407064746163484,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":75,"ip.session_id":38,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.269089937210083,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0059604644775390625,"time_between_pkts_avg":0.0059604644775390625,"time_between_pkts_max":0.0059604644775390625,"time_between_pkts_min":0.0059604644775390625,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44070531696488474,"tcp_bytes_per_flow":0,"byte_rate":0.44070531696488474,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":465,"std_tcp_pkts":0,"min_tcp_pkts":465,"max_tcp_pkts":465,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":76,"ip.session_id":39,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.2691760063171387,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.08606910705566406,"time_between_pkts_avg":0.08606910705566406,"time_between_pkts_max":0.08606910705566406,"time_between_pkts_min":0.08606910705566406,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44068860115570985,"tcp_bytes_per_flow":0,"byte_rate":0.44068860115570985,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":77,"ip.session_id":39,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.2691850662231445,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.009059906005859375,"time_between_pkts_avg":0.009059906005859375,"time_between_pkts_max":0.009059906005859375,"time_between_pkts_min":0.009059906005859375,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4406868416706137,"tcp_bytes_per_flow":0,"byte_rate":0.4406868416706137,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":3052,"std_tcp_pkts":0,"min_tcp_pkts":3052,"max_tcp_pkts":3052,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":78,"ip.session_id":40,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.2691760063171387,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44068860115570985,"tcp_bytes_per_flow":0,"byte_rate":0.44068860115570985,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":79,"ip.session_id":40,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.269191026687622,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0059604644775390625,"time_between_pkts_avg":0.0059604644775390625,"time_between_pkts_max":0.0059604644775390625,"time_between_pkts_min":0.0059604644775390625,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4406856841222916,"tcp_bytes_per_flow":0,"byte_rate":0.4406856841222916,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":5801,"std_tcp_pkts":0,"min_tcp_pkts":5801,"max_tcp_pkts":5801,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":80,"ip.session_id":41,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.269649028778076,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.45800209045410156,"time_between_pkts_avg":0.45800209045410156,"time_between_pkts_max":0.45800209045410156,"time_between_pkts_min":0.45800209045410156,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4405967562915997,"tcp_bytes_per_flow":0,"byte_rate":0.4405967562915997,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":81,"ip.session_id":41,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.2696549892425537,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0059604644775390625,"time_between_pkts_avg":0.0059604644775390625,"time_between_pkts_max":0.0059604644775390625,"time_between_pkts_min":0.0059604644775390625,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44059559921648156,"tcp_bytes_per_flow":0,"byte_rate":0.44059559921648156,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":3260,"std_tcp_pkts":0,"min_tcp_pkts":3260,"max_tcp_pkts":3260,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":82,"ip.session_id":42,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.2697269916534424,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.07200241088867188,"time_between_pkts_avg":0.07200241088867188,"time_between_pkts_max":0.07200241088867188,"time_between_pkts_min":0.07200241088867188,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44058162222916675,"tcp_bytes_per_flow":0,"byte_rate":0.44058162222916675,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":83,"ip.session_id":42,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.269737958908081,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.010967254638671875,"time_between_pkts_avg":0.010967254638671875,"time_between_pkts_max":0.010967254638671875,"time_between_pkts_min":0.010967254638671875,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44057949336190205,"tcp_bytes_per_flow":0,"byte_rate":0.44057949336190205,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":24800,"std_tcp_pkts":0,"min_tcp_pkts":24800,"max_tcp_pkts":24800,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":84,"ip.session_id":43,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.269745111465454,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.007152557373046875,"time_between_pkts_avg":0.007152557373046875,"time_between_pkts_max":0.007152557373046875,"time_between_pkts_min":0.007152557373046875,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4405781049812915,"tcp_bytes_per_flow":0,"byte_rate":0.4405781049812915,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":85,"ip.session_id":43,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.2697529792785645,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.007867813110351562,"time_between_pkts_avg":0.007867813110351562,"time_between_pkts_max":0.007867813110351562,"time_between_pkts_min":0.007867813110351562,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44057657777272646,"tcp_bytes_per_flow":0,"byte_rate":0.44057657777272646,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":5190,"std_tcp_pkts":0,"min_tcp_pkts":5190,"max_tcp_pkts":5190,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":86,"ip.session_id":44,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.269779920578003,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.026941299438476562,"time_between_pkts_avg":0.026941299438476562,"time_between_pkts_max":0.026941299438476562,"time_between_pkts_min":0.026941299438476562,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4405713483205669,"tcp_bytes_per_flow":0,"byte_rate":0.4405713483205669,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":87,"ip.session_id":44,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.269787073135376,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.007152557373046875,"time_between_pkts_avg":0.007152557373046875,"time_between_pkts_max":0.007152557373046875,"time_between_pkts_min":0.007152557373046875,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44056995999129006,"tcp_bytes_per_flow":0,"byte_rate":0.44056995999129006,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":5269,"std_tcp_pkts":0,"min_tcp_pkts":5269,"max_tcp_pkts":5269,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":88,"ip.session_id":45,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.2698960304260254,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.10895729064941406,"time_between_pkts_avg":0.10895729064941406,"time_between_pkts_max":0.10895729064941406,"time_between_pkts_min":0.10895729064941406,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44054881219044867,"tcp_bytes_per_flow":0,"byte_rate":0.44054881219044867,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":89,"ip.session_id":45,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.2699050903320312,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.009059906005859375,"time_between_pkts_avg":0.009059906005859375,"time_between_pkts_max":0.009059906005859375,"time_between_pkts_min":0.009059906005859375,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4405470538214109,"tcp_bytes_per_flow":0,"byte_rate":0.4405470538214109,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":7911,"std_tcp_pkts":0,"min_tcp_pkts":7911,"max_tcp_pkts":7911,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":90,"ip.session_id":46,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.2698960304260254,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44054881219044867,"tcp_bytes_per_flow":0,"byte_rate":0.44054881219044867,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":91,"ip.session_id":46,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.269911050796509,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0059604644775390625,"time_between_pkts_avg":0.0059604644775390625,"time_between_pkts_max":0.0059604644775390625,"time_between_pkts_min":0.0059604644775390625,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44054589700733043,"tcp_bytes_per_flow":0,"byte_rate":0.44054589700733043,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":1138,"std_tcp_pkts":0,"min_tcp_pkts":1138,"max_tcp_pkts":1138,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":92,"ip.session_id":47,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.269913911819458,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.00286102294921875,"time_between_pkts_avg":0.00286102294921875,"time_between_pkts_max":0.00286102294921875,"time_between_pkts_min":0.00286102294921875,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4405453417387298,"tcp_bytes_per_flow":0,"byte_rate":0.4405453417387298,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":93,"ip.session_id":47,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.269918918609619,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0050067901611328125,"time_between_pkts_avg":0.0050067901611328125,"time_between_pkts_max":0.0050067901611328125,"time_between_pkts_min":0.0050067901611328125,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4405443700220466,"tcp_bytes_per_flow":0,"byte_rate":0.4405443700220466,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":32774,"std_tcp_pkts":0,"min_tcp_pkts":32774,"max_tcp_pkts":32774,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":94,"ip.session_id":48,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.269947052001953,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.028133392333984375,"time_between_pkts_avg":0.028133392333984375,"time_between_pkts_max":0.028133392333984375,"time_between_pkts_min":0.028133392333984375,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4405389099794472,"tcp_bytes_per_flow":0,"byte_rate":0.4405389099794472,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":95,"ip.session_id":48,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.2699520587921143,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0050067901611328125,"time_between_pkts_avg":0.0050067901611328125,"time_between_pkts_max":0.0050067901611328125,"time_between_pkts_min":0.0050067901611328125,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4405379382911371,"tcp_bytes_per_flow":0,"byte_rate":0.4405379382911371,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":2100,"std_tcp_pkts":0,"min_tcp_pkts":2100,"max_tcp_pkts":2100,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":96,"ip.session_id":49,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.269994020462036,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.041961669921875,"time_between_pkts_avg":0.041961669921875,"time_between_pkts_max":0.041961669921875,"time_between_pkts_min":0.041961669921875,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44052979478618154,"tcp_bytes_per_flow":0,"byte_rate":0.44052979478618154,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":97,"ip.session_id":49,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.2699999809265137,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0059604644775390625,"time_between_pkts_avg":0.0059604644775390625,"time_between_pkts_max":0.0059604644775390625,"time_between_pkts_min":0.0059604644775390625,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44052863806273873,"tcp_bytes_per_flow":0,"byte_rate":0.44052863806273873,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":2161,"std_tcp_pkts":0,"min_tcp_pkts":2161,"max_tcp_pkts":2161,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":98,"ip.session_id":50,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.270008087158203,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.008106231689453125,"time_between_pkts_avg":0.008106231689453125,"time_between_pkts_max":0.008106231689453125,"time_between_pkts_min":0.008106231689453125,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.44052706492860494,"tcp_bytes_per_flow":0,"byte_rate":0.44052706492860494,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":99,"ip.session_id":50,"meta.direction":1,"ip.pkts_per_flow":1,"duration":2.2700130939483643,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0050067901611328125,"time_between_pkts_avg":0.0050067901611328125,"time_between_pkts_max":0.0050067901611328125,"time_between_pkts_min":0.0050067901611328125,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4405260932925468,"tcp_bytes_per_flow":0,"byte_rate":0.4405260932925468,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":32785,"std_tcp_pkts":0,"min_tcp_pkts":32785,"max_tcp_pkts":32785,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1},{"_id":100,"ip.session_id":51,"meta.direction":0,"ip.pkts_per_flow":1,"duration":2.270033121109009,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.02002716064453125,"time_between_pkts_avg":0.02002716064453125,"time_between_pkts_max":0.02002716064453125,"time_between_pkts_min":0.02002716064453125,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.4405222067911754,"tcp_bytes_per_flow":0,"byte_rate":0.4405222067911754,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":40092,"std_tcp_pkts":0,"min_tcp_pkts":40092,"max_tcp_pkts":40092,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":1}], "fields": [{"id": "_id", "type": "int"}, {"id": "ip.session_id", "type": "numeric"}, {"id": "meta.direction", "type": "numeric"}, {"id": "ip.pkts_per_flow", "type": "numeric"}, {"id": "duration", "type": "numeric"}, {"id": "ip.header_len", "type": "numeric"}, {"id": "ip.payload_len", "type": "numeric"}, {"id": "ip.avg_bytes_tot_len", "type": "numeric"}, {"id": "time_between_pkts_sum", "type": "numeric"}, {"id": "time_between_pkts_avg", "type": "numeric"}, {"id": "time_between_pkts_max", "type": "numeric"}, {"id": "time_between_pkts_min", "type": "numeric"}, {"id": "time_between_pkts_std", "type": "numeric"}, {"id": "(-0.001, 50.0]", "type": "numeric"}, {"id": "(50.0, 100.0]", "type": "numeric"}, {"id": "(100.0, 150.0]", "type": "numeric"}, {"id": "(150.0, 200.0]", "type": "numeric"}, {"id": "(200.0, 250.0]", "type": "numeric"}, {"id": "(250.0, 300.0]", "type": "numeric"}, {"id": "(300.0, 350.0]", "type": "numeric"}, {"id": "(350.0, 400.0]", "type": "numeric"}, {"id": "(400.0, 450.0]", "type": "numeric"}, {"id": "(450.0, 500.0]", "type": "numeric"}, {"id": "(500.0, 550.0]", "type": "numeric"}, {"id": "tcp_pkts_per_flow", "type": "numeric"}, {"id": "pkts_rate", "type": "numeric"}, {"id": "tcp_bytes_per_flow", "type": "numeric"}, {"id": "byte_rate", "type": "numeric"}, {"id": "tcp.tcp_session_payload_up_len", "type": "numeric"}, {"id": "tcp.tcp_session_payload_down_len", "type": "numeric"}, {"id": "(-0.001, 150.0]", "type": "numeric"}, {"id": "(150.0, 300.0]", "type": "numeric"}, {"id": "(300.0, 450.0]", "type": "numeric"}, {"id": "(450.0, 600.0]", "type": "numeric"}, {"id": "(600.0, 750.0]", "type": "numeric"}, {"id": "(750.0, 900.0]", "type": "numeric"}, {"id": "(900.0, 1050.0]", "type": "numeric"}, {"id": "(1050.0, 1200.0]", "type": "numeric"}, {"id": "(1200.0, 1350.0]", "type": "numeric"}, {"id": "(1350.0, 1500.0]", "type": "numeric"}, {"id": "(1500.0, 10000.0]", "type": "numeric"}, {"id": "tcp.fin", "type": "numeric"}, {"id": "tcp.syn", "type": "numeric"}, {"id": "tcp.rst", "type": "numeric"}, {"id": "tcp.psh", "type": "numeric"}, {"id": "tcp.ack", "type": "numeric"}, {"id": "tcp.urg", "type": "numeric"}, {"id": "sport_g", "type": "numeric"}, {"id": "sport_le", "type": "numeric"}, {"id": "dport_g", "type": "numeric"}, {"id": "dport_le", "type": "numeric"}, {"id": "mean_tcp_pkts", "type": "numeric"}, {"id": "std_tcp_pkts", "type": "numeric"}, {"id": "min_tcp_pkts", "type": "numeric"}, {"id": "max_tcp_pkts", "type": "numeric"}, {"id": "entropy_tcp_pkts", "type": "numeric"}, {"id": "mean_tcp_len", "type": "numeric"}, {"id": "std_tcp_len", "type": "numeric"}, {"id": "min_tcp_len", "type": "numeric"}, {"id": "max_tcp_len", "type": "numeric"}, {"id": "entropy_tcp_len", "type": "numeric"}, {"id": "ssl.tls_version", "type": "numeric"}, {"id": "malware", "type": "numeric"}], "_links": {"start": "/api/3/action/datastore_search?resource_id=b9ed84ce-24c8-4db9-a5d4-722b4ecbc31a", "next": "/api/3/action/datastore_search?resource_id=b9ed84ce-24c8-4db9-a5d4-722b4ecbc31a&offset=100"}, "total": 2119, "total_was_estimated": false}}