{"help": "https://natwork-data-portal.iti.gr:443/fa_IR/api/3/action/help_show?name=datastore_search", "success": true, "result": {"include_total": true, "limit": 100, "records_format": "objects", "resource_id": "c9c6468e-afcb-482d-9d31-346cc48d5bbe", "total_estimation_threshold": null, "records": [{"_id":1,"ip.session_id":1,"meta.direction":0,"ip.pkts_per_flow":1,"duration":0.029412031173706055,"ip.header_len":20,"ip.payload_len":32,"ip.avg_bytes_tot_len":114.0,"time_between_pkts_sum":29.412031173706055,"time_between_pkts_avg":29.412031173706055,"time_between_pkts_max":29.412031173706055,"time_between_pkts_min":29.412031173706055,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":33.99969196598656,"tcp_bytes_per_flow":0,"byte_rate":33.99969196598656,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":0,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":59602,"std_tcp_pkts":0,"min_tcp_pkts":59602,"max_tcp_pkts":59602,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":2,"ip.session_id":1,"meta.direction":1,"ip.pkts_per_flow":1,"duration":0.0,"ip.header_len":20,"ip.payload_len":156,"ip.avg_bytes_tot_len":114.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.0,"tcp_bytes_per_flow":124,"byte_rate":0.0,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":0,"tcp.psh":1,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":22,"std_tcp_pkts":0,"min_tcp_pkts":22,"max_tcp_pkts":22,"entropy_tcp_pkts":0,"mean_tcp_len":124,"std_tcp_len":0,"min_tcp_len":124,"max_tcp_len":124,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":3,"ip.session_id":2,"meta.direction":1,"ip.pkts_per_flow":12,"duration":11.158972978591919,"ip.header_len":240,"ip.payload_len":240,"ip.avg_bytes_tot_len":40.0,"time_between_pkts_sum":9500.360012054443,"time_between_pkts_avg":791.6966676712036,"time_between_pkts_max":1001.168966293335,"time_between_pkts_min":123.36111068725586,"time_between_pkts_std":378.4124883300136,"(-0.001, 50.0]":0,"(50.0, 100.0]":0,"(100.0, 150.0]":2,"(150.0, 200.0]":0,"(200.0, 250.0]":1,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":0,"pkts_rate":0.0,"tcp_bytes_per_flow":0,"byte_rate":0.0,"tcp.tcp_session_payload_up_len":0,"tcp.tcp_session_payload_down_len":0,"(-0.001, 150.0]":0,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":0,"sport_le":0,"dport_g":0,"dport_le":0,"mean_tcp_pkts":0,"std_tcp_pkts":0,"min_tcp_pkts":0,"max_tcp_pkts":0,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":4,"ip.session_id":4,"meta.direction":0,"ip.pkts_per_flow":2,"duration":8.22860312461853,"ip.header_len":40,"ip.payload_len":28,"ip.avg_bytes_tot_len":34.0,"time_between_pkts_sum":70.18399238586426,"time_between_pkts_avg":35.09199619293213,"time_between_pkts_max":70.18399238586426,"time_between_pkts_min":0.0,"time_between_pkts_std":49.62757694678964,"(-0.001, 50.0]":1,"(50.0, 100.0]":1,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":0,"pkts_rate":0.0,"tcp_bytes_per_flow":0,"byte_rate":0.0,"tcp.tcp_session_payload_up_len":0,"tcp.tcp_session_payload_down_len":0,"(-0.001, 150.0]":0,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":0,"sport_le":0,"dport_g":0,"dport_le":0,"mean_tcp_pkts":0,"std_tcp_pkts":0,"min_tcp_pkts":0,"max_tcp_pkts":0,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":5,"ip.session_id":4,"meta.direction":1,"ip.pkts_per_flow":2,"duration":8.22881293296814,"ip.header_len":40,"ip.payload_len":28,"ip.avg_bytes_tot_len":34.0,"time_between_pkts_sum":0.15282630920410156,"time_between_pkts_avg":0.07641315460205078,"time_between_pkts_max":0.102996826171875,"time_between_pkts_min":0.04982948303222656,"time_between_pkts_std":0.03759498887171748,"(-0.001, 50.0]":2,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":0,"pkts_rate":0.0,"tcp_bytes_per_flow":0,"byte_rate":0.0,"tcp.tcp_session_payload_up_len":0,"tcp.tcp_session_payload_down_len":0,"(-0.001, 150.0]":0,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":0,"sport_le":0,"dport_g":0,"dport_le":0,"mean_tcp_pkts":0,"std_tcp_pkts":0,"min_tcp_pkts":0,"max_tcp_pkts":0,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":6,"ip.session_id":5,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.22860312461853,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.12152730966063684,"tcp_bytes_per_flow":0,"byte_rate":0.12152730966063684,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":58830,"std_tcp_pkts":0,"min_tcp_pkts":58830,"max_tcp_pkts":58830,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":7,"ip.session_id":5,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.228763103485107,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.05698204040527344,"time_between_pkts_avg":0.05698204040527344,"time_between_pkts_max":0.05698204040527344,"time_between_pkts_min":0.05698204040527344,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.12152494699676948,"tcp_bytes_per_flow":0,"byte_rate":0.12152494699676948,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":443,"std_tcp_pkts":0,"min_tcp_pkts":443,"max_tcp_pkts":443,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":8,"ip.session_id":6,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.22860312461853,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":40.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.12152730966063684,"tcp_bytes_per_flow":0,"byte_rate":0.12152730966063684,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":0,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":58830,"std_tcp_pkts":0,"min_tcp_pkts":58830,"max_tcp_pkts":58830,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":9,"ip.session_id":6,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.228858947753906,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":40.0,"time_between_pkts_sum":0.04601478576660156,"time_between_pkts_avg":0.04601478576660156,"time_between_pkts_max":0.04601478576660156,"time_between_pkts_min":0.04601478576660156,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.1215235315551196,"tcp_bytes_per_flow":0,"byte_rate":0.1215235315551196,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":80,"std_tcp_pkts":0,"min_tcp_pkts":80,"max_tcp_pkts":80,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":10,"ip.session_id":7,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.386479139328003,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":157.62019157409668,"time_between_pkts_avg":157.62019157409668,"time_between_pkts_max":157.62019157409668,"time_between_pkts_min":157.62019157409668,"time_between_pkts_std":0.0,"(-0.001, 50.0]":0,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":1,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11923955016003636,"tcp_bytes_per_flow":0,"byte_rate":0.11923955016003636,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":11,"ip.session_id":7,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.386577129364014,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.09799003601074219,"time_between_pkts_avg":0.09799003601074219,"time_between_pkts_max":0.09799003601074219,"time_between_pkts_min":0.09799003601074219,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11923815694709217,"tcp_bytes_per_flow":0,"byte_rate":0.11923815694709217,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":21,"std_tcp_pkts":0,"min_tcp_pkts":21,"max_tcp_pkts":21,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":12,"ip.session_id":8,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.386479139328003,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11923955016003636,"tcp_bytes_per_flow":0,"byte_rate":0.11923955016003636,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":13,"ip.session_id":8,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.386621952056885,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.04482269287109375,"time_between_pkts_avg":0.04482269287109375,"time_between_pkts_max":0.04482269287109375,"time_between_pkts_min":0.04482269287109375,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.1192375196731912,"tcp_bytes_per_flow":0,"byte_rate":0.1192375196731912,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":110,"std_tcp_pkts":0,"min_tcp_pkts":110,"max_tcp_pkts":110,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":14,"ip.session_id":9,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.386479139328003,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11923955016003636,"tcp_bytes_per_flow":0,"byte_rate":0.11923955016003636,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":15,"ip.session_id":9,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.386641025543213,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.019073486328125,"time_between_pkts_avg":0.019073486328125,"time_between_pkts_max":0.019073486328125,"time_between_pkts_min":0.019073486328125,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11923724849487388,"tcp_bytes_per_flow":0,"byte_rate":0.11923724849487388,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":587,"std_tcp_pkts":0,"min_tcp_pkts":587,"max_tcp_pkts":587,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":16,"ip.session_id":10,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.386656045913696,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.015020370483398438,"time_between_pkts_avg":0.015020370483398438,"time_between_pkts_max":0.015020370483398438,"time_between_pkts_min":0.015020370483398438,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11923703494281714,"tcp_bytes_per_flow":0,"byte_rate":0.11923703494281714,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":17,"ip.session_id":10,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.38670301437378,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.04696846008300781,"time_between_pkts_avg":0.04696846008300781,"time_between_pkts_max":0.04696846008300781,"time_between_pkts_min":0.04696846008300781,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11923636717386114,"tcp_bytes_per_flow":0,"byte_rate":0.11923636717386114,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":993,"std_tcp_pkts":0,"min_tcp_pkts":993,"max_tcp_pkts":993,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":18,"ip.session_id":11,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.386656045913696,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11923703494281714,"tcp_bytes_per_flow":0,"byte_rate":0.11923703494281714,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":19,"ip.session_id":11,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.386714935302734,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.011920928955078125,"time_between_pkts_avg":0.011920928955078125,"time_between_pkts_max":0.011920928955078125,"time_between_pkts_min":0.011920928955078125,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11923619769054462,"tcp_bytes_per_flow":0,"byte_rate":0.11923619769054462,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":135,"std_tcp_pkts":0,"min_tcp_pkts":135,"max_tcp_pkts":135,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":20,"ip.session_id":12,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.386656045913696,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11923703494281714,"tcp_bytes_per_flow":0,"byte_rate":0.11923703494281714,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":21,"ip.session_id":12,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.38673710823059,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.022172927856445312,"time_between_pkts_avg":0.022172927856445312,"time_between_pkts_max":0.022172927856445312,"time_between_pkts_min":0.022172927856445312,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.1192358824528574,"tcp_bytes_per_flow":0,"byte_rate":0.1192358824528574,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":113,"std_tcp_pkts":0,"min_tcp_pkts":113,"max_tcp_pkts":113,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":22,"ip.session_id":13,"meta.direction":0,"ip.pkts_per_flow":2,"duration":8.417683124542236,"ip.header_len":40,"ip.payload_len":44,"ip.avg_bytes_tot_len":42.666666666666664,"time_between_pkts_sum":30.727148056030273,"time_between_pkts_avg":15.363574028015137,"time_between_pkts_max":29.455184936523438,"time_between_pkts_min":1.271963119506836,"time_between_pkts_std":19.92854726249709,"(-0.001, 50.0]":2,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":2,"pkts_rate":0.237595068667872,"tcp_bytes_per_flow":0,"byte_rate":0.237595068667872,"tcp.tcp_session_payload_up_len":2,"tcp.tcp_session_payload_down_len":2,"(-0.001, 150.0]":2,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":1,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":2,"sport_le":0,"dport_g":0,"dport_le":2,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":23,"ip.session_id":13,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.388061046600342,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.666666666666664,"time_between_pkts_sum":0.051975250244140625,"time_between_pkts_avg":0.051975250244140625,"time_between_pkts_max":0.051975250244140625,"time_between_pkts_min":0.051975250244140625,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11921706273290622,"tcp_bytes_per_flow":0,"byte_rate":0.11921706273290622,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":22,"std_tcp_pkts":0,"min_tcp_pkts":22,"max_tcp_pkts":22,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":24,"ip.session_id":14,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.388137102127075,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.07605552673339844,"time_between_pkts_avg":0.07605552673339844,"time_between_pkts_max":0.07605552673339844,"time_between_pkts_min":0.07605552673339844,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11921598178771048,"tcp_bytes_per_flow":0,"byte_rate":0.11921598178771048,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":25,"ip.session_id":14,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.388148069381714,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.010967254638671875,"time_between_pkts_avg":0.010967254638671875,"time_between_pkts_max":0.010967254638671875,"time_between_pkts_min":0.010967254638671875,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11921582591635266,"tcp_bytes_per_flow":0,"byte_rate":0.11921582591635266,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":25,"std_tcp_pkts":0,"min_tcp_pkts":25,"max_tcp_pkts":25,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":26,"ip.session_id":15,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.388154029846191,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0059604644775390625,"time_between_pkts_avg":0.0059604644775390625,"time_between_pkts_max":0.0059604644775390625,"time_between_pkts_min":0.0059604644775390625,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11921574120382913,"tcp_bytes_per_flow":0,"byte_rate":0.11921574120382913,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":27,"ip.session_id":15,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.388159036636353,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0050067901611328125,"time_between_pkts_avg":0.0050067901611328125,"time_between_pkts_max":0.0050067901611328125,"time_between_pkts_min":0.0050067901611328125,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11921567004540241,"tcp_bytes_per_flow":0,"byte_rate":0.11921567004540241,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":80,"std_tcp_pkts":0,"min_tcp_pkts":80,"max_tcp_pkts":80,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":28,"ip.session_id":16,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.388204097747803,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.04506111145019531,"time_between_pkts_avg":0.04506111145019531,"time_between_pkts_max":0.04506111145019531,"time_between_pkts_min":0.04506111145019531,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11921502962338455,"tcp_bytes_per_flow":0,"byte_rate":0.11921502962338455,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":29,"ip.session_id":16,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.388227939605713,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.02384185791015625,"time_between_pkts_avg":0.02384185791015625,"time_between_pkts_max":0.02384185791015625,"time_between_pkts_min":0.02384185791015625,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11921469077853943,"tcp_bytes_per_flow":0,"byte_rate":0.11921469077853943,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":554,"std_tcp_pkts":0,"min_tcp_pkts":554,"max_tcp_pkts":554,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":30,"ip.session_id":17,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.419565916061401,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":1.882791519165039,"time_between_pkts_avg":1.882791519165039,"time_between_pkts_max":1.882791519165039,"time_between_pkts_min":1.882791519165039,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.1187709687137637,"tcp_bytes_per_flow":0,"byte_rate":0.1187709687137637,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":31,"ip.session_id":17,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.419610977172852,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.04506111145019531,"time_between_pkts_avg":0.04506111145019531,"time_between_pkts_max":0.04506111145019531,"time_between_pkts_min":0.04506111145019531,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11877033306065898,"tcp_bytes_per_flow":0,"byte_rate":0.11877033306065898,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":256,"std_tcp_pkts":0,"min_tcp_pkts":256,"max_tcp_pkts":256,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":32,"ip.session_id":18,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.419704914093018,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.09393692016601562,"time_between_pkts_avg":0.09393692016601562,"time_between_pkts_max":0.09393692016601562,"time_between_pkts_min":0.09393692016601562,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.1187690079644224,"tcp_bytes_per_flow":0,"byte_rate":0.1187690079644224,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":33,"ip.session_id":18,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.419728994369507,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.024080276489257812,"time_between_pkts_avg":0.024080276489257812,"time_between_pkts_max":0.024080276489257812,"time_between_pkts_min":0.024080276489257812,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11876866828715345,"tcp_bytes_per_flow":0,"byte_rate":0.11876866828715345,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":139,"std_tcp_pkts":0,"min_tcp_pkts":139,"max_tcp_pkts":139,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":34,"ip.session_id":19,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.419704914093018,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.1187690079644224,"tcp_bytes_per_flow":0,"byte_rate":0.1187690079644224,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":35,"ip.session_id":19,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.419790029525757,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.06103515625,"time_between_pkts_avg":0.06103515625,"time_between_pkts_max":0.06103515625,"time_between_pkts_min":0.06103515625,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11876780733169005,"tcp_bytes_per_flow":0,"byte_rate":0.11876780733169005,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":5900,"std_tcp_pkts":0,"min_tcp_pkts":5900,"max_tcp_pkts":5900,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":36,"ip.session_id":20,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.419803142547607,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.013113021850585938,"time_between_pkts_avg":0.013113021850585938,"time_between_pkts_max":0.013113021850585938,"time_between_pkts_min":0.013113021850585938,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11876762236241864,"tcp_bytes_per_flow":0,"byte_rate":0.11876762236241864,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":37,"ip.session_id":20,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.419824123382568,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0209808349609375,"time_between_pkts_avg":0.0209808349609375,"time_between_pkts_max":0.0209808349609375,"time_between_pkts_min":0.0209808349609375,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11876732641278276,"tcp_bytes_per_flow":0,"byte_rate":0.11876732641278276,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":53,"std_tcp_pkts":0,"min_tcp_pkts":53,"max_tcp_pkts":53,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":38,"ip.session_id":21,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.419803142547607,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11876762236241864,"tcp_bytes_per_flow":0,"byte_rate":0.11876762236241864,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":39,"ip.session_id":21,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.419872045516968,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.04792213439941406,"time_between_pkts_avg":0.04792213439941406,"time_between_pkts_max":0.04792213439941406,"time_between_pkts_min":0.04792213439941406,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11876665044244167,"tcp_bytes_per_flow":0,"byte_rate":0.11876665044244167,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":1723,"std_tcp_pkts":0,"min_tcp_pkts":1723,"max_tcp_pkts":1723,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":40,"ip.session_id":22,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.419803142547607,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11876762236241864,"tcp_bytes_per_flow":0,"byte_rate":0.11876762236241864,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":41,"ip.session_id":22,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.419894933700562,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.02288818359375,"time_between_pkts_avg":0.02288818359375,"time_between_pkts_max":0.02288818359375,"time_between_pkts_min":0.02288818359375,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11876632759365062,"tcp_bytes_per_flow":0,"byte_rate":0.11876632759365062,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":8888,"std_tcp_pkts":0,"min_tcp_pkts":8888,"max_tcp_pkts":8888,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":42,"ip.session_id":23,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.419803142547607,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11876762236241864,"tcp_bytes_per_flow":0,"byte_rate":0.11876762236241864,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":43,"ip.session_id":23,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.41991901397705,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.024080276489257812,"time_between_pkts_avg":0.024080276489257812,"time_between_pkts_max":0.024080276489257812,"time_between_pkts_min":0.024080276489257812,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11876598793171309,"tcp_bytes_per_flow":0,"byte_rate":0.11876598793171309,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":443,"std_tcp_pkts":0,"min_tcp_pkts":443,"max_tcp_pkts":443,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":44,"ip.session_id":24,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.41992998123169,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.010967254638671875,"time_between_pkts_avg":0.010967254638671875,"time_between_pkts_max":0.010967254638671875,"time_between_pkts_min":0.010967254638671875,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11876583323484091,"tcp_bytes_per_flow":0,"byte_rate":0.11876583323484091,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":45,"ip.session_id":24,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.419964075088501,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.03314018249511719,"time_between_pkts_avg":0.03314018249511719,"time_between_pkts_max":0.03314018249511719,"time_between_pkts_min":0.03314018249511719,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11876535233192062,"tcp_bytes_per_flow":0,"byte_rate":0.11876535233192062,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":23,"std_tcp_pkts":0,"min_tcp_pkts":23,"max_tcp_pkts":23,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":46,"ip.session_id":25,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.419930934906006,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.00095367431640625,"time_between_pkts_avg":0.00095367431640625,"time_between_pkts_max":0.00095367431640625,"time_between_pkts_min":0.00095367431640625,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11876581978295803,"tcp_bytes_per_flow":0,"byte_rate":0.11876581978295803,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":47,"ip.session_id":25,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.420002937316895,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.03886222839355469,"time_between_pkts_avg":0.03886222839355469,"time_between_pkts_max":0.03886222839355469,"time_between_pkts_min":0.03886222839355469,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11876480417460027,"tcp_bytes_per_flow":0,"byte_rate":0.11876480417460027,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":995,"std_tcp_pkts":0,"min_tcp_pkts":995,"max_tcp_pkts":995,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":48,"ip.session_id":26,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.419930934906006,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11876581978295803,"tcp_bytes_per_flow":0,"byte_rate":0.11876581978295803,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":49,"ip.session_id":26,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.4200119972229,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.009059906005859375,"time_between_pkts_avg":0.009059906005859375,"time_between_pkts_max":0.009059906005859375,"time_between_pkts_min":0.009059906005859375,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11876467638405044,"tcp_bytes_per_flow":0,"byte_rate":0.11876467638405044,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":111,"std_tcp_pkts":0,"min_tcp_pkts":111,"max_tcp_pkts":111,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":50,"ip.session_id":27,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.419930934906006,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11876581978295803,"tcp_bytes_per_flow":0,"byte_rate":0.11876581978295803,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":51,"ip.session_id":27,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.420045137405396,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.03314018249511719,"time_between_pkts_avg":0.03314018249511719,"time_between_pkts_max":0.03314018249511719,"time_between_pkts_min":0.03314018249511719,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.1187642089420136,"tcp_bytes_per_flow":0,"byte_rate":0.1187642089420136,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":199,"std_tcp_pkts":0,"min_tcp_pkts":199,"max_tcp_pkts":199,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":52,"ip.session_id":28,"meta.direction":0,"ip.pkts_per_flow":2,"duration":8.450720071792603,"ip.header_len":40,"ip.payload_len":44,"ip.avg_bytes_tot_len":42.666666666666664,"time_between_pkts_sum":30.334949493408203,"time_between_pkts_avg":15.167474746704102,"time_between_pkts_max":30.26413917541504,"time_between_pkts_min":0.07081031799316406,"time_between_pkts_std":21.34990758167848,"(-0.001, 50.0]":2,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":2,"pkts_rate":0.23666622287912933,"tcp_bytes_per_flow":0,"byte_rate":0.23666622287912933,"tcp.tcp_session_payload_up_len":2,"tcp.tcp_session_payload_down_len":2,"(-0.001, 150.0]":2,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":1,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":2,"sport_le":0,"dport_g":2,"dport_le":0,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":53,"ip.session_id":28,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.420182943344116,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.666666666666664,"time_between_pkts_sum":0.06699562072753906,"time_between_pkts_avg":0.06699562072753906,"time_between_pkts_max":0.06699562072753906,"time_between_pkts_min":0.06699562072753906,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11876226522969645,"tcp_bytes_per_flow":0,"byte_rate":0.11876226522969645,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":8080,"std_tcp_pkts":0,"min_tcp_pkts":8080,"max_tcp_pkts":8080,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":54,"ip.session_id":29,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.420193910598755,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.010967254638671875,"time_between_pkts_avg":0.010967254638671875,"time_between_pkts_max":0.010967254638671875,"time_between_pkts_min":0.010967254638671875,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.118762110542522,"tcp_bytes_per_flow":0,"byte_rate":0.118762110542522,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":55,"ip.session_id":29,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.42024302482605,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.049114227294921875,"time_between_pkts_avg":0.049114227294921875,"time_between_pkts_max":0.049114227294921875,"time_between_pkts_min":0.049114227294921875,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11876141781794458,"tcp_bytes_per_flow":0,"byte_rate":0.11876141781794458,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":1025,"std_tcp_pkts":0,"min_tcp_pkts":1025,"max_tcp_pkts":1025,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":56,"ip.session_id":30,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.420193910598755,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.118762110542522,"tcp_bytes_per_flow":0,"byte_rate":0.118762110542522,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":57,"ip.session_id":30,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.42027997970581,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.03695487976074219,"time_between_pkts_avg":0.03695487976074219,"time_between_pkts_max":0.03695487976074219,"time_between_pkts_min":0.03695487976074219,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11876089659846895,"tcp_bytes_per_flow":0,"byte_rate":0.11876089659846895,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":143,"std_tcp_pkts":0,"min_tcp_pkts":143,"max_tcp_pkts":143,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":58,"ip.session_id":31,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.420193910598755,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.118762110542522,"tcp_bytes_per_flow":0,"byte_rate":0.118762110542522,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":59,"ip.session_id":31,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.420319080352783,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.03910064697265625,"time_between_pkts_avg":0.03910064697265625,"time_between_pkts_max":0.03910064697265625,"time_between_pkts_min":0.03910064697265625,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11876034511961789,"tcp_bytes_per_flow":0,"byte_rate":0.11876034511961789,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":3389,"std_tcp_pkts":0,"min_tcp_pkts":3389,"max_tcp_pkts":3389,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":60,"ip.session_id":32,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.420193910598755,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.118762110542522,"tcp_bytes_per_flow":0,"byte_rate":0.118762110542522,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":61,"ip.session_id":32,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.420330047607422,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.010967254638671875,"time_between_pkts_avg":0.010967254638671875,"time_between_pkts_max":0.010967254638671875,"time_between_pkts_min":0.010967254638671875,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11876019043744526,"tcp_bytes_per_flow":0,"byte_rate":0.11876019043744526,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":3306,"std_tcp_pkts":0,"min_tcp_pkts":3306,"max_tcp_pkts":3306,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":62,"ip.session_id":33,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.420356035232544,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.025987625122070312,"time_between_pkts_avg":0.025987625122070312,"time_between_pkts_max":0.025987625122070312,"time_between_pkts_min":0.025987625122070312,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.1187598239095579,"tcp_bytes_per_flow":0,"byte_rate":0.1187598239095579,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":63,"ip.session_id":33,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.420378923416138,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.02288818359375,"time_between_pkts_avg":0.02288818359375,"time_between_pkts_max":0.02288818359375,"time_between_pkts_min":0.02288818359375,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11875950109787947,"tcp_bytes_per_flow":0,"byte_rate":0.11875950109787947,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":1720,"std_tcp_pkts":0,"min_tcp_pkts":1720,"max_tcp_pkts":1720,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":64,"ip.session_id":34,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.420356035232544,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.1187598239095579,"tcp_bytes_per_flow":0,"byte_rate":0.1187598239095579,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":65,"ip.session_id":34,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.420411109924316,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.03218650817871094,"time_between_pkts_avg":0.03218650817871094,"time_between_pkts_max":0.03218650817871094,"time_between_pkts_min":0.03218650817871094,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11875904714692584,"tcp_bytes_per_flow":0,"byte_rate":0.11875904714692584,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":445,"std_tcp_pkts":0,"min_tcp_pkts":445,"max_tcp_pkts":445,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":66,"ip.session_id":35,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.420356035232544,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.1187598239095579,"tcp_bytes_per_flow":0,"byte_rate":0.1187598239095579,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":67,"ip.session_id":35,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.420443058013916,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.031948089599609375,"time_between_pkts_avg":0.031948089599609375,"time_between_pkts_max":0.031948089599609375,"time_between_pkts_min":0.031948089599609375,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11875859656200377,"tcp_bytes_per_flow":0,"byte_rate":0.11875859656200377,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":6547,"std_tcp_pkts":0,"min_tcp_pkts":6547,"max_tcp_pkts":6547,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":68,"ip.session_id":36,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.420356035232544,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.1187598239095579,"tcp_bytes_per_flow":0,"byte_rate":0.1187598239095579,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":69,"ip.session_id":36,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.420455932617188,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.012874603271484375,"time_between_pkts_avg":0.012874603271484375,"time_between_pkts_max":0.012874603271484375,"time_between_pkts_min":0.012874603271484375,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.1187584149839719,"tcp_bytes_per_flow":0,"byte_rate":0.1187584149839719,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":3006,"std_tcp_pkts":0,"min_tcp_pkts":3006,"max_tcp_pkts":3006,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":70,"ip.session_id":37,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.45198392868042,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":1.2638568878173828,"time_between_pkts_avg":1.2638568878173828,"time_between_pkts_max":1.2638568878173828,"time_between_pkts_min":1.2638568878173828,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11831541664515761,"tcp_bytes_per_flow":0,"byte_rate":0.11831541664515761,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":71,"ip.session_id":37,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.452031135559082,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.047206878662109375,"time_between_pkts_avg":0.047206878662109375,"time_between_pkts_max":0.047206878662109375,"time_between_pkts_min":0.047206878662109375,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11831475582157239,"tcp_bytes_per_flow":0,"byte_rate":0.11831475582157239,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":9002,"std_tcp_pkts":0,"min_tcp_pkts":9002,"max_tcp_pkts":9002,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":72,"ip.session_id":38,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.452045917510986,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.014781951904296875,"time_between_pkts_avg":0.014781951904296875,"time_between_pkts_max":0.014781951904296875,"time_between_pkts_min":0.014781951904296875,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11831454889853302,"tcp_bytes_per_flow":0,"byte_rate":0.11831454889853302,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":73,"ip.session_id":38,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.45206093788147,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.015020370483398438,"time_between_pkts_avg":0.015020370483398438,"time_between_pkts_max":0.015020370483398438,"time_between_pkts_min":0.015020370483398438,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11831433863876667,"tcp_bytes_per_flow":0,"byte_rate":0.11831433863876667,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":49158,"std_tcp_pkts":0,"min_tcp_pkts":49158,"max_tcp_pkts":49158,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":74,"ip.session_id":39,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.452045917510986,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11831454889853302,"tcp_bytes_per_flow":0,"byte_rate":0.11831454889853302,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":75,"ip.session_id":39,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.452121019363403,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.06008148193359375,"time_between_pkts_avg":0.06008148193359375,"time_between_pkts_max":0.06008148193359375,"time_between_pkts_min":0.06008148193359375,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11831349760717434,"tcp_bytes_per_flow":0,"byte_rate":0.11831349760717434,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":211,"std_tcp_pkts":0,"min_tcp_pkts":211,"max_tcp_pkts":211,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":76,"ip.session_id":40,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.452045917510986,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11831454889853302,"tcp_bytes_per_flow":0,"byte_rate":0.11831454889853302,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":77,"ip.session_id":40,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.45213007926941,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.009059906005859375,"time_between_pkts_avg":0.009059906005859375,"time_between_pkts_max":0.009059906005859375,"time_between_pkts_min":0.009059906005859375,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11831337078598755,"tcp_bytes_per_flow":0,"byte_rate":0.11831337078598755,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":6839,"std_tcp_pkts":0,"min_tcp_pkts":6839,"max_tcp_pkts":6839,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":78,"ip.session_id":41,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.452144145965576,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.014066696166992188,"time_between_pkts_avg":0.014066696166992188,"time_between_pkts_max":0.014066696166992188,"time_between_pkts_min":0.014066696166992188,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11831317387994685,"tcp_bytes_per_flow":0,"byte_rate":0.11831317387994685,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":79,"ip.session_id":41,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.452166080474854,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.02193450927734375,"time_between_pkts_avg":0.02193450927734375,"time_between_pkts_max":0.02193450927734375,"time_between_pkts_min":0.02193450927734375,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11831286684132675,"tcp_bytes_per_flow":0,"byte_rate":0.11831286684132675,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":32785,"std_tcp_pkts":0,"min_tcp_pkts":32785,"max_tcp_pkts":32785,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":80,"ip.session_id":42,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.452144145965576,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11831317387994685,"tcp_bytes_per_flow":0,"byte_rate":0.11831317387994685,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":81,"ip.session_id":42,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.45217514038086,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.009059906005859375,"time_between_pkts_avg":0.009059906005859375,"time_between_pkts_max":0.009059906005859375,"time_between_pkts_min":0.009059906005859375,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11831274002149221,"tcp_bytes_per_flow":0,"byte_rate":0.11831274002149221,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":18040,"std_tcp_pkts":0,"min_tcp_pkts":18040,"max_tcp_pkts":18040,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":82,"ip.session_id":43,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.452144145965576,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11831317387994685,"tcp_bytes_per_flow":0,"byte_rate":0.11831317387994685,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":83,"ip.session_id":43,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.452189922332764,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.014781951904296875,"time_between_pkts_avg":0.014781951904296875,"time_between_pkts_max":0.014781951904296875,"time_between_pkts_min":0.014781951904296875,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11831253310550371,"tcp_bytes_per_flow":0,"byte_rate":0.11831253310550371,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":9102,"std_tcp_pkts":0,"min_tcp_pkts":9102,"max_tcp_pkts":9102,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":84,"ip.session_id":44,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.452144145965576,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11831317387994685,"tcp_bytes_per_flow":0,"byte_rate":0.11831317387994685,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":0,"dport_le":1,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":85,"ip.session_id":44,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.452203035354614,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.013113021850585938,"time_between_pkts_avg":0.013113021850585938,"time_between_pkts_max":0.013113021850585938,"time_between_pkts_min":0.013113021850585938,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.1183123495516036,"tcp_bytes_per_flow":0,"byte_rate":0.1183123495516036,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":0,"sport_le":1,"dport_g":1,"dport_le":0,"mean_tcp_pkts":42,"std_tcp_pkts":0,"min_tcp_pkts":42,"max_tcp_pkts":42,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":86,"ip.session_id":45,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.452144145965576,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11831317387994685,"tcp_bytes_per_flow":0,"byte_rate":0.11831317387994685,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":87,"ip.session_id":45,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.452233076095581,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.030040740966796875,"time_between_pkts_avg":0.030040740966796875,"time_between_pkts_max":0.030040740966796875,"time_between_pkts_min":0.030040740966796875,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11831192904845204,"tcp_bytes_per_flow":0,"byte_rate":0.11831192904845204,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":32778,"std_tcp_pkts":0,"min_tcp_pkts":32778,"max_tcp_pkts":32778,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":88,"ip.session_id":46,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.452144145965576,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11831317387994685,"tcp_bytes_per_flow":0,"byte_rate":0.11831317387994685,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":89,"ip.session_id":46,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.452255964279175,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.02288818359375,"time_between_pkts_avg":0.02288818359375,"time_between_pkts_max":0.02288818359375,"time_between_pkts_min":0.02288818359375,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11831160866710477,"tcp_bytes_per_flow":0,"byte_rate":0.11831160866710477,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":9575,"std_tcp_pkts":0,"min_tcp_pkts":9575,"max_tcp_pkts":9575,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":90,"ip.session_id":47,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.452144145965576,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11831317387994685,"tcp_bytes_per_flow":0,"byte_rate":0.11831317387994685,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":91,"ip.session_id":47,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.452281951904297,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.025987625122070312,"time_between_pkts_avg":0.025987625122070312,"time_between_pkts_max":0.025987625122070312,"time_between_pkts_min":0.025987625122070312,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11831124490288687,"tcp_bytes_per_flow":0,"byte_rate":0.11831124490288687,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":7911,"std_tcp_pkts":0,"min_tcp_pkts":7911,"max_tcp_pkts":7911,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":92,"ip.session_id":48,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.452144145965576,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11831317387994685,"tcp_bytes_per_flow":0,"byte_rate":0.11831317387994685,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":93,"ip.session_id":48,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.452294111251831,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.012159347534179688,"time_between_pkts_avg":0.012159347534179688,"time_between_pkts_max":0.012159347534179688,"time_between_pkts_min":0.012159347534179688,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11831107470204849,"tcp_bytes_per_flow":0,"byte_rate":0.11831107470204849,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":2048,"std_tcp_pkts":0,"min_tcp_pkts":2048,"max_tcp_pkts":2048,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":94,"ip.session_id":49,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.452317953109741,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.02384185791015625,"time_between_pkts_avg":0.02384185791015625,"time_between_pkts_max":0.02384185791015625,"time_between_pkts_min":0.02384185791015625,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11831074097633587,"tcp_bytes_per_flow":0,"byte_rate":0.11831074097633587,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":95,"ip.session_id":49,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.452337980270386,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.02002716064453125,"time_between_pkts_avg":0.02002716064453125,"time_between_pkts_max":0.02002716064453125,"time_between_pkts_min":0.02002716064453125,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11831046064819223,"tcp_bytes_per_flow":0,"byte_rate":0.11831046064819223,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":7920,"std_tcp_pkts":0,"min_tcp_pkts":7920,"max_tcp_pkts":7920,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":96,"ip.session_id":50,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.452317953109741,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11831074097633587,"tcp_bytes_per_flow":0,"byte_rate":0.11831074097633587,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":97,"ip.session_id":50,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.452347993850708,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.010013580322265625,"time_between_pkts_avg":0.010013580322265625,"time_between_pkts_max":0.010013580322265625,"time_between_pkts_min":0.010013580322265625,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11831032048461856,"tcp_bytes_per_flow":0,"byte_rate":0.11831032048461856,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":1296,"std_tcp_pkts":0,"min_tcp_pkts":1296,"max_tcp_pkts":1296,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":98,"ip.session_id":51,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.452317953109741,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11831074097633587,"tcp_bytes_per_flow":0,"byte_rate":0.11831074097633587,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":99,"ip.session_id":51,"meta.direction":1,"ip.pkts_per_flow":1,"duration":8.452378034591675,"ip.header_len":20,"ip.payload_len":20,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.030040740966796875,"time_between_pkts_avg":0.030040740966796875,"time_between_pkts_max":0.030040740966796875,"time_between_pkts_min":0.030040740966796875,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.1183098999958902,"tcp_bytes_per_flow":0,"byte_rate":0.1183098999958902,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":0,"tcp.rst":1,"tcp.psh":0,"tcp.ack":1,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":5510,"std_tcp_pkts":0,"min_tcp_pkts":5510,"max_tcp_pkts":5510,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0},{"_id":100,"ip.session_id":52,"meta.direction":0,"ip.pkts_per_flow":1,"duration":8.452317953109741,"ip.header_len":20,"ip.payload_len":24,"ip.avg_bytes_tot_len":42.0,"time_between_pkts_sum":0.0,"time_between_pkts_avg":0.0,"time_between_pkts_max":0.0,"time_between_pkts_min":0.0,"time_between_pkts_std":0.0,"(-0.001, 50.0]":1,"(50.0, 100.0]":0,"(100.0, 150.0]":0,"(150.0, 200.0]":0,"(200.0, 250.0]":0,"(250.0, 300.0]":0,"(300.0, 350.0]":0,"(350.0, 400.0]":0,"(400.0, 450.0]":0,"(450.0, 500.0]":0,"(500.0, 550.0]":0,"tcp_pkts_per_flow":1,"pkts_rate":0.11831074097633587,"tcp_bytes_per_flow":0,"byte_rate":0.11831074097633587,"tcp.tcp_session_payload_up_len":1,"tcp.tcp_session_payload_down_len":1,"(-0.001, 150.0]":1,"(150.0, 300.0]":0,"(300.0, 450.0]":0,"(450.0, 600.0]":0,"(600.0, 750.0]":0,"(750.0, 900.0]":0,"(900.0, 1050.0]":0,"(1050.0, 1200.0]":0,"(1200.0, 1350.0]":0,"(1350.0, 1500.0]":0,"(1500.0, 10000.0]":0,"tcp.fin":0,"tcp.syn":1,"tcp.rst":0,"tcp.psh":0,"tcp.ack":0,"tcp.urg":0,"sport_g":1,"sport_le":0,"dport_g":1,"dport_le":0,"mean_tcp_pkts":59086,"std_tcp_pkts":0,"min_tcp_pkts":59086,"max_tcp_pkts":59086,"entropy_tcp_pkts":0,"mean_tcp_len":0,"std_tcp_len":0,"min_tcp_len":0,"max_tcp_len":0,"entropy_tcp_len":0,"ssl.tls_version":0,"malware":0}], "fields": [{"id": "_id", "type": "int"}, {"id": "ip.session_id", "type": "numeric"}, {"id": "meta.direction", "type": "numeric"}, {"id": "ip.pkts_per_flow", "type": "numeric"}, {"id": "duration", "type": "numeric"}, {"id": "ip.header_len", "type": "numeric"}, {"id": "ip.payload_len", "type": "numeric"}, {"id": "ip.avg_bytes_tot_len", "type": "numeric"}, {"id": "time_between_pkts_sum", "type": "numeric"}, {"id": "time_between_pkts_avg", "type": "numeric"}, {"id": "time_between_pkts_max", "type": "numeric"}, {"id": "time_between_pkts_min", "type": "numeric"}, {"id": "time_between_pkts_std", "type": "numeric"}, {"id": "(-0.001, 50.0]", "type": "numeric"}, {"id": "(50.0, 100.0]", "type": "numeric"}, {"id": "(100.0, 150.0]", "type": "numeric"}, {"id": "(150.0, 200.0]", "type": "numeric"}, {"id": "(200.0, 250.0]", "type": "numeric"}, {"id": "(250.0, 300.0]", "type": "numeric"}, {"id": "(300.0, 350.0]", "type": "numeric"}, {"id": "(350.0, 400.0]", "type": "numeric"}, {"id": "(400.0, 450.0]", "type": "numeric"}, {"id": "(450.0, 500.0]", "type": "numeric"}, {"id": "(500.0, 550.0]", "type": "numeric"}, {"id": "tcp_pkts_per_flow", "type": "numeric"}, {"id": "pkts_rate", "type": "numeric"}, {"id": "tcp_bytes_per_flow", "type": "numeric"}, {"id": "byte_rate", "type": "numeric"}, {"id": "tcp.tcp_session_payload_up_len", "type": "numeric"}, {"id": "tcp.tcp_session_payload_down_len", "type": "numeric"}, {"id": "(-0.001, 150.0]", "type": "numeric"}, {"id": "(150.0, 300.0]", "type": "numeric"}, {"id": "(300.0, 450.0]", "type": "numeric"}, {"id": "(450.0, 600.0]", "type": "numeric"}, {"id": "(600.0, 750.0]", "type": "numeric"}, {"id": "(750.0, 900.0]", "type": "numeric"}, {"id": "(900.0, 1050.0]", "type": "numeric"}, {"id": "(1050.0, 1200.0]", "type": "numeric"}, {"id": "(1200.0, 1350.0]", "type": "numeric"}, {"id": "(1350.0, 1500.0]", "type": "numeric"}, {"id": "(1500.0, 10000.0]", "type": "numeric"}, {"id": "tcp.fin", "type": "numeric"}, {"id": "tcp.syn", "type": "numeric"}, {"id": "tcp.rst", "type": "numeric"}, {"id": "tcp.psh", "type": "numeric"}, {"id": "tcp.ack", "type": "numeric"}, {"id": "tcp.urg", "type": "numeric"}, {"id": "sport_g", "type": "numeric"}, {"id": "sport_le", "type": "numeric"}, {"id": "dport_g", "type": "numeric"}, {"id": "dport_le", "type": "numeric"}, {"id": "mean_tcp_pkts", "type": "numeric"}, {"id": "std_tcp_pkts", "type": "numeric"}, {"id": "min_tcp_pkts", "type": "numeric"}, {"id": "max_tcp_pkts", "type": "numeric"}, {"id": "entropy_tcp_pkts", "type": "numeric"}, {"id": "mean_tcp_len", "type": "numeric"}, {"id": "std_tcp_len", "type": "numeric"}, {"id": "min_tcp_len", "type": "numeric"}, {"id": "max_tcp_len", "type": "numeric"}, {"id": "entropy_tcp_len", "type": "numeric"}, {"id": "ssl.tls_version", "type": "numeric"}, {"id": "malware", "type": "numeric"}], "_links": {"start": "/api/3/action/datastore_search?resource_id=c9c6468e-afcb-482d-9d31-346cc48d5bbe", "next": "/api/3/action/datastore_search?resource_id=c9c6468e-afcb-482d-9d31-346cc48d5bbe&offset=100"}, "total": 2009, "total_was_estimated": false}}